Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/CT2ZqI7IXRFsdAaPnGsSg1zmhAI.roa
File: CT2ZqI7IXRFsdAaPnGsSg1zmhAI.roa (raw, json)
Hash identifier: xoxKt4RAcSKzjHXoLFdJe3glBXtYzBXn6RoM2Yhl3Co=
Subject key identifier: 09:3D:99:A8:8E:C8:5D:11:6C:74:06:8F:9C:6B:12:83:5C:E6:84:02
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0AFD8FCB
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/CT2ZqI7IXRFsdAaPnGsSg1zmhAI.roa
Signing time: Sat 01 Jan 2022 13:02:48 +0000
ROA not before: Sat 01 Jan 2022 13:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44386
IP address blocks: 195.34.20.0/24 maxlen: 24
195.34.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184389579 (0xafd8fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 13:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=093d99a88ec85d116c74068f9c6b12835ce68402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ca:a3:d3:ef:9a:58:9e:2a:e4:26:1f:c9:f9:
9c:0a:64:e4:8e:95:ad:12:c5:1f:29:f2:41:a2:45:
0c:04:07:06:55:2b:b3:c5:06:19:da:ab:ed:ad:42:
17:29:e1:99:e2:40:f6:a2:42:35:74:1a:1e:97:f9:
0e:ff:bb:4f:11:b4:e0:2c:26:60:a7:68:93:1f:5d:
0d:ba:f3:c9:bc:e2:00:81:91:b1:98:01:d4:ab:09:
ab:4d:39:59:39:53:5c:f3:dd:f2:e2:e7:86:3c:ea:
fd:c1:c6:ff:81:1b:98:18:e4:f6:cf:9e:09:dc:c6:
52:4f:8f:1f:0b:6e:91:ce:de:5f:a9:68:12:df:09:
77:83:df:76:f5:19:c2:9e:bf:66:f1:17:78:64:55:
6f:bc:5c:e7:52:4e:c0:a4:d1:3b:60:d3:a4:e5:3f:
cb:7d:6c:99:10:43:3d:28:8d:26:3e:c9:91:a5:03:
ef:cb:3a:2a:28:e2:c7:48:77:80:97:e3:ed:33:5c:
90:db:33:15:4c:ec:f1:6a:59:b9:0e:4b:e2:e4:a1:
88:91:ec:b2:7d:f4:02:ab:50:5d:be:34:40:04:d8:
ec:a1:a4:99:be:e5:b0:69:76:d1:ea:63:ad:3e:d8:
10:95:4b:9f:40:59:91:e9:21:46:8e:2e:06:ee:a1:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:99:A8:8E:C8:5D:11:6C:74:06:8F:9C:6B:12:83:5C:E6:84:02
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/CT2ZqI7IXRFsdAaPnGsSg1zmhAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.20.0/23
Signature Algorithm: sha256WithRSAEncryption
60:20:6d:5b:5b:48:a4:c2:d9:14:1a:26:a9:b7:94:40:c5:d2:
c2:dd:75:63:b7:5c:c5:f1:c7:c9:35:c7:98:67:9b:19:fa:04:
25:25:6a:45:f3:82:94:d1:5d:b6:32:cd:d6:93:27:0f:b6:4d:
3d:59:b7:3b:d1:ac:85:69:66:17:d6:5f:da:48:5d:75:04:e8:
45:fd:07:ec:90:f9:b2:55:04:a0:8c:8c:00:49:08:bf:07:08:
92:f9:b7:d8:d7:3a:57:0c:f0:cf:e3:6f:0d:86:24:38:7e:92:
09:ac:8e:f6:82:95:1b:52:d4:df:e9:c3:21:19:2a:97:1e:2f:
92:59:d7:8f:09:f4:c1:ad:6b:f4:95:b2:73:a5:0d:51:16:b5:
15:50:f6:fa:55:5e:de:b0:6e:77:c3:77:29:9c:57:5e:16:ab:
a6:64:57:d8:27:03:7d:71:e1:06:df:58:34:f6:e9:aa:9c:a3:
f4:0b:33:58:7c:bd:85:b6:3e:d5:a6:6d:06:2e:25:72:6d:b5:
5d:a8:4b:33:f3:5e:a6:b6:d9:b5:78:e8:a2:d2:49:54:fa:a4:
a1:c6:d6:b4:32:92:8d:aa:07:cb:7c:1f:aa:3c:b3:d7:e0:f8:
e9:6e:ce:e6:f3:06:cc:b7:35:69:b2:e6:ab:ca:24:5b:03:d2:
20:d2:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:56 2025 by rpki-client