Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/3iPymSreLcmGiaTtvIdGrg-Bb58.roa
File: 3iPymSreLcmGiaTtvIdGrg-Bb58.roa (raw, json)
Hash identifier: /GI0hbDTmbFWO/m3/60BWnRhaLAUYu1b2AD7YZote9g=
Subject key identifier: DE:23:F2:99:2A:DE:2D:C9:86:89:A4:ED:BC:87:46:AE:0F:81:6F:9F
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 01856BDC8AB4B57AB8B808604BA49F4146B5
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/3iPymSreLcmGiaTtvIdGrg-Bb58.roa
Signing time: Sun 01 Jan 2023 05:44:53 +0000
ROA not before: Sun 01 Jan 2023 05:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207922
IP address blocks: 195.26.8.0/24 maxlen: 24
2a0f:4a40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:8a:b4:b5:7a:b8:b8:08:60:4b:a4:9f:41:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Jan 1 05:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de23f2992ade2dc98689a4edbc8746ae0f816f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:81:e0:b2:55:70:32:c7:a3:42:9c:72:e4:
ca:17:41:43:d5:1b:d7:c1:43:4a:85:28:4f:88:71:
e1:6a:d0:03:22:c8:25:d4:42:2b:0f:ec:2b:2f:fd:
b1:9f:e0:ce:71:75:11:94:38:aa:3e:29:21:ac:87:
cb:d8:26:dc:08:42:29:35:e3:fb:ac:06:68:f7:7c:
88:b5:ea:9d:81:94:a0:a7:52:52:53:ba:fe:cb:db:
86:fe:f2:25:b0:61:e6:39:5f:06:b9:a7:dc:41:45:
d7:4a:b5:2e:b0:0b:4e:18:8a:25:bb:93:51:c5:12:
38:e0:08:fd:25:46:99:54:db:fc:05:56:21:30:38:
21:74:cf:44:fc:1a:8a:b0:d0:01:e8:f0:d4:39:c3:
d1:e3:34:6e:9a:38:24:dc:5d:81:75:2f:5b:bb:90:
2a:67:8e:6b:13:91:7a:9d:29:aa:57:76:40:c6:a5:
44:ab:d1:24:61:9a:0f:31:f7:4d:96:84:77:ce:30:
1c:ea:3a:ba:ac:61:cd:51:3f:b4:d6:15:9a:4d:e2:
fd:3c:8e:c2:c9:d7:b9:0e:d6:e0:27:70:aa:ae:9a:
ba:06:c6:48:c6:1b:3a:c7:57:70:29:c1:a8:5d:44:
0e:4c:19:c7:8f:4c:41:86:12:72:2e:e0:92:c8:c5:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:23:F2:99:2A:DE:2D:C9:86:89:A4:ED:BC:87:46:AE:0F:81:6F:9F
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/3iPymSreLcmGiaTtvIdGrg-Bb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.8.0/24
IPv6:
2a0f:4a40::/29
Signature Algorithm: sha256WithRSAEncryption
a0:32:28:22:75:bc:5b:09:6b:49:14:68:ef:1d:73:46:3a:ba:
b9:9e:86:71:21:ae:6a:96:05:a5:36:9d:d9:d7:e0:70:7f:6e:
bb:25:87:96:76:df:e5:db:96:1a:cc:54:57:47:f2:bd:34:f0:
b1:85:30:50:7f:73:19:21:af:24:35:1e:29:11:f7:81:22:48:
10:29:d6:ca:94:2d:cf:d8:5f:8c:68:8e:af:d1:94:70:75:44:
3a:a4:2a:b1:2f:ce:b2:6e:74:5d:27:32:4f:c2:e5:24:7f:65:
17:85:5b:db:a0:cb:db:e5:dd:7a:08:bd:41:c8:7d:f6:77:ef:
43:06:ca:07:ca:f5:74:59:a9:f1:11:da:d8:7c:b9:cb:f2:b4:
ca:da:4e:d6:56:42:4c:a9:6b:82:12:75:67:f7:f0:fd:46:4c:
49:d9:06:94:a0:83:f6:e9:c1:4c:18:cb:73:de:54:38:df:95:
74:dc:6d:3d:73:1e:f5:fc:92:6c:c5:4e:78:f9:28:b2:11:0d:
ed:94:09:31:de:66:f0:b7:cd:e8:c3:bf:a4:ad:9c:18:b0:cc:
89:ee:66:83:fb:8f:ec:a6:9b:0e:f7:1a:40:e3:24:2e:97:58:
60:14:56:a7:7c:14:12:43:9f:f4:49:89:62:34:85:37:7f:47:
ca:37:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:04:41 2025 by rpki-client