Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/t3BSSzJIrebpWmN_W_Ysk6WbK9k.roa
File: t3BSSzJIrebpWmN_W_Ysk6WbK9k.roa (raw, json)
Hash identifier: s8K63yxTUJcBuuHPq88sVmbGr+qdGh+Gc3THA0h6Fx0=
Subject key identifier: B7:70:52:4B:32:48:AD:E6:E9:5A:63:7F:5B:F6:2C:93:A5:9B:2B:D9
Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial: 01856D6F4EAA47BD0BA60AAFEB0158050329
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/t3BSSzJIrebpWmN_W_Ysk6WbK9k.roa
Signing time: Sun 01 Jan 2023 13:04:49 +0000
ROA not before: Sun 01 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198467
IP address blocks: 195.254.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:4e:aa:47:bd:0b:a6:0a:af:eb:01:58:05:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Validity
Not Before: Jan 1 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b770524b3248ade6e95a637f5bf62c93a59b2bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:21:40:b6:05:e2:fe:07:40:47:69:cc:be:
2e:55:b5:f2:88:6f:df:a7:65:27:e6:26:1e:49:ee:
36:6c:d7:d1:dc:a0:2a:30:94:57:88:5a:93:f0:f8:
3e:99:03:b3:44:4e:e7:45:fb:92:bb:df:72:7e:e8:
ae:8a:bd:53:fd:30:75:a2:c4:59:17:aa:cb:70:13:
ce:1c:d1:c7:1e:9b:34:5d:9d:b7:b2:83:c4:c6:ae:
97:cc:a8:e8:27:e6:f1:3f:1c:fd:54:2e:b1:53:b7:
62:80:54:6b:a1:19:e1:c2:f6:03:9f:da:ab:7e:a8:
56:a4:8b:24:74:ad:0f:8b:53:86:50:3c:89:b9:77:
87:bb:21:4d:93:14:c8:14:86:f5:f6:5a:19:7b:7b:
05:af:b3:41:ea:72:bf:42:a0:db:62:e9:16:ac:16:
c3:09:e2:23:dc:b0:7a:e8:c2:0e:69:25:a8:d3:f9:
24:07:eb:f9:4b:9f:3b:4c:f7:25:fe:03:1a:41:2b:
50:22:67:7d:51:9d:a6:2b:4a:ac:d3:84:43:46:41:
39:b4:96:ec:d2:b4:ee:eb:e6:11:d7:29:d4:bb:7a:
79:19:68:af:66:80:eb:23:db:7f:38:54:00:e1:2b:
f9:34:6a:16:15:32:ec:eb:8e:80:2d:44:4d:48:f1:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:70:52:4B:32:48:AD:E6:E9:5A:63:7F:5B:F6:2C:93:A5:9B:2B:D9
X509v3 Authority Key Identifier:
keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/t3BSSzJIrebpWmN_W_Ysk6WbK9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.176.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:ce:3e:a9:bd:5d:4a:99:fb:4d:0c:84:02:2b:7e:48:fd:e0:
ed:e9:f1:4f:87:4c:91:8d:b6:8a:db:60:10:bd:f1:7a:b6:41:
24:dc:49:57:94:a5:95:f4:b9:64:bd:1c:c1:d5:06:2d:e7:29:
3b:21:73:f1:86:40:60:9e:12:f3:a6:f6:29:97:8c:1d:dd:39:
33:3b:02:43:4a:25:d6:71:c0:04:e4:82:0d:bd:c8:0a:5f:58:
14:ce:b0:ad:40:d9:c2:c6:6c:4b:38:c7:f4:d0:12:50:3b:fc:
7a:17:9b:3e:88:06:10:3b:20:81:2c:68:e7:b0:a2:50:a7:d9:
a3:42:9a:78:bd:36:c1:34:dd:ba:26:8d:e3:6e:ed:76:c6:cb:
04:34:01:be:44:15:1f:cd:7a:7a:fc:ec:7e:87:8b:34:01:fc:
3e:9f:1c:28:e1:3c:32:bd:02:c1:3c:89:3c:92:ad:c2:bc:c9:
82:f3:f0:ac:76:3f:59:02:dd:16:82:f0:5d:ec:33:86:a9:d6:
55:41:b2:00:a0:61:7e:00:84:55:dd:39:e4:fd:97:17:a4:fd:
d9:94:a4:a7:f2:d4:82:89:89:67:17:b5:1a:7b:04:73:f5:7f:
77:aa:a7:a4:5a:4e:de:c9:c9:32:b2:e7:82:90:ad:c8:2c:c2:
27:9f:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:54 2025 by rpki-client