Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/1-zeDq6Gdx4uFedsEO09BkuYg43k.roa
File: 1-zeDq6Gdx4uFedsEO09BkuYg43k.roa (raw, json)
Hash identifier: ixMDZIHXZe9CcxW6BEzBaTCHNmBgheVDtMhRNHOeQ8c=
Subject key identifier: FB:37:83:AB:A1:9D:C7:8B:85:79:DB:04:3B:4F:41:92:E6:20:E3:79
Certificate issuer: /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial: 018336288A4811AC1C627D68434489A2A0D4
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/1-zeDq6Gdx4uFedsEO09BkuYg43k.roa
Signing time: Tue 13 Sep 2022 09:22:49 +0000
ROA not before: Tue 13 Sep 2022 09:22:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207979
IP address blocks: 95.215.118.0/23 maxlen: 23
95.215.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:28:8a:48:11:ac:1c:62:7d:68:43:44:89:a2:a0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Validity
Not Before: Sep 13 09:22:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb3783aba19dc78b8579db043b4f4192e620e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:71:97:b3:19:89:97:4b:3b:0f:bf:bb:53:
28:fb:bd:7a:c9:38:29:89:07:5f:5b:01:b3:36:47:
19:78:04:46:75:41:f6:40:5d:70:2c:ef:60:16:eb:
a7:cf:28:a8:8d:19:59:50:0f:79:2a:8c:d7:0c:a5:
64:6b:fb:ef:e9:27:ab:7a:c0:8f:34:51:10:48:7b:
e6:80:b8:78:c5:7f:3c:e1:b7:69:93:3a:f4:e2:1b:
77:c7:11:7a:39:00:4d:19:a7:de:70:ab:b0:ba:26:
e8:35:02:72:c4:3d:6a:14:20:04:ad:d8:d3:8d:97:
67:94:8f:10:e5:b4:6e:3c:70:73:f4:ef:43:0f:f2:
b7:31:f0:47:55:87:47:80:4c:2e:cc:40:87:ea:1c:
c4:09:4a:ac:c4:f1:8a:c0:0c:86:af:46:2f:e7:3e:
bf:6b:29:40:bf:ca:9d:74:76:0e:09:c9:82:5c:4f:
73:3a:83:fd:9c:0f:08:99:cf:a6:11:6b:97:e3:6e:
80:ae:ac:3e:d0:9e:d2:1f:2a:07:97:bf:8c:a1:fe:
5b:62:d3:69:0d:29:4d:e3:25:61:92:2b:f0:c3:34:
0d:4b:1e:cd:31:da:29:52:ed:45:96:c1:d8:d6:be:
ca:77:39:46:6e:54:8e:82:0b:af:3e:e5:24:26:8a:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:83:AB:A1:9D:C7:8B:85:79:DB:04:3B:4F:41:92:E6:20:E3:79
X509v3 Authority Key Identifier:
keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/1-zeDq6Gdx4uFedsEO09BkuYg43k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.116.0/22
Signature Algorithm: sha256WithRSAEncryption
69:7f:4d:4c:aa:c5:de:b1:a6:b0:6d:ff:3d:17:3e:33:26:56:
47:db:b5:06:76:09:0e:38:61:c2:5b:a2:72:66:5d:0b:99:7f:
28:69:c0:74:94:ad:8c:79:af:0e:23:49:85:49:b1:4b:2c:3d:
d9:91:d5:c3:9c:e5:dd:81:33:21:89:25:dc:76:45:ae:7e:70:
75:e8:e4:8e:04:a6:19:90:a6:a1:60:64:0f:c4:99:46:20:1a:
37:68:83:60:0d:53:1f:46:27:52:18:16:00:94:1b:2d:9c:1f:
77:59:4e:f7:83:1b:c8:54:49:71:aa:e5:84:ee:ba:a6:54:d3:
81:67:6a:8f:65:b7:d8:e4:16:ef:e7:be:94:6e:df:2d:32:3a:
c3:1a:c0:e3:4d:ae:b3:9b:1f:a6:dc:bc:d2:87:52:f2:18:81:
cd:eb:98:a0:42:af:f9:7f:30:b9:02:51:42:44:8e:e6:ec:d6:
19:d9:46:07:db:d7:7a:cb:63:35:2f:9f:af:32:1e:bc:b9:2b:
c6:12:3c:70:02:00:c0:5c:31:82:dc:f2:db:ea:97:4e:98:73:
a2:c1:2d:cd:3d:3e:f9:f2:bf:d5:0f:ea:28:ff:81:e4:c2:ec:
6c:5d:85:b4:ce:c8:c7:4e:96:f2:4e:df:52:30:28:bb:09:ab:
f7:ac:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:51:42 2025 by rpki-client