Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/0rWUfCALUnL5wr_TykX6zSFagrY.roa
File: 0rWUfCALUnL5wr_TykX6zSFagrY.roa (raw, json)
Hash identifier: OFFrT2F6z/rZFwvu5MnZJcDKSFZqeg9uQ8HAe6arnqw=
Subject key identifier: D2:B5:94:7C:20:0B:52:72:F9:C2:BF:D3:CA:45:FA:CD:21:5A:82:B6
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 01856F0B525425C5F1C25F712F12CE9B763F
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/0rWUfCALUnL5wr_TykX6zSFagrY.roa
Signing time: Sun 01 Jan 2023 20:34:50 +0000
ROA not before: Sun 01 Jan 2023 20:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 82.195.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:52:54:25:c5:f1:c2:5f:71:2f:12:ce:9b:76:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Jan 1 20:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2b5947c200b5272f9c2bfd3ca45facd215a82b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:66:5f:ab:00:b3:86:04:1f:da:94:6f:a8:
c6:b3:c0:f4:86:80:2e:45:28:bf:24:54:66:45:c1:
8a:12:3e:b1:2a:77:f7:8e:b6:a3:e5:52:b5:1c:ec:
86:b9:43:e8:06:44:21:95:04:f6:8c:ba:fd:3d:31:
fa:95:95:22:af:56:be:78:48:41:d5:05:fb:5f:b5:
b6:f4:ab:9d:14:3b:0d:d3:33:79:d4:b5:c9:b2:e7:
ba:3f:92:97:c4:23:cb:e8:76:19:e8:e8:ff:7b:8f:
97:52:b2:55:f8:94:16:c3:46:65:8c:ca:a8:c6:39:
99:6d:23:c2:1f:42:d9:71:a7:f4:dc:a6:9f:67:f8:
bd:48:74:e9:52:8b:4a:a5:75:54:1d:18:06:26:a5:
48:1c:42:c7:86:24:22:1c:5f:a6:fa:f2:e2:39:3d:
c2:c6:a4:25:8b:ea:79:d4:bb:70:37:c1:7b:3b:32:
23:90:6b:d3:39:0a:d6:e4:01:81:bf:38:65:c1:dd:
ec:73:57:01:80:d7:f5:6d:4e:b3:fc:93:6f:1c:9f:
dc:a7:71:72:07:c1:4a:2c:9a:ac:7e:c6:3d:dc:78:
3d:63:10:b2:2b:96:74:ff:91:26:d3:60:b9:b8:7e:
92:ce:48:d1:6b:e9:89:4d:47:96:a1:3c:07:d2:59:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:94:7C:20:0B:52:72:F9:C2:BF:D3:CA:45:FA:CD:21:5A:82:B6
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/0rWUfCALUnL5wr_TykX6zSFagrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:82:64:bc:1e:cd:b7:06:c7:2e:f3:b8:79:7b:7a:3b:8f:0c:
04:43:df:b6:63:45:63:d3:d6:df:b5:82:e1:58:8f:eb:6f:8b:
fa:71:9e:38:87:43:e1:25:15:c1:88:0a:5d:1c:b2:b8:1c:b5:
6e:1d:36:52:30:32:8a:f6:02:8e:f9:74:05:8a:eb:38:5f:3c:
fb:00:c9:3a:e7:17:ae:12:46:a2:ef:13:16:da:97:0d:40:53:
cc:f1:88:bc:1b:50:ae:22:b3:dc:33:0d:23:8b:5f:7c:6a:88:
4b:99:a9:48:8c:3b:21:ac:e6:5c:f9:87:c2:41:48:03:ef:83:
de:43:12:6a:cf:e8:74:a8:3f:10:bf:a5:e8:8f:df:31:d1:b9:
9c:41:76:96:33:ec:44:da:a8:f2:bf:ab:ad:70:47:e9:31:1e:
dd:f7:0e:3f:bc:f0:39:b9:2b:5e:45:89:23:9e:e4:62:7a:b9:
c4:79:71:5b:8c:e0:b0:5a:c6:2c:7b:b0:14:44:33:2c:a6:cf:
dd:05:c4:bf:d7:5d:bd:a2:b1:32:20:82:0a:7f:da:ca:ca:8e:
fb:6a:79:ee:fc:51:04:f3:d0:a3:9b:92:1a:30:7a:96:94:82:
94:c1:a9:a1:0c:4c:04:91:84:54:85:6a:4c:58:99:b5:74:8f:
d6:68:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:43:50 2025 by rpki-client