Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/00E9nap5_SU0eaVH-SegW4Qeqbs.roa
File: 00E9nap5_SU0eaVH-SegW4Qeqbs.roa (raw, json)
Hash identifier: H5QTwKnHCa3ZQOUh82grSgs0KoHsJ3th9LjIYmzvEYI=
Subject key identifier: D3:41:3D:9D:AA:79:FD:25:34:79:A5:47:F9:27:A0:5B:84:1E:A9:BB
Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial: 03A43F9E
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/00E9nap5_SU0eaVH-SegW4Qeqbs.roa
Signing time: Sat 01 Jan 2022 12:05:38 +0000
ROA not before: Sat 01 Jan 2022 12:05:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207999
IP address blocks: 95.130.0.0/22 maxlen: 22
2a0e:8d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61095838 (0x3a43f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Validity
Not Before: Jan 1 12:05:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3413d9daa79fd253479a547f927a05b841ea9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:b2:99:84:a9:b7:b0:3e:bd:e9:04:b9:dc:
ce:22:4b:50:f2:a8:23:29:35:10:ed:6d:39:79:23:
ea:3d:07:ab:36:1c:c5:17:24:81:28:3c:c4:52:37:
88:1f:3b:95:16:0d:81:81:d9:ca:2d:c2:0a:60:ff:
fa:16:d9:de:ae:d9:10:4d:0e:51:4a:0f:ba:67:8f:
9c:4f:cb:ee:77:9c:e7:50:f5:1a:69:c7:4a:a7:56:
76:71:97:fd:9c:a9:e8:31:e7:a3:34:77:0f:30:11:
2d:69:b2:66:e3:d8:19:d8:f4:9a:49:97:6a:d1:d9:
27:20:5d:17:d9:03:8f:58:0e:af:b9:7e:56:17:0c:
36:64:a8:0f:0e:98:a2:3d:d0:6c:6a:28:85:ac:af:
6b:19:ef:a6:7c:31:e9:94:f4:54:4b:be:4a:17:44:
cd:1e:e6:39:c3:e1:ad:d5:4a:55:21:11:5d:01:4f:
7e:82:86:b5:3a:68:81:5f:88:cb:a3:83:05:2e:a9:
38:18:b6:7c:d9:12:a9:36:ce:68:12:7f:fa:25:f9:
45:eb:9b:a9:1c:db:f9:fe:81:e7:8c:11:a1:41:83:
99:36:28:6b:0f:ba:7c:7f:d3:28:91:1f:4d:6e:82:
bc:aa:5e:42:e3:62:6f:7d:db:a4:70:12:38:a0:eb:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:3D:9D:AA:79:FD:25:34:79:A5:47:F9:27:A0:5B:84:1E:A9:BB
X509v3 Authority Key Identifier:
keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/00E9nap5_SU0eaVH-SegW4Qeqbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.0.0/22
IPv6:
2a0e:8d80::/29
Signature Algorithm: sha256WithRSAEncryption
15:b0:70:66:3b:23:69:81:7a:0d:3c:de:0d:93:e9:e9:e4:6f:
00:3a:e2:ac:51:30:19:68:e3:bd:f9:9d:83:4d:40:56:a7:e8:
f7:de:d4:c2:2f:d9:1d:4f:95:ae:1a:a9:66:41:77:27:2b:97:
80:27:67:ce:33:2c:62:a1:42:40:8e:de:75:e9:72:41:f7:e2:
ca:8e:88:2d:dd:16:2a:aa:16:7b:c4:76:f3:19:9d:a1:1e:3a:
41:84:0e:2a:dd:fc:1f:14:a1:72:e6:1a:f2:18:67:11:ee:52:
f1:cd:74:eb:12:0c:fb:c4:55:1a:c1:5f:0f:09:eb:88:8c:15:
ea:56:aa:53:83:11:bf:bb:2e:b3:14:52:9e:d8:08:6e:ad:02:
a8:96:a7:83:71:44:85:e5:74:4b:fe:3f:28:a5:8d:0c:12:74:
3c:0b:bb:38:b7:c2:d5:ae:c2:12:6e:65:17:a7:23:d1:c8:55:
29:82:88:f3:7a:3b:2c:16:dc:d6:44:16:ea:56:99:83:01:72:
7a:ca:a0:75:27:ce:44:c3:6d:f8:05:ff:90:0c:9b:85:36:b1:
6c:af:cb:a3:ff:8c:36:46:ac:e0:f6:09:a8:e8:0f:e2:78:29:
56:10:0c:7c:fa:bb:21:1a:f3:b7:de:31:6d:6f:7e:7c:1d:91:
2b:97:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:46 2025 by rpki-client