Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/RJ1zUIrKop8s8_GkR1jgLHbaCoQ.roa
File: RJ1zUIrKop8s8_GkR1jgLHbaCoQ.roa (raw, json)
Hash identifier: rKb5HAnhoz3gDuWNTj23y4G/de9d1EFW1+TOvlMfdY8=
Subject key identifier: 44:9D:73:50:8A:CA:A2:9F:2C:F3:F1:A4:47:58:E0:2C:76:DA:0A:84
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0184C6C4DC72228C77C635C272D1A6797D64
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/RJ1zUIrKop8s8_GkR1jgLHbaCoQ.roa
Signing time: Wed 30 Nov 2022 04:21:41 +0000
ROA not before: Wed 30 Nov 2022 04:21:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42218
IP address blocks: 195.54.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c6:c4:dc:72:22:8c:77:c6:35:c2:72:d1:a6:79:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Nov 30 04:21:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=449d73508acaa29f2cf3f1a44758e02c76da0a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:22:81:2b:73:34:bc:b4:6a:9b:1d:c7:d3:
5d:ed:8e:0f:02:fd:4a:0e:bf:c4:ac:1e:b2:fd:1c:
43:1a:7e:6f:6b:de:8f:db:67:d5:6d:7a:f1:3d:2a:
e4:c0:84:a2:63:a1:1a:aa:ca:20:97:5b:54:7d:4e:
18:21:c2:31:b8:59:f5:36:1f:8d:12:03:d7:91:59:
ec:1f:d0:3c:20:22:11:6c:f9:71:11:b5:e5:b8:ac:
44:8f:a2:ad:31:51:fe:33:de:b7:25:26:05:73:39:
d5:76:77:d0:bf:d6:bc:d4:42:ba:8e:2d:3b:d7:f3:
e3:4c:60:13:d2:da:9f:2c:6f:72:31:2e:e8:74:fc:
64:dd:cc:50:26:b4:bf:2d:5a:e7:97:8d:18:b8:b4:
c0:57:e6:f8:a7:6b:88:37:51:05:91:69:f9:5c:cc:
20:7d:2a:70:d9:26:c1:87:af:8a:37:19:8c:15:ba:
85:e9:d4:82:d7:08:96:36:17:06:32:c7:b0:6a:b6:
f9:35:3e:fb:cc:c2:3e:b6:de:47:87:f0:d5:74:f4:
5d:db:4a:d2:a8:c8:35:2c:00:cb:a2:10:da:e2:38:
95:9f:76:22:82:b3:25:43:b0:0a:61:61:11:77:47:
70:79:1b:21:00:b6:db:71:7b:92:ac:2e:fc:b1:a4:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9D:73:50:8A:CA:A2:9F:2C:F3:F1:A4:47:58:E0:2C:76:DA:0A:84
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/RJ1zUIrKop8s8_GkR1jgLHbaCoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:ef:94:64:dc:4c:78:cf:21:e2:31:72:8d:41:ef:d2:02:b6:
7d:a5:3e:4e:57:27:2f:70:dc:7f:8a:da:cc:0d:62:24:e1:b6:
82:ba:8f:62:ee:b5:af:a9:ee:b1:2a:46:6c:40:e9:ef:0b:b4:
17:af:50:d7:e1:58:fe:c9:85:13:39:89:4e:e3:a1:fd:60:15:
f5:7c:ca:75:6f:ee:92:0e:67:0e:3e:99:4c:cc:41:a3:07:d9:
05:41:71:8e:0b:b9:dc:c9:66:0b:b1:af:09:7f:6b:8f:00:77:
6c:b8:79:23:4f:43:9d:7f:e7:b8:8a:62:51:e9:2d:e2:2e:30:
18:bb:dd:b4:c8:75:22:ed:80:a4:82:59:24:53:26:01:50:e9:
60:5e:75:8d:b6:47:c9:fe:40:03:dc:f8:71:42:2e:11:49:3a:
fa:81:c2:b7:6b:44:7a:1f:be:b7:51:ca:d9:26:93:ee:09:ab:
96:8c:39:11:0c:13:38:20:c4:3a:66:f2:80:44:7c:b8:8c:db:
eb:c5:53:20:56:5a:86:3d:3f:ac:8c:9f:2c:d8:18:f8:c1:cd:
f3:25:fd:56:77:3a:cb:e9:f4:42:f2:fc:3a:09:33:42:ab:12:
15:ac:fb:38:a1:69:f3:2e:1c:11:27:1a:f0:44:85:43:c6:e4:
a0:97:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:37 2025 by rpki-client