Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/7REjGkT7F6mx0ZmWa7rZyNT24B8.roa
File: 7REjGkT7F6mx0ZmWa7rZyNT24B8.roa (raw, json)
Hash identifier: c/CaKGTSG6OF3v7PH7VSTmuvZ1sUyP3AyqsC/O0GKuA=
Subject key identifier: ED:11:23:1A:44:FB:17:A9:B1:D1:99:96:6B:BA:D9:C8:D4:F6:E0:1F
Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial: 0FE427C4
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/7REjGkT7F6mx0ZmWa7rZyNT24B8.roa
Signing time: Sat 01 Jan 2022 08:55:59 +0000
ROA not before: Sat 01 Jan 2022 08:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25057
IP address blocks: 195.216.214.0/23 maxlen: 24
2001:67c:214::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266610628 (0xfe427c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Validity
Not Before: Jan 1 08:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed11231a44fb17a9b1d199966bbad9c8d4f6e01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:4b:d2:be:87:22:ea:32:be:80:dd:d3:59:
f5:5d:12:c7:22:ce:27:3c:ea:b5:a4:78:2b:45:4b:
ea:f2:a1:a3:b5:20:7d:76:b4:4e:ad:6e:a1:0d:94:
0e:53:6d:47:88:a6:c7:4e:71:38:7a:b5:0a:95:98:
d2:c9:c0:6b:7a:55:4b:30:4e:15:13:27:29:01:2c:
0f:1c:34:90:05:a4:02:12:3d:cb:29:4b:08:92:13:
75:6e:02:43:8a:cb:cc:29:21:fd:2e:95:cd:5c:ca:
dc:84:32:e3:dc:c6:bf:20:5d:2c:39:6d:88:26:72:
18:ee:af:4a:93:a6:9e:4f:4a:c0:66:75:3e:6d:57:
99:0a:c2:f1:9a:87:1c:13:12:ad:1b:b1:0b:6d:64:
34:36:92:88:64:07:de:47:f3:83:56:7a:15:20:68:
5c:2c:ee:5d:75:5a:cb:c3:1a:fb:1f:9a:c7:8e:98:
ce:2e:a1:b2:71:cf:6b:b3:47:16:20:c1:19:61:c9:
3d:66:37:94:08:52:cb:60:05:19:51:39:2f:14:f9:
f0:23:f3:30:81:85:24:5f:49:54:83:a3:e9:62:d0:
be:d5:eb:5f:ba:02:14:60:bb:be:33:3a:28:89:15:
87:b4:50:42:c8:ce:e4:35:25:73:92:30:a7:3e:3e:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:23:1A:44:FB:17:A9:B1:D1:99:96:6B:BA:D9:C8:D4:F6:E0:1F
X509v3 Authority Key Identifier:
keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/7REjGkT7F6mx0ZmWa7rZyNT24B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.214.0/23
IPv6:
2001:67c:214::/48
Signature Algorithm: sha256WithRSAEncryption
44:0c:e8:12:95:c8:a5:0f:4c:02:a7:eb:91:99:c3:f5:81:4e:
13:3b:93:2b:fd:4c:a4:95:96:43:24:1c:84:40:e3:c1:6d:7f:
ab:f3:d7:99:6a:f3:32:89:79:71:02:cc:da:4e:9d:8d:98:2d:
12:c0:41:1a:99:c4:1e:8a:36:a2:c4:81:2d:5a:9d:a1:47:d7:
9a:04:3e:32:08:1f:01:a1:67:97:87:c1:e9:ac:3f:6c:fb:02:
4d:ea:bb:32:51:62:e8:37:4b:75:58:12:fc:2e:fc:6e:33:45:
40:63:73:ff:4d:14:0b:ea:a5:b1:23:5e:f6:d1:4d:bb:1c:13:
3b:92:41:fa:a7:ab:cc:2b:8d:40:fb:e1:1f:25:a2:ff:92:52:
53:2d:e1:c5:ca:e1:c9:3f:93:cb:38:a5:6f:1a:41:b3:56:88:
f5:a4:c1:9d:b6:55:21:26:8d:b4:af:01:c8:b8:67:90:c3:f2:
12:b8:c7:0a:51:42:6e:8b:42:1a:8c:06:a5:97:71:e1:33:88:
9e:8a:08:10:2c:02:a0:78:1e:63:13:8c:26:c6:e1:8a:ed:96:
32:14:db:e6:2b:0d:d4:7b:93:66:dc:fe:4f:08:80:64:b0:ac:
0b:a6:f6:47:70:11:f7:c0:38:c2:8d:01:2f:12:cb:b6:01:14:
3b:af:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:08 2025 by rpki-client