Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/A2YM33vn3ulaT5PLrODA2rbcoF0.roa
File: A2YM33vn3ulaT5PLrODA2rbcoF0.roa (raw, json)
Hash identifier: bPOzL3iezuALHBq3Djq8ig78WTsaKRMlkDTcbRI9iKg=
Subject key identifier: 03:66:0C:DF:7B:E7:DE:E9:5A:4F:93:CB:AC:E0:C0:DA:B6:DC:A0:5D
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 01856F0B7871ACB70DEC1BC9F56E404FAA12
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/A2YM33vn3ulaT5PLrODA2rbcoF0.roa
Signing time: Sun 01 Jan 2023 20:35:00 +0000
ROA not before: Sun 01 Jan 2023 20:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50114
IP address blocks: 195.245.71.0/24 maxlen: 24
195.245.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:78:71:ac:b7:0d:ec:1b:c9:f5:6e:40:4f:aa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jan 1 20:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03660cdf7be7dee95a4f93cbace0c0dab6dca05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:e9:b2:82:5b:f7:d0:99:62:60:a4:61:7a:
9c:63:a0:d8:d9:32:ad:56:a0:a6:b4:0e:b6:c1:bf:
56:75:d5:c7:5c:b0:52:36:19:e1:28:04:92:12:23:
93:7b:18:06:7b:26:d3:5d:50:7b:0e:2e:e2:0d:52:
83:00:48:70:86:c9:c3:c5:33:21:3b:7b:f4:d7:aa:
96:95:c6:a1:d8:d3:dc:0c:fb:4f:f9:cc:0d:9c:2a:
ae:7c:4f:51:69:d9:5b:db:c5:9c:f6:2e:22:8b:34:
d8:f5:9e:42:10:5c:fd:b1:a8:1b:85:90:62:bf:fe:
0e:4c:92:11:ac:d6:99:8c:19:a0:b8:7c:80:41:f4:
c3:c1:bd:75:62:c9:a2:63:97:23:27:3c:96:9a:b6:
c0:9e:54:1c:16:4c:28:a3:e2:28:a3:10:9b:0e:34:
ae:a7:87:31:2c:95:49:e4:86:83:d7:d6:04:bb:af:
fe:88:1d:8b:8c:0d:fd:2e:d1:24:2e:6c:1d:9b:08:
84:61:bf:31:51:2c:11:81:35:d0:76:4a:27:e9:e7:
35:70:2b:e7:d0:7b:33:66:c9:82:13:43:72:11:d1:
b5:d4:be:f3:5e:53:e1:ad:d7:e3:c7:b4:c8:96:91:
56:cf:10:70:68:84:94:82:c2:49:01:ef:f4:fb:fd:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:0C:DF:7B:E7:DE:E9:5A:4F:93:CB:AC:E0:C0:DA:B6:DC:A0:5D
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/A2YM33vn3ulaT5PLrODA2rbcoF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:51:41:42:c6:f4:51:8c:b4:c9:c4:3d:f3:cb:4e:02:3d:84:
88:fd:ae:83:1b:2a:90:1e:ba:0d:03:86:01:a3:04:70:3a:8c:
18:f2:22:32:8c:a4:31:54:08:e7:09:81:cd:6c:4b:f7:df:01:
60:65:38:e4:b2:51:b1:23:75:72:74:5d:2e:c3:6b:ac:84:93:
ab:6f:14:6c:2d:9a:17:90:f9:54:a2:13:bc:56:e0:05:5a:74:
c0:42:b1:02:12:07:74:ee:9d:21:20:bc:68:e2:bf:4d:b4:80:
ff:db:0d:1e:66:cb:a9:3f:c1:2e:41:31:9e:10:20:fe:d3:d2:
33:77:d1:da:ce:56:56:af:08:ae:ee:ad:c1:09:f4:be:2c:4e:
4a:94:c8:43:27:92:53:91:64:1d:d1:a2:a0:3b:b5:ad:f1:9e:
c7:e9:76:96:6e:54:22:d4:fd:43:f2:2d:09:35:3e:57:61:01:
37:1f:b7:f6:d0:64:0a:7c:a5:b5:77:90:99:51:78:6c:90:6e:
e1:7f:ca:43:c2:a9:43:e0:ce:7a:64:88:c6:d0:c4:8b:45:83:
9a:19:e8:c3:35:36:a6:8e:bb:94:e0:9e:11:a4:60:47:2e:ec:
02:63:0d:30:6d:ff:9d:b6:17:27:7c:ce:83:62:06:69:68:b2:
13:b5:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:44 2025 by rpki-client