Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/y8TzEl0oTwAnMnZqZWCwRJ9BcZM.roa
File: y8TzEl0oTwAnMnZqZWCwRJ9BcZM.roa (raw, json)
Hash identifier: Vf3iEaw+y6iQ+tzUSaLlFndQSJfBr8nNPxHN+3Wd6m8=
Subject key identifier: CB:C4:F3:12:5D:28:4F:00:27:32:76:6A:65:60:B0:44:9F:41:71:93
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 01857355EF02BECBA206F65A5E18DB4D2BF7
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/y8TzEl0oTwAnMnZqZWCwRJ9BcZM.roa
Signing time: Mon 02 Jan 2023 16:34:49 +0000
ROA not before: Mon 02 Jan 2023 16:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28951
IP address blocks: 195.47.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:ef:02:be:cb:a2:06:f6:5a:5e:18:db:4d:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Jan 2 16:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbc4f3125d284f002732766a6560b0449f417193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:b4:70:d1:60:a3:c4:3d:9f:4f:23:d0:7a:
be:9a:2d:65:9c:5c:75:4b:10:b9:4e:23:ce:b3:65:
98:f4:64:f1:4e:28:0d:c1:58:07:3c:4b:72:ed:af:
d2:18:f0:1d:5a:9e:ff:ad:e4:d5:a3:ac:9c:f3:a7:
df:b5:2f:26:c4:8f:de:76:96:ae:6e:b4:7a:57:21:
91:7d:92:45:a4:b7:5c:fc:c1:e6:5a:f1:4f:89:4c:
ea:e2:be:cf:0c:0e:25:c0:28:b5:cf:35:34:9b:98:
4e:1a:9a:c7:1e:49:65:23:0a:76:f7:62:76:14:fa:
c1:db:7b:71:a6:61:09:e8:8f:54:62:9d:c3:f3:98:
da:0a:2d:aa:6e:60:13:d4:d6:0c:4d:e1:fa:3f:3f:
59:7b:32:a7:0b:44:f3:b3:d4:1e:24:ab:f0:b1:3b:
bb:66:31:54:f9:f9:9d:ef:a7:4b:07:27:f3:65:50:
56:a4:96:ac:18:ec:39:98:1a:dc:10:4c:b6:1a:72:
19:25:0f:79:8f:df:ab:02:e8:53:83:00:cd:8c:82:
f8:51:c1:85:b7:7f:1e:fd:35:21:91:d9:43:88:7e:
ce:04:f3:d8:47:46:df:b9:56:d8:f0:fc:01:82:11:
b9:a9:7e:34:f1:77:54:d0:21:81:1a:df:35:02:f8:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:F3:12:5D:28:4F:00:27:32:76:6A:65:60:B0:44:9F:41:71:93
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/y8TzEl0oTwAnMnZqZWCwRJ9BcZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f9:63:50:15:7a:93:c5:70:49:b1:72:68:b2:5a:a2:e7:9c:
3a:2a:1c:7f:01:dc:0c:6a:6a:7d:f3:87:60:42:18:0d:20:74:
4b:a7:0d:9e:e1:cf:a0:64:cf:f2:a5:81:2f:a5:aa:25:c9:6e:
d0:b6:1b:8e:a0:83:d5:93:8b:80:7d:e1:9c:93:23:2c:65:a5:
9d:7f:71:2f:8d:f6:19:32:56:a7:b8:ec:6d:51:53:2a:22:53:
08:fc:5e:b5:dc:8d:05:ed:fe:5d:0d:b6:97:5d:2c:9a:31:3d:
b9:e5:c6:c9:f8:3d:17:44:54:6b:d7:8e:65:aa:53:49:2b:b7:
c5:45:dd:dc:c7:23:f1:b6:d6:39:b7:04:78:da:7f:f6:b5:8d:
97:f8:66:6e:f2:76:93:0b:aa:d6:35:00:54:a7:32:cc:50:35:
54:87:31:b4:c9:28:e0:da:98:50:a3:60:9e:22:7c:95:45:94:
66:e5:ce:d2:b9:05:71:49:6d:44:3f:e2:60:4a:7a:2e:0f:44:
21:21:bc:08:3a:25:79:8a:20:a5:17:af:e6:f9:de:e7:7a:48:
5a:aa:f9:49:54:83:1e:dc:49:56:d4:b2:bb:2d:fd:42:40:01:
10:5b:29:be:e9:54:16:14:f4:37:d7:6a:b7:82:b2:c3:be:78:
22:7d:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:53 2025 by rpki-client