Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/Txogglgk3rRX1YqzCqW3NqUfm-w.roa
File: Txogglgk3rRX1YqzCqW3NqUfm-w.roa (raw, json)
Hash identifier: rbFeavZ9I2+suUE+kUsPl2A6VnJJ7XQbc/YfKicg1HY=
Subject key identifier: 4F:1A:20:82:58:24:DE:B4:57:D5:8A:B3:0A:A5:B7:36:A5:1F:9B:EC
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0CB67AA7
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/Txogglgk3rRX1YqzCqW3NqUfm-w.roa
Signing time: Sat 01 Jan 2022 11:54:55 +0000
ROA not before: Sat 01 Jan 2022 11:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57877
IP address blocks: 195.135.12.0/23 maxlen: 23
195.135.48.0/24 maxlen: 24
195.135.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213285543 (0xcb67aa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jan 1 11:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f1a20825824deb457d58ab30aa5b736a51f9bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:00:18:d4:c1:67:1f:c7:e9:0a:29:e9:44:
49:6c:2a:d0:30:a7:05:11:ae:ee:a9:5e:9c:d6:18:
c0:8e:48:4e:e1:47:1a:03:f9:3d:8f:55:46:99:c8:
fe:c6:7b:36:6e:22:c7:1a:22:0f:b2:9c:93:3f:bf:
70:d2:b7:65:58:87:c1:7b:87:51:7a:f7:49:2e:e5:
62:89:1c:11:12:ca:58:fa:63:2a:1e:f6:0d:77:29:
63:03:68:c0:ca:b3:ac:8f:e0:c2:97:08:d1:d7:17:
62:f3:93:3e:11:b8:19:24:9c:0f:07:89:0c:44:5e:
b5:03:52:67:f6:46:aa:b7:91:75:9d:67:cc:7c:80:
a5:81:f2:db:fc:71:0f:ac:f2:3f:b6:fc:3a:a3:a9:
8c:05:a6:04:ce:db:9a:ab:dd:43:20:a4:81:14:7d:
9d:6f:b6:e8:5f:dc:13:43:c2:1d:1d:6a:c5:09:09:
a8:85:91:e8:1f:17:53:25:31:82:82:bd:db:e7:95:
e8:13:67:3f:1a:a3:ae:c4:21:38:8e:70:bd:80:c0:
e6:c4:e0:11:80:15:39:de:e5:17:6e:60:f2:0d:60:
16:ca:1c:a9:c9:29:99:77:6d:46:a9:c9:ea:13:1b:
55:21:52:a7:6c:c7:88:ef:2d:3b:fd:a3:7f:d9:3f:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:20:82:58:24:DE:B4:57:D5:8A:B3:0A:A5:B7:36:A5:1F:9B:EC
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/Txogglgk3rRX1YqzCqW3NqUfm-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.135.12.0/23
195.135.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:76:e2:f7:02:ad:f8:0a:c1:14:b6:0d:21:51:f9:7b:09:e1:
40:bd:2d:9d:ec:58:ec:8e:a9:1b:67:6f:82:be:dc:b4:fe:94:
c2:5f:5a:51:17:4c:67:f0:4b:2b:9c:8c:6b:ab:78:82:1b:1c:
e6:55:82:41:b0:88:9d:25:a9:3e:8a:2f:5b:ab:9f:72:74:48:
10:46:b1:f2:35:22:51:75:3f:24:0b:0c:26:f5:50:94:77:5a:
34:1c:6c:bf:b8:23:26:96:3e:c7:34:ac:bc:11:44:ff:bb:51:
90:16:c7:46:32:55:71:8d:a4:7a:49:05:ef:7e:b9:60:48:75:
35:d4:12:9a:8e:41:e0:cc:fc:b6:82:82:6e:4d:3d:74:08:c6:
a0:84:36:87:6a:f6:cf:63:f5:d9:ab:6e:2d:d0:ae:ce:20:bf:
62:d7:d3:42:08:7c:be:c9:7e:fa:77:a0:8f:55:11:92:94:3c:
c5:54:00:c5:2e:68:72:d1:2e:f7:b7:b2:5e:b5:e4:14:f2:94:
7f:79:e4:68:82:e8:20:91:b5:54:6b:0c:64:58:e7:f4:69:48:
89:76:ee:4f:41:ae:4c:72:81:70:08:00:5b:10:dc:35:c4:e8:
cc:69:88:fa:a8:20:a0:de:ed:12:f3:ac:a6:f4:21:10:99:db:
d5:78:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:12 2025 by rpki-client