Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/0BAIYPmAiSvlUifkmz_cxiFKVO8.roa
File: 0BAIYPmAiSvlUifkmz_cxiFKVO8.roa (raw, json)
Hash identifier: lgiwoTalqq8YkqvEcaullIpX38xRGAZBdprmRvm/kdE=
Subject key identifier: D0:10:08:60:F9:80:89:2B:E5:52:27:E4:9B:3F:DC:C6:21:4A:54:EF
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 01856D38674B60A89D51A2A8F577984F84C5
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/0BAIYPmAiSvlUifkmz_cxiFKVO8.roa
Signing time: Sun 01 Jan 2023 12:04:51 +0000
ROA not before: Sun 01 Jan 2023 12:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208626
IP address blocks: 95.181.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:67:4b:60:a8:9d:51:a2:a8:f5:77:98:4f:84:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 12:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0100860f980892be55227e49b3fdcc6214a54ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:f8:5e:5c:43:ee:61:c4:fa:0f:58:5d:45:
a0:7b:27:bc:5d:a1:4b:f4:d4:11:a8:01:bd:8e:22:
62:e2:f2:da:29:c5:e1:c3:b2:7f:16:d0:c2:48:9d:
62:dc:8c:de:66:42:04:93:37:8f:e0:e6:0c:b6:34:
c2:50:e4:6c:3e:e9:53:50:c6:76:a2:38:3b:62:e2:
88:f1:e1:ba:2a:a6:40:de:74:c6:2b:c7:da:75:2a:
e9:a5:78:22:6d:f3:eb:f3:96:14:0f:28:56:5b:3c:
ba:43:21:06:50:65:e6:31:d8:a8:68:09:de:7b:ae:
40:c0:7d:f9:d2:01:9e:fc:bb:df:0f:0c:d2:f7:ff:
de:d3:33:0e:97:a2:04:24:6e:9d:b2:a9:73:2b:aa:
86:70:a5:2c:4e:99:8a:c2:f7:d5:3c:0d:44:cd:e5:
51:21:36:c6:aa:0f:84:88:e2:e1:f7:5e:ab:db:d6:
c2:48:0b:08:44:bd:57:26:44:43:d7:da:36:5e:76:
5d:3e:c0:c5:7e:c2:17:4c:78:2c:79:85:39:67:50:
ce:d7:ab:56:c1:ba:8d:4a:82:fa:98:a9:39:71:41:
a7:0c:47:ba:4b:48:e6:05:d4:31:a4:fe:bb:68:ca:
e0:f0:70:90:42:c9:20:03:62:94:27:88:c5:8b:f7:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:10:08:60:F9:80:89:2B:E5:52:27:E4:9B:3F:DC:C6:21:4A:54:EF
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/0BAIYPmAiSvlUifkmz_cxiFKVO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.164.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b2:9f:a2:2d:d6:83:92:98:18:ba:14:09:3f:e8:8d:e0:1e:
6f:24:ee:a2:b0:53:d0:c5:2e:d5:16:2d:c3:af:ae:68:71:7e:
54:63:a0:1e:0f:6d:6f:73:fc:aa:91:c9:52:22:e8:fe:96:9f:
f2:d9:19:c1:5f:af:3f:91:51:ff:6c:a1:41:63:fb:54:03:54:
b2:6a:45:63:6c:67:98:a1:ef:56:c5:ea:28:01:e1:31:c3:6f:
9d:eb:c5:97:36:a0:ec:0f:e2:ea:76:64:30:e2:5e:06:c1:73:
de:5b:76:00:53:1b:2b:8f:d0:16:b5:5d:17:07:55:31:6c:4e:
a7:9c:52:08:47:62:3c:0a:80:a9:e0:cf:c0:85:f1:2a:3d:4f:
b4:8d:1a:fb:70:11:8a:3d:2d:b0:e6:6f:d3:b1:6c:26:f2:3b:
25:01:2c:75:aa:e8:18:64:a6:2c:a6:ef:3a:1a:73:b4:81:ce:
fb:85:af:9e:7c:e3:d3:26:ad:fc:09:04:7c:e4:72:c6:51:e9:
51:6a:4d:59:d7:b7:21:64:f9:77:54:ca:45:29:f9:6b:4b:11:
10:78:6e:6f:8f:2b:7a:a1:ca:74:ce:ac:08:a9:5f:86:14:bc:
dc:3b:58:7c:5a:02:3d:11:30:71:9c:42:f9:9e:49:04:b2:f7:
51:d8:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:20 2025 by rpki-client