Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/N-144IyzHWM237dSB3-fN7_eih0.roa
File: N-144IyzHWM237dSB3-fN7_eih0.roa (raw, json)
Hash identifier: mb+kuSZrtmewRuIkq4g09cXaDBuvlV7OYMvFuWPQgAE=
Subject key identifier: 37:ED:78:E0:8C:B3:1D:63:36:DF:B7:52:07:7F:9F:37:BF:DE:8A:1D
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 01826741363041EA3CF3DB635ED2881E16BD
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/N-144IyzHWM237dSB3-fN7_eih0.roa
Signing time: Thu 04 Aug 2022 05:08:23 +0000
ROA not before: Thu 04 Aug 2022 05:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2635
IP address blocks: 195.234.108.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:41:36:30:41:ea:3c:f3:db:63:5e:d2:88:1e:16:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Aug 4 05:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ed78e08cb31d6336dfb752077f9f37bfde8a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:1e:9c:34:26:8e:95:37:d5:d6:fb:8e:88:
59:01:84:b9:d4:d7:94:c9:04:6b:9e:4a:91:c2:c4:
18:75:82:75:21:18:68:34:98:b0:eb:b4:fd:14:67:
4f:69:10:e5:18:6b:20:49:4c:95:e9:9d:8e:7c:7d:
38:40:e5:a4:31:ac:97:94:b6:f9:80:e1:26:a4:ee:
b2:15:34:b1:1a:60:72:c8:08:d0:23:6c:bc:7c:10:
d6:53:8d:c0:95:00:f0:da:19:c9:2f:02:49:63:a6:
ec:1f:18:08:0b:e0:2e:22:87:01:2a:37:0f:e7:12:
71:75:76:df:11:b3:2f:0e:59:57:d5:ba:bb:34:db:
c3:54:7b:9b:54:a1:8a:e5:20:d3:a9:1b:10:93:55:
0a:ff:77:df:5f:b9:f2:a5:e7:db:98:11:4c:83:61:
a3:b0:a0:2b:21:87:13:9b:f3:89:f3:73:8a:6e:cb:
38:26:39:9d:66:e4:14:aa:64:79:03:ea:b2:0b:89:
ae:aa:db:6d:03:19:de:55:6c:b9:34:88:67:4f:6d:
76:e9:8b:08:72:72:53:18:69:5b:65:b7:db:62:09:
74:79:6f:0a:d3:01:40:28:d7:57:c6:e1:c7:40:3f:
3f:47:38:97:2f:d9:aa:1d:9d:28:02:85:41:f4:d7:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:78:E0:8C:B3:1D:63:36:DF:B7:52:07:7F:9F:37:BF:DE:8A:1D
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/N-144IyzHWM237dSB3-fN7_eih0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.108.0/22
Signature Algorithm: sha256WithRSAEncryption
35:65:53:3c:b1:f5:28:79:61:39:59:fe:07:89:77:95:a0:94:
7f:ef:a1:a7:df:c2:15:99:44:c7:3c:8b:fc:03:44:0b:35:91:
39:e2:d0:9a:0d:3b:70:16:33:50:16:1a:cb:07:39:08:03:dd:
4b:74:e2:51:d6:b5:72:8c:66:9d:2f:6a:37:0c:c1:6a:ac:ee:
bc:e1:0f:38:79:b5:ad:d3:68:78:05:3b:b1:8c:b4:ca:56:fe:
1d:c8:dd:b5:7f:9c:9c:1b:b8:60:13:78:16:1b:50:36:f8:9b:
00:08:af:f8:9b:cd:34:bb:8c:03:8e:51:e3:77:03:28:3b:c7:
60:54:5b:e9:04:4e:db:df:f2:c1:79:05:3c:0c:60:81:b3:bc:
05:a1:57:16:3a:5c:0a:29:50:32:8c:c6:50:3a:da:c9:54:5d:
80:d6:57:50:43:0c:b7:b3:e6:0e:09:74:10:a8:e9:65:5d:f3:
fc:90:d8:3e:35:43:f5:71:33:de:77:1b:d9:8d:92:cc:67:ad:
a0:af:87:b9:c4:00:09:e8:ff:a4:0b:6d:b8:35:99:63:09:4b:
3b:96:42:e4:59:6f:4c:4a:5a:81:0c:50:32:ba:ee:66:65:d3:
e8:6d:29:11:94:9f:e3:10:d3:23:5b:24:d4:ee:a9:a5:3d:75:
f7:b9:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:58 2025 by rpki-client