Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/5qJsmUylhyY-a-MCD4u3n9ee0Jc.roa
File: 5qJsmUylhyY-a-MCD4u3n9ee0Jc.roa (raw, json)
Hash identifier: 16kjTMc+ZHqzeXZqzN03g5j4WWjYfX8XBl+sXhDXX8s=
Subject key identifier: E6:A2:6C:99:4C:A5:87:26:3E:6B:E3:02:0F:8B:B7:9F:D7:9E:D0:97
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 018572033F99AFA6899573A92568461216E6
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/5qJsmUylhyY-a-MCD4u3n9ee0Jc.roa
Signing time: Mon 02 Jan 2023 10:24:53 +0000
ROA not before: Mon 02 Jan 2023 10:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202298
IP address blocks: 195.242.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:3f:99:af:a6:89:95:73:a9:25:68:46:12:16:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 2 10:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6a26c994ca587263e6be3020f8bb79fd79ed097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:97:c7:15:82:00:0d:3b:37:af:b0:66:ce:
ab:c3:3c:d6:75:d8:cb:c5:70:2e:1a:2d:94:5b:4a:
87:37:9d:c2:90:82:61:62:c5:c2:67:fc:8c:ab:75:
f2:3d:01:f1:12:00:6c:ae:8f:39:b6:b3:fd:ef:37:
b9:a4:c3:e2:b3:6d:0b:c8:cc:29:ae:02:50:df:01:
ce:b5:c8:fd:f7:0c:a7:ab:af:59:e7:9d:2e:f7:ce:
8f:a5:0d:e8:72:3f:85:a5:fb:df:8c:8d:f0:0f:c8:
9b:a4:7f:30:9b:74:87:4c:64:69:1c:53:a2:00:80:
a9:3e:0d:b9:e4:26:1d:28:2b:7c:5e:99:d5:99:f5:
17:3c:97:71:4d:4a:3e:98:0d:8d:b2:e1:fd:93:e4:
9c:6e:73:fe:ae:17:84:8e:0f:27:6b:83:0b:75:13:
67:73:a9:df:a2:53:4d:b5:d3:b0:7b:bb:4d:bf:1c:
e5:d3:cc:ea:bf:e6:7b:13:52:bc:ec:ae:8d:b6:c8:
da:a9:9d:81:33:35:8b:c2:6e:33:4e:97:bb:2c:fc:
b3:0e:8f:26:89:40:f2:e9:6e:d7:d0:76:b5:20:10:
22:9d:49:e0:12:46:12:fd:57:eb:ad:b6:83:79:fa:
9d:31:cd:35:db:d4:bd:c2:ab:c6:cc:68:76:a2:21:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:6C:99:4C:A5:87:26:3E:6B:E3:02:0F:8B:B7:9F:D7:9E:D0:97
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/5qJsmUylhyY-a-MCD4u3n9ee0Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:2f:09:7c:c0:71:7d:62:d2:1b:ca:1b:db:98:a6:ba:82:f4:
6a:5c:b7:61:41:eb:13:3b:03:a1:ef:b5:ec:56:c5:99:ad:61:
4e:5c:e2:54:e4:e4:fb:cd:ce:3e:61:86:5c:7b:e7:7d:33:79:
21:f4:45:5c:ae:1d:c8:fa:b4:5f:15:59:44:29:90:8b:39:5f:
6b:f5:6f:c5:cc:45:4c:b6:6b:12:8d:0b:43:6f:95:89:82:aa:
3e:dc:fe:a0:9b:fa:a7:e2:0b:41:01:00:39:f6:49:bd:b0:15:
cf:b1:78:77:e5:23:7a:3c:12:68:73:1f:1b:17:14:1d:7e:67:
aa:7b:3b:11:2f:57:57:dd:ed:f8:22:eb:b9:c4:f3:12:1d:e8:
dc:f4:35:5a:fa:8c:5a:24:d8:20:86:3e:38:68:ff:7c:1c:1b:
a4:d6:8d:ee:e9:6a:fe:22:e2:ef:40:8b:5c:56:d9:38:c5:81:
da:1b:b2:5b:2d:a6:7d:fa:59:f8:eb:03:71:0d:eb:d0:d6:bf:
0b:57:78:1e:ad:4c:02:6d:a8:df:55:3c:7d:80:a0:7f:f9:65:
52:90:69:4e:72:e7:1a:bc:69:bb:45:42:a5:4b:27:d6:b0:25:
84:d6:02:14:88:69:a4:e0:5b:fa:8e:0f:03:76:d1:8d:7c:c0:
51:d4:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:10 2025 by rpki-client