Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/Lrsne6PO0fM0Ws-LkEdnHMhXtWo.roa
File: Lrsne6PO0fM0Ws-LkEdnHMhXtWo.roa (raw, json)
Hash identifier: jee5GtIu0X4YNeoAaa4L2X/+KZYu/BV6oxQKUPGLWZg=
Subject key identifier: 2E:BB:27:7B:A3:CE:D1:F3:34:5A:CF:8B:90:47:67:1C:C8:57:B5:6A
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 107E3954
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/Lrsne6PO0fM0Ws-LkEdnHMhXtWo.roa
Signing time: Sat 01 Jan 2022 08:02:50 +0000
ROA not before: Sat 01 Jan 2022 08:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48971
IP address blocks: 195.225.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276707668 (0x107e3954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: Jan 1 08:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ebb277ba3ced1f3345acf8b9047671cc857b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:cd:8d:48:af:da:ee:00:f1:fd:54:c6:1e:
8a:4c:25:2b:a7:76:92:ad:40:4a:c3:d3:e1:f3:46:
b2:28:d1:84:d0:b9:ab:e1:24:e5:cc:b6:ef:32:b0:
0c:01:4a:c4:c3:6b:0a:39:42:98:78:95:7e:2c:a4:
96:ec:f6:80:f4:71:ae:72:73:15:22:ff:0e:2c:a7:
95:45:a0:0b:7e:f5:56:63:50:ec:08:90:bc:5d:4a:
76:b5:24:f5:22:85:0b:bd:8d:62:3b:29:46:7c:ce:
99:6b:1d:f5:d1:6f:e7:45:9f:07:3a:88:a2:ab:5c:
38:d6:e4:69:3f:bb:05:ff:01:cf:c2:8c:99:1b:08:
2d:a1:6f:08:a6:06:3c:a5:65:1c:ca:11:29:d3:d6:
d8:ad:92:3e:c4:d4:7a:91:c3:68:1c:3a:c9:c4:c4:
13:9c:11:30:30:c5:6a:d0:04:20:3b:f7:48:ea:47:
41:f2:bf:e8:95:ec:24:8c:51:cd:b0:49:f4:6f:f2:
8c:26:14:1c:72:1d:df:cf:6c:ea:4c:55:b5:84:5b:
9c:fd:e7:41:0a:f4:7a:92:b5:e7:8b:8b:dc:52:a6:
d1:fb:a8:c5:27:55:51:bd:7f:dc:77:bf:cb:97:2c:
03:3b:0f:99:4f:93:a5:00:32:60:5f:dd:19:37:a3:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BB:27:7B:A3:CE:D1:F3:34:5A:CF:8B:90:47:67:1C:C8:57:B5:6A
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/Lrsne6PO0fM0Ws-LkEdnHMhXtWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.116.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c7:1c:f6:9f:da:05:78:6d:36:5c:2e:2a:5a:cf:a6:e7:11:
38:57:5b:3a:84:f8:33:be:a9:e9:ee:e6:a9:c2:c6:1f:2f:ef:
8d:f9:54:e2:46:a2:c8:ff:00:7b:58:34:5c:06:41:2c:89:25:
1c:30:38:ec:bb:0e:f6:c4:f6:a2:f9:45:e3:60:42:40:28:d5:
44:da:e8:f3:d7:d2:b9:7c:fc:8d:1d:a9:18:7b:11:24:f4:e1:
8c:59:1d:42:99:8f:c2:db:b8:08:bb:3d:c0:8e:f4:df:b6:c5:
a1:fc:b2:e6:9c:60:55:e5:1b:f7:79:45:e8:c5:b4:11:68:a6:
02:64:f7:9b:20:2e:b5:b2:79:58:34:d1:6b:43:c4:f9:0d:7a:
22:eb:8b:4d:0f:d6:12:60:63:81:cd:f2:83:16:9e:b8:e9:58:
8b:aa:ae:11:cc:56:8b:86:82:77:cc:61:fa:c7:ba:17:a4:a7:
f3:c7:ae:49:4f:ff:b5:85:38:7d:7f:e8:66:56:0a:c7:d5:38:
1c:43:6b:7e:cd:c4:01:e1:e1:25:b6:a0:d4:43:d2:e4:c5:f7:
20:b5:dc:a0:8a:26:e2:e2:4d:9a:22:bd:e4:2e:8b:31:ad:44:
13:15:4e:13:d9:2d:f2:ae:7c:71:9e:5a:d5:d1:6b:60:6b:8c:
cd:64:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:03 2025 by rpki-client