Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/T3DKw-3I3o5qjjLMiJ5XI6jbVwE.roa
File: T3DKw-3I3o5qjjLMiJ5XI6jbVwE.roa (raw, json)
Hash identifier: a51BnzgzAtdl24GLPbIBPvd5N8GYGkQZKGp9ifad12s=
Subject key identifier: 4F:70:CA:C3:ED:C8:DE:8E:6A:8E:32:CC:88:9E:57:23:A8:DB:57:01
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0F5C9DD0
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/T3DKw-3I3o5qjjLMiJ5XI6jbVwE.roa
Signing time: Sat 01 Jan 2022 03:51:25 +0000
ROA not before: Sat 01 Jan 2022 03:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35625
IP address blocks: 195.95.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257727952 (0xf5c9dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jan 1 03:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f70cac3edc8de8e6a8e32cc889e5723a8db5701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:da:84:f2:c1:4b:d9:e6:22:97:31:41:1d:
88:5d:6e:52:45:13:0b:4f:b2:6e:00:bf:1c:a0:d7:
77:cb:fd:cd:55:d4:33:3b:ba:56:46:9d:cb:5d:4e:
32:95:19:51:0a:9b:19:36:f2:67:00:e7:b3:e6:7a:
fe:f3:2b:c0:87:6f:ef:a0:10:19:4c:e4:f8:ae:66:
00:8e:aa:28:b3:cb:d2:10:0e:c7:63:b6:1c:02:2c:
be:dc:18:89:2c:27:05:a4:f7:b2:9a:78:5a:6d:18:
39:e0:ab:40:c5:86:a7:dc:34:4b:9a:65:87:d1:27:
87:42:5e:3e:70:6d:40:e7:e5:39:69:0a:97:26:12:
04:6b:04:3b:20:aa:7a:a6:8b:2a:c1:58:90:13:dc:
8f:2a:3c:2a:99:cf:b2:c6:1a:cc:0f:c2:ea:b4:b9:
f1:5a:28:cb:90:f8:49:c8:c8:f6:1a:fd:08:21:4e:
96:d8:0a:50:c8:08:74:64:0c:9b:1e:9d:aa:ef:90:
1f:d4:f8:16:de:d6:1e:e0:4e:03:32:71:21:76:ba:
83:fe:0e:2a:77:da:47:9a:fe:e8:da:1d:66:2f:0a:
9d:8f:ba:95:e6:8b:6c:98:56:d5:b3:57:ec:fd:cf:
12:f5:1b:f9:95:fa:c6:55:0a:e7:e4:2b:c3:5a:76:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:CA:C3:ED:C8:DE:8E:6A:8E:32:CC:88:9E:57:23:A8:DB:57:01
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/T3DKw-3I3o5qjjLMiJ5XI6jbVwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.168.0/24
Signature Algorithm: sha256WithRSAEncryption
18:63:28:92:40:d5:1c:4d:ac:ad:e1:dd:50:77:8b:3c:23:4a:
40:44:73:f8:af:8e:8d:c9:88:55:b9:5e:2a:98:f1:86:16:6e:
bd:13:6d:40:8d:ea:a0:1d:e8:60:c4:72:24:63:16:e5:b5:6d:
7f:46:37:dd:f6:ed:b1:16:85:55:d6:04:3d:16:2b:a5:3b:4a:
53:c1:27:78:26:46:47:d1:69:c4:d9:6a:99:57:34:ac:ff:13:
dc:a0:43:87:1b:9f:ca:00:1c:71:c8:33:6c:d8:aa:6b:a5:08:
a6:2d:4e:ab:7d:09:61:65:5a:72:0f:63:27:ba:4f:94:3a:80:
2a:90:68:bc:16:ac:78:44:52:13:a0:65:63:40:34:a7:36:df:
b1:42:7b:69:2c:fd:29:d1:c3:31:e8:ca:f5:64:86:98:d1:45:
65:c8:c0:ef:6d:3c:bf:3e:ec:6e:c2:71:51:4c:81:a1:ef:bb:
96:52:00:9e:c0:da:3d:a7:bc:49:e7:58:6c:0e:3d:60:22:7e:
9e:6a:c9:e2:29:b2:37:98:b0:27:b1:d2:21:81:f1:95:8f:14:
67:b4:72:41:be:d0:05:ee:31:de:c4:9f:6f:3c:5f:96:11:54:
26:6a:8f:a8:0b:7e:d3:2c:df:9d:c4:cc:d8:ca:d1:72:fe:42:
58:bb:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:39 2025 by rpki-client