Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/2xnLCgWg48guk80DWmT2-0ITznM.roa
File: 2xnLCgWg48guk80DWmT2-0ITznM.roa (raw, json)
Hash identifier: 92na+irc33zobywTWzcykePcmQZheKV95nAqUQ/3sOA=
Subject key identifier: DB:19:CB:0A:05:A0:E3:C8:2E:93:CD:03:5A:64:F6:FB:42:13:CE:73
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 01857142DC800975827810F05A15D4076B34
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/2xnLCgWg48guk80DWmT2-0ITznM.roa
Signing time: Mon 02 Jan 2023 06:54:45 +0000
ROA not before: Mon 02 Jan 2023 06:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34046
IP address blocks: 195.245.80.0/23 maxlen: 23
195.242.112.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:dc:80:09:75:82:78:10:f0:5a:15:d4:07:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Jan 2 06:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db19cb0a05a0e3c82e93cd035a64f6fb4213ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:a3:7b:29:bd:b5:a6:ba:c2:c0:2a:b8:d5:
e0:02:4e:0b:8f:52:35:13:12:29:1d:6f:a3:e7:58:
86:39:90:3f:1e:98:09:71:dc:b3:48:21:e4:8c:c5:
03:7e:3f:0a:70:42:1f:84:d3:f2:c0:27:38:b4:ba:
c4:43:1d:6e:82:28:f7:e2:58:e6:8c:d0:ab:f8:0a:
df:08:94:e1:8e:fd:c1:5e:ea:ca:eb:e5:a3:38:b8:
03:0e:3f:73:e4:82:cf:a4:16:af:c3:77:cd:f8:b5:
51:6f:c7:ed:a8:d9:be:b2:ec:68:31:ac:a9:be:d1:
c4:b8:14:c5:4a:33:77:61:ea:69:b4:ec:0a:9f:71:
a2:3d:46:cb:1b:14:d9:91:23:11:60:8b:44:b6:95:
f9:42:59:fe:49:d1:ec:5a:b7:38:c5:04:df:57:87:
48:97:d3:33:e7:ca:d1:99:31:df:b0:83:9d:d2:d7:
c5:c1:b4:3c:2d:65:84:f2:08:e0:f6:c1:fc:c6:9b:
2b:ba:1b:ce:a1:89:7f:c2:94:74:d3:57:c9:c5:8d:
7d:6a:d0:03:1c:8f:09:54:d8:a1:6a:ee:d4:00:e8:
c9:a3:5d:d3:ae:dc:88:ce:1a:8d:24:53:4c:29:cf:
71:f9:21:52:ea:f0:fd:74:f0:0e:e8:b6:f9:76:52:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:19:CB:0A:05:A0:E3:C8:2E:93:CD:03:5A:64:F6:FB:42:13:CE:73
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/2xnLCgWg48guk80DWmT2-0ITznM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.112.0/23
195.245.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:cb:e0:fd:2b:34:2a:4d:b3:11:b1:b8:42:b5:cd:1b:ab:54:
bd:4c:44:5e:98:1e:6e:99:21:d3:6b:e8:41:e9:1e:60:2a:3e:
58:23:8b:76:b4:57:bb:9e:c2:99:84:54:4e:f0:74:41:6f:02:
15:a7:2c:ae:33:b6:ab:6b:c4:c7:6a:9b:76:ec:2c:d9:90:cb:
65:12:42:4b:ab:27:cc:ce:ce:88:fb:98:20:0a:bf:82:3a:c6:
4e:4a:2c:fe:34:4e:54:7f:2a:16:ea:10:9e:89:6a:74:19:e3:
db:14:07:df:cd:02:b6:59:07:5a:d4:19:a5:f8:74:ad:6f:cf:
16:8a:3f:2c:2f:db:0d:e0:fa:77:e4:1d:00:b5:ed:a4:4d:09:
3f:cd:74:05:13:b0:1b:f1:76:9d:27:3c:00:d8:72:a5:f0:24:
ab:b3:67:98:be:dc:99:71:38:e4:16:1d:54:41:9d:11:e8:8b:
b7:1e:f3:8f:13:bc:5b:2e:b3:27:0c:73:14:3f:4c:7f:93:e6:
63:f4:21:f1:ff:58:04:7d:8f:e2:73:35:51:71:8f:8d:da:ef:
c8:30:c9:12:99:0e:17:62:81:d9:b6:c0:f6:4e:6c:9b:20:82:
e6:16:73:f7:c8:80:6d:ba:c0:57:c6:bf:f4:ff:ea:26:a9:7c:
57:36:4f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:07 2025 by rpki-client