Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/guAQdYRmNab4yTdhIIOCJpBuetU.roa
File: guAQdYRmNab4yTdhIIOCJpBuetU.roa (raw, json)
Hash identifier: WoAHl4Wiqmf0RHbJJhev7LrORBBEea37V4XZnMRNPfU=
Subject key identifier: 82:E0:10:75:84:66:35:A6:F8:C9:37:61:20:83:82:26:90:6E:7A:D5
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 0C662167
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/guAQdYRmNab4yTdhIIOCJpBuetU.roa
Signing time: Sat 01 Jan 2022 08:58:54 +0000
ROA not before: Sat 01 Jan 2022 08:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34108
IP address blocks: 95.128.88.0/21 maxlen: 24
178.250.144.0/21 maxlen: 24
2a02:928::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208019815 (0xc662167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Jan 1 08:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82e01075846635a6f8c9376120838226906e7ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:2b:cb:d4:6f:86:68:d8:9b:38:dd:55:4a:
21:41:56:bc:a8:5a:82:28:17:a2:c9:f8:ac:df:5f:
54:4b:ab:fe:84:df:8e:c5:86:6a:3c:91:ee:e0:44:
96:6a:e9:99:bf:2d:5a:ec:c8:8c:98:a0:3c:e8:d7:
fe:03:7b:3a:0b:37:d7:41:4c:88:19:cb:37:e2:ca:
4d:11:b1:0c:1d:8a:ee:f5:a2:d1:e3:ba:b2:73:49:
cc:0c:69:31:61:98:5a:d1:86:37:b7:fa:9f:f9:53:
f4:93:15:dd:85:74:3f:75:cd:cc:25:7b:88:8a:2b:
5b:45:8f:24:4d:45:50:eb:b4:ea:21:4a:fe:9d:66:
7d:1b:1f:01:14:08:13:dc:d2:74:0d:48:4c:27:c2:
ea:1f:75:3f:87:f4:f1:77:74:52:3d:9c:bf:d8:d2:
eb:e8:fa:e9:a8:bf:c2:59:e4:38:93:ac:9e:e7:cc:
47:32:50:0f:27:c8:f1:d5:36:6b:a5:3f:9b:b0:5d:
86:a8:9c:c1:43:53:b7:18:2a:e6:29:02:44:5d:a6:
be:69:48:cb:6a:1a:f6:83:c5:1e:a7:f8:c7:d2:fb:
6b:ac:f1:1c:5b:db:74:be:f7:37:39:93:21:c1:ed:
13:0e:42:d3:b3:e0:f8:71:42:0c:69:eb:c1:ab:c6:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:10:75:84:66:35:A6:F8:C9:37:61:20:83:82:26:90:6E:7A:D5
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/guAQdYRmNab4yTdhIIOCJpBuetU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.88.0/21
178.250.144.0/21
IPv6:
2a02:928::/32
Signature Algorithm: sha256WithRSAEncryption
11:d8:19:33:c2:9b:cf:1a:a3:84:1b:a3:e3:1a:b3:39:f8:ad:
0b:21:06:37:a8:1e:02:65:40:cb:5b:54:fe:50:51:14:39:f9:
70:7b:1b:ed:1b:63:00:b8:0c:18:25:a2:e1:44:2e:1f:ab:0a:
87:2e:5f:19:42:4b:ac:d5:58:b3:dd:d3:d1:6a:df:3e:72:58:
b3:27:77:1c:cd:3b:09:1a:ea:e5:4b:8b:e5:49:8a:76:05:5b:
b3:61:2d:c9:5b:bb:46:30:14:29:24:3a:f6:b0:24:e1:a4:98:
4e:69:ce:03:0d:65:c7:f3:d3:bb:50:2d:f5:0e:0a:51:16:b0:
80:ed:c8:fd:8d:d0:1b:ee:bb:87:a4:f3:e3:0a:d4:69:cb:74:
53:54:15:62:19:92:18:31:45:21:3d:23:71:4b:1d:34:13:65:
79:59:b8:83:61:f9:35:d7:d5:7c:77:32:70:b3:b3:d8:67:10:
64:a9:1d:57:0b:2e:4d:b8:63:48:2c:fb:fd:57:19:ca:63:b0:
d9:22:4c:2a:1d:2d:ce:db:24:bd:f4:50:b3:01:55:2b:89:d9:
b8:55:1e:a7:6f:a8:04:6a:ac:a7:bb:cf:74:8c:7c:b7:6e:8d:
9c:4c:4e:f6:33:52:87:7f:8f:8f:b6:75:21:87:7a:93:70:0e:
c7:28:ce:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:08 2025 by rpki-client