Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/JvYj3YuoX1cIbjTcv8Ih-R3Z64g.roa
File: JvYj3YuoX1cIbjTcv8Ih-R3Z64g.roa (raw, json)
Hash identifier: vLJYI7CNzl3jh1Hnu5iP/H/A59AFr8BS2IeguWaNqXM=
Subject key identifier: 26:F6:23:DD:8B:A8:5F:57:08:6E:34:DC:BF:C2:21:F9:1D:D9:EB:88
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 01856E143BF7AC17491C75A8F4EE152B6A06
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/JvYj3YuoX1cIbjTcv8Ih-R3Z64g.roa
Signing time: Sun 01 Jan 2023 16:04:57 +0000
ROA not before: Sun 01 Jan 2023 16:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 195.10.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:3b:f7:ac:17:49:1c:75:a8:f4:ee:15:2b:6a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jan 1 16:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f623dd8ba85f57086e34dcbfc221f91dd9eb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:a4:3b:0d:33:93:a8:8b:34:20:d6:3b:9c:
5b:3d:6c:ee:bc:37:40:db:b2:4c:a7:2f:f1:81:39:
7b:73:75:69:81:17:bf:1b:25:65:27:01:14:48:4e:
92:25:ca:fc:9e:eb:eb:5a:b6:08:2f:ff:9d:88:a4:
9d:46:4e:2a:c4:ef:11:47:f4:ec:0f:81:ba:f7:9e:
0b:a9:8e:7b:10:d7:9c:cc:36:0d:85:c0:ff:13:f5:
78:47:77:f6:de:0c:d7:20:80:e2:f6:ef:79:aa:c2:
52:e6:78:c1:59:f0:ec:5b:1e:ab:ad:ea:e5:87:b7:
21:68:ea:3a:ae:2a:b2:0b:7e:b9:9e:3a:da:fe:fb:
ab:e6:35:86:99:fa:f7:b9:28:30:76:f8:12:ef:82:
8a:27:24:d8:9d:bc:54:fe:79:51:fd:17:c7:98:16:
7b:9b:ea:8e:e1:31:f2:14:70:7a:f3:6a:dd:fb:4c:
2c:bd:dd:97:35:c9:0a:37:ef:7c:5f:e9:dd:93:20:
e1:b7:1c:ed:09:90:3a:0d:10:5c:94:79:58:92:30:
b1:a8:09:33:ad:32:a8:08:7c:11:e6:f9:b8:78:a6:
1a:30:86:80:72:c5:73:a4:ea:f8:26:fa:97:79:cf:
a7:48:f5:61:5c:8b:5c:34:a9:74:07:63:c7:9b:a6:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F6:23:DD:8B:A8:5F:57:08:6E:34:DC:BF:C2:21:F9:1D:D9:EB:88
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/JvYj3YuoX1cIbjTcv8Ih-R3Z64g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.199.0/24
Signature Algorithm: sha256WithRSAEncryption
83:65:3e:19:58:85:ef:35:74:fe:48:07:c2:28:cd:28:4c:09:
c9:b4:99:e5:83:52:53:e2:13:74:3c:17:0e:34:49:bd:82:bd:
46:b6:77:d7:e5:c6:2a:93:7d:ef:ec:10:f6:82:fa:9b:e5:14:
c8:a7:26:60:4f:d8:15:2f:fc:76:ad:f5:77:18:c0:21:2d:17:
fb:1c:f5:29:88:39:4f:76:3a:64:6b:64:28:47:70:19:84:92:
85:d7:bf:a9:c6:c9:34:a3:c5:73:72:e3:fa:2e:64:f5:d3:cb:
6f:df:09:6c:a4:70:67:d3:92:a5:e3:15:74:a7:a0:02:74:8b:
62:ac:f9:e4:fe:08:e6:78:ef:07:38:a8:25:33:9f:55:97:19:
ab:ed:5f:96:87:be:0e:7a:a9:73:92:00:05:09:7e:fa:7d:0a:
67:09:1a:5d:c0:8c:53:99:79:aa:5b:3f:f7:71:2b:2b:5c:96:
e1:37:b3:4e:ba:89:e4:e8:28:d9:13:7f:82:47:0c:ec:a2:58:
e5:2a:fd:2f:a1:c6:ef:9d:5e:5c:b5:1d:b5:b8:d0:00:74:7e:
55:1c:d8:0a:d0:79:13:83:07:cb:63:96:17:bf:e2:81:86:71:
3c:d6:4a:80:08:82:c8:66:1c:db:f1:ae:34:fa:1c:80:32:93:
6a:a2:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:02:29 2025 by rpki-client