Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/840aozcqttHWBqSFDBkBv31SOvw.roa
File: 840aozcqttHWBqSFDBkBv31SOvw.roa (raw, json)
Hash identifier: EoUbE01Qhpya5eetg10fdo02FqJrkCoifPjZMfKuFgQ=
Subject key identifier: F3:8D:1A:A3:37:2A:B6:D1:D6:06:A4:85:0C:19:01:BF:7D:52:3A:FC
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 01856F94BADE68F2B40E420DD509C473458A
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/840aozcqttHWBqSFDBkBv31SOvw.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196754
IP address blocks: 195.88.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ba:de:68:f2:b4:0e:42:0d:d5:09:c4:73:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f38d1aa3372ab6d1d606a4850c1901bf7d523afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:58:54:67:90:c8:65:ba:d5:9f:54:d6:81:
0b:16:d1:f0:b4:03:26:24:63:b6:7d:38:d4:75:25:
95:71:4c:ba:0b:6b:f6:4f:0a:3c:bf:2d:27:b0:a6:
a7:6f:d7:53:85:62:9f:56:61:34:92:bf:d7:b1:eb:
9a:bd:f5:d7:67:be:af:2c:cb:f6:97:89:00:fe:6c:
c6:f7:0f:70:32:00:a9:0e:d6:b2:d6:08:87:24:1d:
89:06:3e:a1:70:c2:41:54:7a:ba:26:f8:16:ef:2c:
92:4d:08:de:20:00:cd:4f:a5:03:b8:07:36:a4:01:
9a:04:46:38:f8:bd:f4:6f:b3:e7:3c:aa:86:70:ad:
db:9f:3b:87:4e:e0:8b:f0:fc:3c:9d:b9:df:ad:31:
71:9c:4c:6a:1a:3d:9c:f2:e3:c3:58:9d:4a:a9:57:
9e:45:f3:a4:fc:6f:10:54:be:08:a7:72:cb:fc:a0:
36:b0:e3:2f:c6:72:b8:41:5b:83:10:b1:76:61:70:
ad:b0:73:27:c1:15:56:a5:9d:51:a5:13:1b:5f:50:
72:70:51:c5:88:39:89:9a:b3:cc:e6:31:77:fb:b3:
6e:77:d4:0c:d5:f0:96:6b:a6:c5:d9:54:b8:2c:41:
80:e8:19:a7:2a:ba:93:5c:6b:ea:f4:b4:85:32:6a:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:1A:A3:37:2A:B6:D1:D6:06:A4:85:0C:19:01:BF:7D:52:3A:FC
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/840aozcqttHWBqSFDBkBv31SOvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.248.0/23
Signature Algorithm: sha256WithRSAEncryption
16:3a:c4:0c:0a:42:4a:76:12:9f:41:73:19:a0:f6:e9:23:8b:
1e:19:a7:3a:77:0b:8b:cf:ce:ad:cc:99:ea:5a:be:cb:0c:8b:
e7:65:27:62:f0:8c:64:95:bc:85:b9:24:91:cb:91:b2:45:57:
f7:b8:63:5f:b2:1a:15:cb:b6:e8:69:f6:91:3a:0f:ef:54:c6:
d5:ab:36:3e:be:bb:81:b8:72:31:df:24:b4:3b:b8:86:9d:00:
18:8c:1d:1d:fb:86:06:d9:c6:96:95:eb:e3:10:6f:ae:2b:3b:
d9:1d:3d:e4:3f:08:8d:cb:8f:90:3b:9f:5c:59:60:72:96:ea:
86:ce:64:7e:29:59:57:b1:03:91:37:68:ab:d0:6e:67:dd:a3:
67:8d:46:d5:76:3b:96:5b:65:b6:ab:cd:09:66:5f:37:a3:1a:
6f:c5:49:1a:80:a8:a3:ba:48:e6:8a:95:f9:38:83:9a:95:e8:
03:cf:b0:fc:ef:8e:5a:62:4f:72:2f:f4:14:2f:ad:a4:bc:b4:
6f:c7:b9:2b:0b:bf:95:c1:0a:1a:92:64:84:0c:3a:ef:28:5c:
5f:4b:b7:ad:92:f9:47:07:bd:07:b6:9a:36:5a:39:4e:05:99:
6c:84:a6:35:6c:8d:c7:59:49:c3:f1:87:21:41:81:12:5a:30:
77:a5:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:57 2025 by rpki-client