Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/fdRnAhtDOyQ7OaBycJUmh4vKk-Q.roa
File: fdRnAhtDOyQ7OaBycJUmh4vKk-Q.roa (raw, json)
Hash identifier: e3mLeX30Z9LO87CLC8DbJKzlN0bN3vHc+3rhPKbDdpo=
Subject key identifier: 7D:D4:67:02:1B:43:3B:24:3B:39:A0:72:70:95:26:87:8B:CA:93:E4
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 0185719570D124E5FF98AE2219774AD2E2A1
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/fdRnAhtDOyQ7OaBycJUmh4vKk-Q.roa
Signing time: Mon 02 Jan 2023 08:24:57 +0000
ROA not before: Mon 02 Jan 2023 08:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197835
IP address blocks: 195.94.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:70:d1:24:e5:ff:98:ae:22:19:77:4a:d2:e2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Jan 2 08:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dd467021b433b243b39a072709526878bca93e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:05:c7:e6:d4:76:18:83:4f:3f:81:17:32:
13:44:44:5f:85:15:da:71:12:b3:8e:80:d5:2f:0b:
a9:1b:a4:5c:fe:3a:e4:c3:96:99:5d:8f:d4:9d:07:
2f:30:e5:65:2e:76:fd:a5:f4:1c:9c:cd:c7:f0:be:
4e:b8:6f:2c:7f:4d:e5:e7:01:ef:03:ab:ea:8c:e9:
6e:51:d7:c0:78:9d:14:37:dc:f9:21:53:e1:33:b2:
a8:67:14:78:c9:3d:31:e1:2e:6c:7c:e2:69:00:59:
1d:87:e8:2e:c9:d7:97:56:8e:cc:7f:d1:ea:89:10:
9d:3e:40:f0:31:ea:aa:0c:b1:4a:d6:1e:74:b9:5d:
1a:32:30:57:86:d7:db:18:11:53:72:be:ec:36:c6:
1b:94:d6:5b:64:4f:c3:a1:1f:cf:8b:2e:21:37:cc:
6d:38:b3:bf:12:c8:30:38:68:81:47:81:ce:88:35:
cb:fa:7f:df:34:55:85:c8:ae:29:a0:5c:03:56:6f:
4a:66:88:4b:66:b8:9e:f4:5b:dd:86:aa:bf:50:b6:
fe:21:10:af:bc:69:02:4e:f4:33:a4:17:e6:77:42:
2e:fc:24:6d:d1:46:63:b9:f1:5f:52:c7:1f:0d:c7:
33:b8:29:55:16:c7:91:57:2a:06:b1:68:21:5a:8b:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:67:02:1B:43:3B:24:3B:39:A0:72:70:95:26:87:8B:CA:93:E4
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/fdRnAhtDOyQ7OaBycJUmh4vKk-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.134.0/24
Signature Algorithm: sha256WithRSAEncryption
20:78:6c:0a:dd:32:47:d3:2e:08:96:94:91:83:0e:85:58:71:
88:fe:2d:9d:2f:65:6e:a2:b1:86:18:57:c3:f0:db:40:9b:47:
4b:82:d3:4c:fe:a2:5b:f9:80:c8:6d:f0:72:d6:72:55:74:47:
48:a9:89:93:48:88:78:75:6e:73:ff:48:b2:25:46:79:e1:a7:
52:78:38:20:c8:b7:d9:3e:51:cc:9a:15:a5:7e:23:e0:4a:b7:
2c:82:47:4a:b6:46:dd:d9:ad:18:b4:2b:c8:93:86:f6:69:b0:
de:88:92:49:19:c8:3b:8a:0d:61:bc:6c:a2:b2:75:40:3d:1e:
08:3f:60:fd:33:6d:68:24:f8:24:01:57:29:80:7b:ca:4c:f1:
78:fd:ba:88:95:e1:d2:be:be:af:2a:bf:39:48:c3:f7:09:e6:
63:ad:cf:a1:98:4d:c7:4e:31:ff:34:42:27:b4:76:fc:df:51:
3e:0e:7f:a1:98:d6:3c:c3:83:b8:c9:09:47:9a:e2:09:11:dd:
ca:72:ee:a2:64:1a:eb:fe:82:27:d9:d5:bb:9a:d7:d1:b0:bf:
aa:6c:15:13:bd:e7:b9:30:53:e5:fb:9c:2e:b1:ba:73:4d:8d:
3c:b0:c5:03:df:29:cb:98:c9:e3:3e:66:1a:b4:44:43:50:e7:
71:72:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:47 2025 by rpki-client