Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/7BYhOV2dkqdJA25WaC7bzFkX5MQ.roa
File: 7BYhOV2dkqdJA25WaC7bzFkX5MQ.roa (raw, json)
Hash identifier: +A4zGeppne3Tz8PMUdmv1BtWww2n6NFtDuaE9bxAHh0=
Subject key identifier: EC:16:21:39:5D:9D:92:A7:49:03:6E:56:68:2E:DB:CC:59:17:E4:C4
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0A35BED9
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/7BYhOV2dkqdJA25WaC7bzFkX5MQ.roa
Signing time: Sat 01 Jan 2022 07:54:18 +0000
ROA not before: Sat 01 Jan 2022 07:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9211
IP address blocks: 195.242.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171294425 (0xa35bed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 1 07:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec1621395d9d92a749036e56682edbcc5917e4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:e6:27:fc:c4:d5:46:04:e7:0e:83:e2:71:
b7:e2:2d:ee:56:6d:79:8a:18:f1:77:ce:c4:dc:80:
52:44:78:a5:ad:12:c2:c4:60:d7:ee:90:12:54:53:
dd:5f:3f:7d:67:8e:df:e6:ba:10:4c:f5:cd:04:ef:
53:c0:20:42:ce:53:01:3d:7d:6b:02:d2:fc:fe:1c:
33:64:e6:b5:9e:c4:4b:0e:78:71:2c:02:4d:af:c7:
be:20:50:6d:a8:f7:b8:43:3e:f3:bf:49:60:cc:44:
e8:54:b7:37:99:63:5a:35:67:45:64:65:0d:3c:b1:
84:d9:f2:a7:2e:da:d7:4b:eb:e9:f3:bf:f0:b8:dc:
c7:af:b5:fb:ff:34:e5:69:55:cf:27:c1:89:e3:6a:
bc:32:d1:97:b0:d8:4e:48:8f:4a:9c:11:70:0e:c4:
b7:f5:ba:c8:de:f7:9f:ec:95:6a:79:ec:ff:a8:fb:
bc:5c:a8:5e:eb:45:88:c4:da:12:46:98:37:98:bb:
c7:bd:7a:ca:23:8a:29:2f:1a:b0:c9:e5:dd:4d:db:
85:99:a5:96:b4:b7:b9:a6:89:05:ba:0a:ff:a8:9d:
6f:6f:eb:26:62:15:b9:7f:10:ed:e5:17:c5:52:be:
cf:a8:1e:fb:40:3e:bf:1c:2c:64:5e:3b:3b:3a:7b:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:21:39:5D:9D:92:A7:49:03:6E:56:68:2E:DB:CC:59:17:E4:C4
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/7BYhOV2dkqdJA25WaC7bzFkX5MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
80:8e:01:65:c1:e0:aa:89:d9:41:c1:e2:e6:a8:99:70:92:5c:
62:22:df:2d:ce:97:73:49:f2:6b:4a:c6:74:cf:5c:6a:89:dc:
ca:89:62:87:ee:35:e1:17:29:4a:71:84:8e:9e:54:94:76:a6:
9a:52:a2:b6:dd:59:d3:93:8f:45:0c:19:82:ca:0a:33:63:62:
30:df:71:f0:be:30:60:e8:b1:c3:3f:00:21:14:e7:7c:7e:f8:
4c:e6:02:fc:da:5a:c3:f6:fe:e5:8a:b8:f8:f9:c6:01:d9:77:
7e:ab:6d:cf:72:73:7e:ef:ec:09:b1:78:01:c8:f2:72:7f:98:
00:b1:a9:f9:d6:e0:76:3e:32:28:ec:aa:ff:00:d0:94:39:7e:
c7:9c:ca:f1:ab:9c:a8:5f:73:19:61:de:25:1b:a3:72:5e:50:
20:0b:32:45:38:af:f1:8a:89:9c:42:0f:84:f1:43:77:aa:98:
8f:50:b1:81:ce:41:5f:b4:f8:6b:d8:92:8b:e2:5e:75:34:b7:
df:cc:e0:be:b1:d3:6a:04:6e:27:d3:1f:92:d2:2d:e0:65:62:
3e:60:1a:9d:5e:57:4a:24:a5:74:6d:56:15:37:34:f5:c4:ca:
c5:bd:b1:4c:7c:5b:e4:a9:34:be:cb:93:bc:79:f5:e9:2f:00:
ea:4c:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:57 2025 by rpki-client