Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/KdEAiaJlu_kqOeIqQSVjVhvB_jQ.roa
File: KdEAiaJlu_kqOeIqQSVjVhvB_jQ.roa (raw, json)
Hash identifier: fTDai/nyfDyu+Fkn5Nmt7DxyEcfFzzQ/GO/3Goe+jcg=
Subject key identifier: 29:D1:00:89:A2:65:BB:F9:2A:39:E2:2A:41:25:63:56:1B:C1:FE:34
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0185701EDE28171D696F3B3385395C686F35
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/KdEAiaJlu_kqOeIqQSVjVhvB_jQ.roa
Signing time: Mon 02 Jan 2023 01:35:49 +0000
ROA not before: Mon 02 Jan 2023 01:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210599
IP address blocks: 95.130.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:de:28:17:1d:69:6f:3b:33:85:39:5c:68:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 2 01:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29d10089a265bbf92a39e22a412563561bc1fe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:b6:af:b6:b5:b2:cb:2f:ae:94:6b:18:b6:
9e:ca:a8:a3:80:4c:8a:81:dd:c4:c0:f6:b2:93:73:
8c:4f:de:1b:16:6f:c5:f6:d8:a1:b0:d0:5b:3f:1a:
0d:78:89:6e:e7:fb:19:68:24:08:b4:92:78:8f:6e:
64:eb:e1:b2:58:39:61:b8:52:98:ee:2d:7c:8e:20:
e8:01:18:b4:a0:6b:44:f9:f8:c2:57:d7:83:c2:1c:
65:32:21:58:34:8a:e2:23:27:7c:9f:58:d2:d7:7b:
4c:80:4b:66:6e:c8:4b:fb:a3:ca:be:ae:5d:ca:54:
7f:81:4e:ba:4c:78:86:41:d0:2f:b8:0d:a8:df:d7:
b9:e4:b4:17:3e:c0:ec:7c:95:cd:59:ce:a5:cf:4e:
ec:ce:fc:75:c0:fd:91:51:32:f3:8f:17:7c:ad:fe:
41:71:36:d2:c3:e7:0f:1a:02:8d:ef:8f:73:02:ab:
81:4d:b4:0b:e4:16:ce:e5:48:fc:1c:a4:84:a8:5a:
c8:e6:de:4f:9c:68:51:85:5a:34:da:a9:b1:06:ac:
a2:b2:ae:83:5f:a9:10:69:e3:2e:ee:92:c2:a0:28:
1b:9c:4f:b2:95:a8:d2:ed:15:64:94:b4:02:a0:8e:
38:c6:bc:43:38:18:6a:46:9d:1f:de:6d:c0:21:d8:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:00:89:A2:65:BB:F9:2A:39:E2:2A:41:25:63:56:1B:C1:FE:34
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/KdEAiaJlu_kqOeIqQSVjVhvB_jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e3:b2:f7:a5:9f:16:2c:5f:3f:5f:af:3e:b4:d1:f4:6f:2a:
bb:90:63:3f:ae:f3:cb:a8:e3:0a:c8:ac:bb:6a:7a:da:02:e8:
44:09:a9:e1:a6:ee:b0:69:4d:ff:40:c6:00:d6:e1:3f:cd:42:
c7:fc:de:c8:f2:9a:9a:c3:13:e0:68:7d:6e:4a:8c:d1:c9:95:
4b:2f:3d:a0:31:17:ed:42:26:d2:8a:93:01:76:06:9d:44:fd:
0f:42:9b:ee:07:c0:09:79:12:12:16:a4:83:63:28:1c:dc:4f:
fe:53:4a:de:9f:ed:dc:5d:76:80:dc:fc:33:be:b5:64:57:07:
ea:48:e4:03:76:34:a8:59:96:cb:e9:10:db:c4:a4:11:13:01:
7b:c1:cc:f2:43:d6:38:6f:41:50:06:9c:97:ed:ff:ed:0d:96:
44:79:bb:5b:51:b7:e3:4f:3e:cb:00:fc:7c:ee:b6:fa:6a:17:
50:e1:ff:9d:3d:34:77:59:e7:e5:b7:64:0d:87:7e:4b:50:7a:
3b:78:d4:10:e4:a7:68:a3:20:80:e9:0e:35:20:40:08:c6:e3:
b4:54:46:91:57:78:b1:e1:10:94:a5:17:f6:a7:5b:00:25:7f:
b4:eb:01:c2:48:63:6e:25:d0:27:6c:21:94:47:2d:57:f3:61:
ce:0c:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:08 2025 by rpki-client