Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/20fLs9R9tYMaEmax27rUJDH5XGA.roa
File: 20fLs9R9tYMaEmax27rUJDH5XGA.roa (raw, json)
Hash identifier: YtV/kfSfu4YQCzO9HkE5VCYRAdqem87wOHUcpyMu48A=
Subject key identifier: DB:47:CB:B3:D4:7D:B5:83:1A:12:66:B1:DB:BA:D4:24:31:F9:5C:60
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01896824393F635EFD70EC2035A34A2DB5C0
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/20fLs9R9tYMaEmax27rUJDH5XGA.roa
Signing time: Tue 18 Jul 2023 08:35:51 +0000
ROA not before: Tue 18 Jul 2023 08:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 195.13.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:24:39:3f:63:5e:fd:70:ec:20:35:a3:4a:2d:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jul 18 08:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db47cbb3d47db5831a1266b1dbbad42431f95c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:9b:c4:8d:b0:5f:32:a0:b1:0d:ef:3f:66:
bf:a3:e5:ab:b3:12:ed:e6:db:ea:1a:f1:3f:64:81:
88:68:d1:0a:9b:f9:85:1f:95:94:8a:87:32:c2:d3:
bc:73:74:f4:68:b1:16:0e:bd:5a:84:cb:6c:06:da:
ef:ec:15:ea:58:2c:96:d1:a3:1f:59:61:8d:42:74:
fc:ad:b5:d3:d8:84:30:e5:cb:a4:d6:60:72:2b:94:
1a:56:24:9b:ef:b6:8b:2f:61:70:4a:0c:37:d0:f0:
3d:af:22:40:d8:e0:ce:03:41:16:67:1c:73:15:37:
d5:14:37:c7:d7:c3:5f:e4:8f:4f:87:7a:73:06:e4:
f8:3c:98:75:6f:a2:ea:04:1c:72:bb:c3:02:79:00:
45:cc:c5:70:83:d1:13:6c:ee:09:72:5c:88:ff:df:
1f:74:b2:8b:39:f3:1a:42:01:8c:f3:17:00:7e:35:
53:c5:da:70:37:ba:47:f3:30:ad:3c:ad:e6:87:a0:
15:4a:a7:23:91:5a:7c:4f:3d:7b:d6:da:64:8a:ec:
07:d2:e6:cf:47:2c:c8:a4:15:24:3f:80:15:58:85:
4f:9c:d6:a9:91:7d:7b:32:7c:e3:58:14:a5:e8:01:
31:87:e2:8c:fe:74:7e:f8:45:45:c6:eb:b0:eb:39:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:47:CB:B3:D4:7D:B5:83:1A:12:66:B1:DB:BA:D4:24:31:F9:5C:60
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/20fLs9R9tYMaEmax27rUJDH5XGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:dc:72:00:6e:1c:6b:8a:a7:5a:14:be:f2:98:00:26:4f:ce:
b5:c8:fc:2b:30:be:3a:65:4c:d9:54:05:91:af:5a:ec:8c:2d:
cf:7d:5a:ca:bc:56:c8:cd:b9:21:b8:15:bb:bd:ee:80:a2:f3:
de:f9:92:a2:cc:b4:03:c1:dc:79:c1:9c:ba:f5:0c:c7:0c:64:
54:a6:9a:0e:b7:7f:4d:8e:36:21:9e:d5:a1:8f:12:81:23:89:
7e:d7:5c:c1:2f:44:13:6e:d0:35:76:7d:89:49:98:0f:46:1a:
57:eb:e5:d6:c4:9c:ff:11:7a:fe:af:8b:6c:fa:ee:5b:0a:f9:
5f:c7:db:3a:9c:a4:b2:bf:b8:36:49:82:5f:27:5a:65:fe:3c:
b8:41:eb:0c:6d:fa:51:6f:97:a5:e2:7b:e6:6c:11:f7:41:e7:
5f:c1:5f:38:fd:09:66:30:7d:6f:34:e0:a2:86:fe:19:1e:7d:
23:02:ba:39:81:98:77:39:4c:b9:30:71:28:56:bd:53:e9:eb:
cd:43:c1:4f:79:2a:ff:2c:a4:7d:a9:9e:41:14:62:70:dc:a8:
04:07:b6:ee:7e:b9:0e:18:31:f5:02:09:dc:dc:ea:8e:ef:79:
79:df:6d:5d:ca:3c:1c:68:aa:6a:e2:4d:3a:a7:4b:39:9f:6a:
09:8a:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:41:58 2025 by rpki-client