Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Ksd5z2hIo0Arcf1HAbvJXq3C-M8.roa
File: Ksd5z2hIo0Arcf1HAbvJXq3C-M8.roa (raw, json)
Hash identifier: QuJV7yQiG9cIyOvruFy0bRuX+lWjBsINNzQsAUvdivc=
Subject key identifier: 2A:C7:79:CF:68:48:A3:40:2B:71:FD:47:01:BB:C9:5E:AD:C2:F8:CF
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50DA507E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Ksd5z2hIo0Arcf1HAbvJXq3C-M8.roa
Signing time: Sat 01 Jan 2022 16:01:51 +0000
ROA not before: Sat 01 Jan 2022 16:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50476
IP address blocks: 195.65.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356484734 (0x50da507e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ac779cf6848a3402b71fd4701bbc95eadc2f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:2a:08:0e:89:d8:5c:82:d6:ce:ec:cf:81:
7a:ce:b7:b8:d3:cf:76:a4:50:55:b5:37:03:99:77:
e1:c1:2d:f6:05:07:c5:36:e8:f3:c6:f9:41:3f:41:
02:1f:a2:b5:e2:2d:ab:a1:bb:f4:cd:a6:fa:87:d1:
53:a5:01:4b:25:dc:b0:43:68:d4:4c:34:26:a8:d7:
0b:70:8b:d1:b0:83:43:55:ef:72:0a:f3:c8:2c:db:
ec:48:14:d9:2b:13:2c:e5:af:97:0a:f2:fd:c7:95:
1f:bf:7a:c0:c7:02:79:de:28:df:29:74:0d:7d:e1:
70:1a:92:6e:62:c8:f8:92:f2:bc:b3:42:27:02:c8:
4d:e6:93:d3:88:0d:90:8c:de:70:62:29:a7:c9:08:
7f:b1:75:bd:57:86:6f:32:69:24:aa:be:21:77:a0:
95:d0:ff:46:26:67:82:b0:c0:a9:93:45:b5:e1:0b:
ab:62:bb:73:6c:a7:4a:d7:a5:15:5d:bc:09:c3:23:
99:29:b7:28:88:63:97:54:82:6b:e9:b6:0f:c6:9f:
8f:0e:6b:b9:dc:5a:e3:4a:d6:8b:22:51:2b:3d:f0:
5d:5c:d2:15:54:bf:6a:d3:09:93:05:cb:12:a7:9d:
ea:2b:58:82:d6:16:b6:e6:ed:23:5c:52:95:17:a7:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:79:CF:68:48:A3:40:2B:71:FD:47:01:BB:C9:5E:AD:C2:F8:CF
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Ksd5z2hIo0Arcf1HAbvJXq3C-M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.93.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ab:0e:1d:44:0b:d8:56:1b:f1:ac:10:28:32:5b:d2:ae:17:
f2:2c:df:e5:3d:3d:25:84:85:93:9a:ed:c4:87:3b:b1:e8:2d:
6c:4f:59:42:6d:12:39:59:07:ff:90:67:58:07:9c:14:a4:33:
d5:3f:69:d5:66:0e:d0:ae:76:ae:fc:9a:59:33:f1:03:f1:f4:
d2:65:6e:b4:5c:87:fe:0c:58:30:4a:a4:fa:51:e6:d5:0a:a4:
8b:8d:45:af:a0:19:26:d3:c0:b2:d3:ef:3f:fa:c2:38:8d:7b:
2a:ad:0e:56:bb:f7:96:e6:4b:ac:3b:c2:b5:f3:7e:37:65:bf:
4d:b5:9a:55:05:1c:20:7f:b9:ef:f8:9d:f0:34:8c:3a:2a:50:
30:74:4d:f3:c4:96:37:8a:9d:ac:71:f3:e5:e8:9f:63:48:c8:
02:36:8a:e3:73:ba:11:b2:dc:b4:3d:70:d1:4c:b6:5d:69:5e:
f5:81:a6:55:c0:1d:35:da:fc:3b:4b:e1:49:4a:2f:1b:b0:10:
f1:38:c8:c3:2c:9c:f9:24:13:94:9a:55:40:30:a3:0c:4f:f4:
e8:ab:1f:15:a6:cd:fb:a9:42:be:64:73:63:ed:5a:72:4e:76:
17:b0:d2:b0:65:6e:93:83:93:a8:2a:cd:69:70:15:24:2a:74:
82:60:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:48:58 2025 by rpki-client