Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/1XU4KB0v6CKFGAFALJkCJq-_zjw.roa
File: 1XU4KB0v6CKFGAFALJkCJq-_zjw.roa (raw, json)
Hash identifier: 0XllFDthQHd8Ca5Oe+w8qMKXYEz07HvKFmjygafO0iw=
Subject key identifier: D5:75:38:28:1D:2F:E8:22:85:18:01:40:2C:99:02:26:AF:BF:CE:3C
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 0182F4CB07113F12C7883C285EAA754DB7EE
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/1XU4KB0v6CKFGAFALJkCJq-_zjw.roa
Signing time: Wed 31 Aug 2022 16:45:22 +0000
ROA not before: Wed 31 Aug 2022 16:45:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197835
IP address blocks: 195.94.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:cb:07:11:3f:12:c7:88:3c:28:5e:aa:75:4d:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Aug 31 16:45:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d57538281d2fe822851801402c990226afbfce3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:b3:8f:a5:68:a2:54:55:a7:6c:39:3b:51:
0c:e7:e5:52:4e:43:f5:1d:f4:dc:4b:36:63:99:93:
91:c6:2e:05:b5:e9:8c:4d:68:fc:d7:2c:87:80:8a:
a1:6d:f4:e2:04:53:e4:db:48:5e:90:24:64:ad:47:
06:12:82:6a:0f:ae:43:79:f3:85:33:15:eb:60:35:
79:24:f0:a7:d3:9e:9d:11:1b:af:1a:79:67:5d:11:
83:6a:e3:ba:43:ea:3b:1e:7b:91:83:75:84:1d:9f:
fb:d0:37:dc:d8:c1:47:78:bf:f7:16:2a:66:f0:05:
29:e9:d3:e2:58:01:0a:64:76:9c:b5:6e:6d:4b:31:
21:20:05:8d:ea:f4:95:a9:bd:7b:38:1c:32:67:4c:
ee:e4:68:3c:88:14:4c:fe:17:1a:82:1f:9e:6b:43:
fa:60:d9:b1:4c:dd:8c:4e:a8:2c:80:7b:5c:47:7a:
00:30:38:5c:e2:9f:a0:2e:0d:47:2f:cf:bd:d1:36:
d8:a5:c3:9b:25:21:33:5b:69:0b:38:d6:8e:8b:fe:
54:f4:11:ef:c9:9c:f4:73:c0:f1:3d:25:d1:ca:56:
fd:fb:ba:38:f2:3e:a4:a2:e5:85:74:4a:d5:fa:42:
03:9a:e9:e9:62:2a:fb:40:08:b9:e2:11:d2:aa:2e:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:38:28:1D:2F:E8:22:85:18:01:40:2C:99:02:26:AF:BF:CE:3C
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/1XU4KB0v6CKFGAFALJkCJq-_zjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.134.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e7:be:a7:bf:f2:67:46:d5:60:b2:eb:b2:84:f3:f7:50:0a:
52:92:19:eb:e2:d2:f9:47:0c:93:be:ba:be:89:e6:cd:60:c9:
9b:59:be:1b:4a:29:16:53:d2:c3:2b:1f:84:eb:2d:45:86:65:
7b:a1:b1:53:08:7f:a5:54:02:3c:0f:2e:c8:c1:b4:b5:25:a5:
ee:7c:27:0e:0d:b8:01:e3:93:54:7e:65:73:b5:dc:b4:75:10:
ed:eb:12:55:93:43:8e:92:9a:ad:19:ed:36:26:cb:8b:90:b9:
63:e6:1f:72:60:dc:91:b1:f7:c4:37:17:72:3b:a7:88:e1:71:
9d:7f:01:d3:32:36:5c:a5:3a:99:4c:5c:7e:6b:c1:fb:ee:b8:
e7:c1:52:45:df:60:a4:be:8e:4c:3e:27:2c:97:a4:24:85:3e:
56:a5:b5:47:5c:e2:fe:b0:ce:bf:cf:30:e0:81:9b:f7:6a:dc:
b9:c6:ad:25:b0:f2:a8:67:88:1b:ce:64:62:96:47:06:dc:33:
0d:79:c3:8a:16:5f:52:51:1b:66:53:b3:c8:48:a0:41:35:ac:
39:3a:31:67:b7:5a:66:b8:78:9a:cf:98:4a:50:e4:b8:a2:7b:
80:45:4f:e0:68:37:2c:2f:6b:56:90:3f:5e:b9:dd:ca:f5:7e:
16:57:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:24 2025 by rpki-client