Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cHgahwyI7rDMMMhHRQfmeemuue0.roa
File: cHgahwyI7rDMMMhHRQfmeemuue0.roa (raw, json)
Hash identifier: lDudvuCcedC02hhqM9SzU/R//XvNSEeYurQBgmdxnoo=
Subject key identifier: 70:78:1A:87:0C:88:EE:B0:CC:30:C8:47:45:07:E6:79:E9:AE:B9:ED
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018896BCBED80F58497EDE1C1CCD986DD842
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cHgahwyI7rDMMMhHRQfmeemuue0.roa
Signing time: Wed 07 Jun 2023 16:42:12 +0000
ROA not before: Wed 07 Jun 2023 16:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 195.133.85.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:bc:be:d8:0f:58:49:7e:de:1c:1c:cd:98:6d:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 7 16:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70781a870c88eeb0cc30c8474507e679e9aeb9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:68:d2:5a:0d:94:75:eb:b7:8f:2c:d5:5d:
ec:9c:0b:a6:c1:22:83:dc:63:1f:24:27:2e:ff:ee:
e7:c1:ba:55:53:6a:dd:6e:b0:20:ff:92:4b:04:48:
0c:53:a5:4c:b6:56:9e:e1:4f:17:57:78:d7:0a:31:
d7:26:ae:08:e4:6a:f4:91:fe:09:79:f5:aa:21:c0:
f8:51:02:71:42:53:df:cc:64:d3:97:9a:16:ae:11:
e0:77:12:45:61:7f:6b:4f:2b:82:84:bd:8a:25:7d:
a6:c3:5f:60:d2:0c:8b:3c:37:2d:f3:f8:ef:e0:72:
ec:5b:c5:24:27:c1:c0:0c:3f:c4:c2:94:7e:ec:6e:
09:2d:61:6b:bd:6c:1c:5a:02:9f:4a:59:7b:c6:72:
4d:c4:93:5a:1e:c1:89:9a:c7:57:4a:80:73:a1:39:
6d:12:20:fb:8b:44:c2:b9:93:04:3d:80:47:fd:68:
fc:6e:7c:98:eb:03:4f:52:29:e9:4d:07:92:01:81:
ee:75:4a:e6:f9:1e:fc:39:df:56:10:b4:e5:0c:35:
4f:f3:b7:85:3e:c4:91:6b:a0:e0:da:44:91:18:d0:
41:52:27:09:8c:d0:49:ef:d3:05:1c:ff:db:49:ef:
92:13:d0:4d:b6:6d:0e:b3:98:c0:57:60:21:5c:81:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:1A:87:0C:88:EE:B0:CC:30:C8:47:45:07:E6:79:E9:AE:B9:ED
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cHgahwyI7rDMMMhHRQfmeemuue0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.170.0/24
194.87.246.0/24
195.133.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:32:6a:0d:81:3f:e7:65:bc:11:04:cd:11:7c:ca:3c:27:11:
b2:64:48:82:54:99:b8:30:05:92:87:5d:fb:2e:83:33:88:c5:
eb:7a:16:97:d0:ab:cc:b7:30:ed:a4:e8:3c:7b:b1:e5:ea:e5:
bb:57:52:38:ce:61:7a:9c:33:db:68:d6:f4:83:fd:9f:4d:c5:
ee:0f:9b:5c:9a:4d:7a:e7:11:74:b0:d7:f2:97:99:35:72:92:
41:f7:05:0c:70:dc:3a:94:d3:6c:97:9c:54:7c:89:92:66:c2:
85:12:dd:70:5c:4c:53:d7:7a:1c:d4:ac:c5:43:53:3f:72:91:
5a:89:f0:1c:ef:bb:76:5d:fd:36:26:d5:98:f0:08:88:15:4d:
c4:82:20:f7:98:9a:8b:ec:f2:fc:d3:28:c8:27:1f:43:e2:56:
4d:ec:29:75:d7:cc:7f:15:f3:e9:fa:e2:05:9b:97:49:5d:3a:
8b:df:da:bb:55:05:64:ff:af:72:39:1b:8b:2f:67:74:4b:18:
ab:a9:ba:54:de:6d:06:40:84:4f:07:f6:40:bb:a1:11:18:8a:
06:b8:c8:bb:77:4d:e1:5c:85:9e:26:65:8f:26:ae:66:d9:d5:
00:24:59:8e:9d:a5:fd:74:fe:74:db:88:12:3e:1f:34:e2:f2:
2f:fc:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:33 2025 by rpki-client