Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/nBBhxPt5aRlO3T4e2sCj6vIygmk.roa
File: nBBhxPt5aRlO3T4e2sCj6vIygmk.roa (raw, json)
Hash identifier: DNDGvTGfhtAsgi+LSdRaedB0v9B8V074yNWKfolgxxI=
Subject key identifier: 9C:10:61:C4:FB:79:69:19:4E:DD:3E:1E:DA:C0:A3:EA:F2:32:82:69
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 02CF8965
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/nBBhxPt5aRlO3T4e2sCj6vIygmk.roa
Signing time: Thu 20 Jan 2022 14:03:26 +0000
ROA not before: Thu 20 Jan 2022 14:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 95.161.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47155557 (0x2cf8965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 20 14:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c1061c4fb7969194edd3e1edac0a3eaf2328269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:e2:32:78:27:3b:e7:da:72:ac:ab:30:a5:
37:6a:52:b1:5a:e6:32:a5:5f:c1:36:6d:5d:80:fc:
2b:24:9c:7d:31:6e:4d:29:4a:eb:fe:23:00:07:0b:
04:06:88:a4:1e:aa:a1:41:fb:a9:17:e3:26:87:07:
22:f4:ec:03:e6:10:51:42:7c:97:90:5c:02:34:52:
38:24:40:98:30:4a:6c:0e:53:79:a7:8f:fb:62:3c:
8d:e9:40:69:d2:05:00:72:0f:ed:a2:d3:1f:ca:60:
af:e3:df:88:3a:e6:08:c6:14:c5:07:06:f2:d5:84:
4b:c3:01:cf:c9:5a:ca:c0:69:55:28:75:ad:aa:69:
e3:8c:09:43:7f:bf:f9:46:d2:25:3f:30:34:22:49:
5b:33:ac:11:14:b0:e3:08:97:23:4d:8e:de:bc:cc:
51:1e:8f:41:0c:19:27:36:10:77:fb:33:04:1d:76:
95:7f:a3:95:9e:2e:81:d9:5a:b1:31:37:d8:2d:d5:
24:30:cd:56:03:44:0e:23:05:f1:cd:cd:a2:7a:95:
96:65:43:a1:3f:54:0b:27:f2:d7:6e:68:6b:72:4f:
7b:f1:74:c9:84:3c:e1:e9:c1:3e:81:5c:eb:11:a7:
bf:71:c9:69:ed:96:fa:3d:c8:a8:d2:bd:96:64:28:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:10:61:C4:FB:79:69:19:4E:DD:3E:1E:DA:C0:A3:EA:F2:32:82:69
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/nBBhxPt5aRlO3T4e2sCj6vIygmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:75:31:c1:7d:2a:eb:3b:7c:a7:cb:53:cf:83:a9:87:90:d0:
3c:5d:ad:d1:64:c5:f9:66:e2:82:e9:8e:58:64:91:83:e2:fc:
19:86:12:a2:46:7e:66:37:a8:4a:94:e4:5c:d3:80:07:66:1f:
be:38:79:d5:7a:0e:2e:df:fa:cf:73:62:5b:5b:85:6d:7f:8d:
b9:76:75:75:4e:3d:33:ad:9f:5c:b0:b0:41:db:a0:3d:9e:ea:
f8:28:00:d3:64:5b:dd:d7:de:3b:65:f5:9b:d3:a8:20:60:1c:
50:98:bd:01:70:db:b7:a3:07:da:d5:00:8c:3f:a3:05:03:d1:
f0:a2:49:d9:fa:1a:b2:21:39:87:d0:05:58:20:6c:a6:ad:7e:
c4:3d:c4:b8:8c:17:b2:d5:b7:7e:67:c3:52:7c:d3:f2:18:6f:
f6:7b:dd:b7:19:04:40:3e:83:b2:db:20:07:61:de:cb:b3:42:
d5:29:ad:91:42:34:37:ed:4d:c9:f3:04:c5:9f:60:bd:b8:f3:
1e:d9:cb:bd:db:03:21:dd:c9:7d:09:d4:df:6e:43:bf:a9:2a:
b1:95:62:bb:49:95:99:ba:7b:e7:90:d6:99:8c:db:9d:9b:61:
da:27:4a:35:af:1c:a9:f6:42:06:d5:15:fc:4c:29:29:92:9a:
b0:ef:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:23:07 2025 by rpki-client