Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DBj0vDvq-2nM1aTSbWGjyHcPEUk.roa
File: DBj0vDvq-2nM1aTSbWGjyHcPEUk.roa (raw, json)
Hash identifier: ZKrXlzek+qVvAvaS+2w1xAqiiN3ZXp634ydTgzkeaOo=
Subject key identifier: 0C:18:F4:BC:3B:EA:FB:69:CC:D5:A4:D2:6D:61:A3:C8:77:0F:11:49
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0947C280
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DBj0vDvq-2nM1aTSbWGjyHcPEUk.roa
Signing time: Sat 01 Jan 2022 12:58:59 +0000
ROA not before: Sat 01 Jan 2022 12:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56862
IP address blocks: 195.91.146.0/23 maxlen: 23
195.91.144.0/23 maxlen: 23
195.91.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155697792 (0x947c280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c18f4bc3beafb69ccd5a4d26d61a3c8770f1149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:09:2c:a5:51:8c:5b:59:d8:ed:ee:6d:8e:
23:02:4d:1f:6b:a5:ea:60:22:ea:fc:27:13:37:40:
9f:ac:2d:6e:7f:a9:f7:65:2b:a8:eb:a4:a7:0b:f7:
b6:42:a3:2a:aa:25:d1:67:65:c2:60:4b:c1:cd:88:
7a:23:35:0a:49:ca:69:dc:21:6e:04:13:41:c0:4b:
bf:83:06:78:5d:da:ef:78:eb:94:f0:1c:8a:69:ab:
15:37:87:90:4f:e4:2c:0d:e9:5f:a3:41:2f:20:55:
db:a0:a7:b2:25:2a:04:ac:5a:ac:04:99:3c:be:46:
b8:6a:f1:e1:2f:c0:34:0a:9c:e4:ee:4e:2e:a9:6d:
c3:cd:0d:66:5c:91:e7:68:0e:c3:68:50:2e:6a:2e:
5e:54:1f:0f:d3:57:87:ad:ea:35:7e:96:17:09:d4:
22:96:d5:9d:4a:85:fa:42:90:cc:5c:69:b9:a6:bb:
3a:e1:14:fd:5d:bc:13:b1:f1:0d:0e:bb:41:06:4c:
90:df:5e:bc:fa:af:16:f2:aa:73:9b:50:93:92:62:
97:fb:46:c8:7e:c7:ab:c9:d5:ba:86:53:58:02:18:
99:df:06:0a:0d:14:7b:3a:e5:24:ea:43:9e:29:1b:
5b:33:0e:50:8d:51:48:af:4e:2b:98:02:29:78:87:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:F4:BC:3B:EA:FB:69:CC:D5:A4:D2:6D:61:A3:C8:77:0F:11:49
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DBj0vDvq-2nM1aTSbWGjyHcPEUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.91.140.0/23
195.91.144.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:5b:81:95:d9:eb:07:34:13:7f:64:c7:c9:9d:46:1e:55:a7:
6b:1b:3f:5d:64:87:46:25:7d:ae:08:3e:31:31:12:91:6a:6e:
39:74:68:c2:ae:9b:e0:00:37:95:57:6e:79:81:5b:cc:ce:0c:
ef:63:64:b0:77:8d:fb:6a:2d:2f:01:ac:89:f6:95:c7:28:58:
40:ae:80:22:0b:4d:61:fd:bb:74:e1:0b:2e:a7:38:5c:94:22:
ca:33:4f:56:9f:a7:2b:3d:6f:fb:67:8b:02:0a:cd:fe:16:7d:
fd:f2:c4:3c:65:0c:df:44:91:3e:93:87:43:5a:48:47:0a:2e:
67:35:26:24:5b:94:51:d7:de:74:ff:39:fc:b0:3b:e3:c8:cb:
d7:65:df:48:20:54:0d:be:e3:a1:48:82:ca:e7:ac:b3:ef:03:
60:a9:37:2e:8a:f8:59:04:a0:8e:0d:f5:d0:c8:3e:5b:8e:67:
c0:ac:73:ff:c4:d8:81:35:4f:21:49:c3:af:9b:e7:b2:fc:d9:
2e:e5:ba:8a:d7:a1:e6:17:e1:31:90:54:c4:7f:ea:c3:40:3d:
b0:cb:40:0c:c4:c7:26:be:9a:14:fa:c0:ee:38:b4:a4:50:00:
f4:f8:d3:e9:7c:ba:71:ba:6f:9a:34:56:33:c8:49:b7:ee:bd:
30:c1:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:59:30 2025 by rpki-client