Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/I8wIxMYf4FO-Mq3_JMJRTDfnmqA.roa
File: I8wIxMYf4FO-Mq3_JMJRTDfnmqA.roa (raw, json)
Hash identifier: c6bPX5TCaXkHkFuPbhMo/BDthsf+Ryhc5ROpQeN0hfs=
Subject key identifier: 23:CC:08:C4:C6:1F:E0:53:BE:32:AD:FF:24:C2:51:4C:37:E7:9A:A0
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 018692B204AC87F3235FF0B97A1806FA3358
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/I8wIxMYf4FO-Mq3_JMJRTDfnmqA.roa
Signing time: Mon 27 Feb 2023 11:46:25 +0000
ROA not before: Mon 27 Feb 2023 11:46:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210894
IP address blocks: 95.66.198.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:b2:04:ac:87:f3:23:5f:f0:b9:7a:18:06:fa:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Feb 27 11:46:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23cc08c4c61fe053be32adff24c2514c37e79aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:cb:7b:74:f2:58:0f:f6:48:4e:a7:0d:72:
00:8a:4e:da:94:1c:c6:25:c7:1b:b1:f3:28:50:68:
e1:16:0e:48:15:f3:60:9c:31:c6:46:67:6e:25:d5:
c0:71:b8:70:b2:b9:4c:28:19:56:0f:61:98:ca:d0:
67:f2:88:67:aa:68:58:fb:96:0f:94:da:f6:cd:ba:
e3:0d:4d:8f:ee:3f:37:3e:ab:85:10:38:b2:1a:22:
17:70:19:38:1f:60:c5:78:90:59:05:8b:8a:cf:33:
76:2a:be:01:f4:1f:34:73:c1:d0:a5:02:bf:83:83:
8a:1e:7d:10:05:84:a1:64:27:42:3c:6c:d5:ce:e5:
23:d1:4d:aa:22:0f:0f:cc:41:75:58:0a:df:52:ee:
71:c2:b9:b6:7a:a0:e2:37:88:bc:b4:ab:af:75:91:
1f:9f:8d:72:24:92:c6:07:a4:fc:a4:02:17:80:1c:
04:e0:c6:95:8b:54:32:a9:d0:3f:b1:1b:5e:57:31:
58:60:0e:74:13:2a:14:5a:bb:88:ed:35:bc:3e:78:
a5:7b:9d:76:e4:28:ea:74:77:db:64:05:23:b8:5e:
69:00:b5:0f:4c:f1:63:47:d7:0c:86:40:f0:9b:b6:
3d:b3:2b:4d:ee:11:29:b4:42:35:ad:52:f3:4b:32:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:08:C4:C6:1F:E0:53:BE:32:AD:FF:24:C2:51:4C:37:E7:9A:A0
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/I8wIxMYf4FO-Mq3_JMJRTDfnmqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.198.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:76:2a:41:17:3e:8d:f8:a9:23:30:fa:e2:56:07:6e:c2:40:
a8:5c:96:94:5d:15:0e:da:06:0d:c2:7f:ed:68:5e:77:04:ce:
71:47:ce:69:70:98:9b:33:a2:8d:e8:e2:2b:7c:f9:10:f9:c6:
c5:7b:04:28:11:0f:7e:4a:bf:21:13:9a:50:e4:2d:a1:91:69:
a9:b6:79:0f:ce:55:1b:39:b0:15:d0:c7:41:67:73:f8:3c:9c:
c5:36:3a:1a:ec:9f:d4:8b:91:67:f9:00:1c:c9:cf:9c:8e:f4:
e9:1f:d6:1d:f7:b9:e9:b2:9f:91:e9:ff:c9:b5:8b:22:64:4d:
bf:12:cc:34:65:c9:23:11:47:8c:cb:17:cd:cf:eb:35:a1:0c:
f3:df:5c:2a:fa:8b:f1:04:8d:62:7a:1e:36:df:7d:10:a0:86:
50:07:6a:64:7d:48:e6:a7:77:b8:8e:c8:ea:bf:62:b5:79:9d:
cc:a0:a8:b5:fc:d0:ed:cc:aa:2d:fd:5f:76:c4:14:ff:2d:b9:
a5:5c:a4:4a:47:a0:b4:dc:72:a7:ae:cc:a8:25:aa:3e:c8:75:
12:ee:4e:d7:76:05:75:70:1a:54:71:b6:14:64:6d:26:03:13:
e3:ed:9f:81:fe:c6:ab:f2:b2:ab:fa:fa:e6:04:74:94:98:91:
39:ea:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:08 2025 by rpki-client