Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/HsdnWaIpu5SxYQsuNIHFYimVrU4.roa
File: HsdnWaIpu5SxYQsuNIHFYimVrU4.roa (raw, json)
Hash identifier: LBfBqzu0GgbMZiy8pwTOiQI7IDaOmx5rcsQollNhIKA=
Subject key identifier: 1E:C7:67:59:A2:29:BB:94:B1:61:0B:2E:34:81:C5:62:29:95:AD:4E
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 0182E89CD88F2EC9FCB10A181ADAE9C9A915
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/HsdnWaIpu5SxYQsuNIHFYimVrU4.roa
Signing time: Mon 29 Aug 2022 07:59:29 +0000
ROA not before: Mon 29 Aug 2022 07:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48147
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:9c:d8:8f:2e:c9:fc:b1:0a:18:1a:da:e9:c9:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Aug 29 07:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ec76759a229bb94b1610b2e3481c5622995ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:44:bc:0c:fe:9a:a0:86:ba:07:ef:a7:f7:
1a:64:70:b7:d6:0d:c1:df:76:76:cb:cb:b9:a6:b6:
e1:ee:93:d7:55:70:2f:4a:3b:df:f3:b6:9f:70:c1:
65:bc:59:9b:2b:e2:24:7b:8b:a0:2b:a9:83:90:65:
6c:d7:0d:f1:60:9d:de:74:4a:d2:f2:b9:e6:33:78:
11:93:df:0f:c2:cb:e1:25:83:28:f0:85:16:ef:92:
6a:6f:7f:90:b3:48:b9:f5:b1:be:cb:e3:ba:70:61:
c9:bd:e4:97:3b:5b:a9:55:79:36:42:c2:b4:29:e0:
86:43:ba:ed:dc:22:6c:2a:67:f5:90:49:5b:36:eb:
67:d9:ce:88:0e:59:6b:c9:b0:63:90:c2:40:c5:85:
ca:ac:d3:1b:ab:90:bf:d8:74:06:69:4f:5a:f6:96:
11:f5:c4:d1:0c:15:d9:24:3f:2d:81:26:fe:78:e8:
54:02:64:e3:54:22:38:b5:3f:c8:40:60:7b:ac:67:
6b:e5:2c:07:de:ac:d0:4f:58:df:d7:da:c7:72:26:
99:0a:b2:1d:74:bd:4a:87:1c:20:22:1d:3f:bb:6e:
46:cc:5f:1e:99:26:66:08:64:f4:21:61:f8:a9:ae:
d9:e5:6c:76:67:60:8a:47:db:fb:e0:4f:8a:ee:fd:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:67:59:A2:29:BB:94:B1:61:0B:2E:34:81:C5:62:29:95:AD:4E
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/HsdnWaIpu5SxYQsuNIHFYimVrU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.82.0/23
95.81.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d4:2e:e8:b1:5c:a3:76:10:d7:cd:7c:a9:f9:b6:50:1e:a1:
53:c1:ca:81:51:2a:73:6d:5d:3c:ff:a2:59:51:db:22:cf:a0:
0c:bb:95:1a:86:25:1c:f7:bb:9c:b6:93:55:e5:29:18:e7:52:
b5:51:ce:40:33:7b:48:88:21:1d:9d:db:aa:4c:4d:4d:25:37:
c6:e8:77:c5:23:3b:e7:fd:2b:91:22:d6:d9:11:1e:0e:82:3c:
95:3a:b6:37:84:40:5c:b6:eb:d3:6f:ce:ae:a4:02:9a:54:0a:
c9:e6:22:40:bc:e1:a2:3c:a9:38:76:bf:ef:d8:8b:e2:b9:a8:
08:d1:1c:04:f5:93:1b:be:92:a9:46:b0:43:ab:33:40:96:6c:
6f:b9:0f:d4:18:69:66:60:0c:18:c0:41:bf:87:d5:12:9b:a9:
16:2b:b9:f6:cd:2b:15:0d:65:a9:d5:f9:3c:f1:11:f3:93:8e:
a0:2e:08:bd:fb:94:cc:f6:58:b5:8d:fd:96:28:1c:77:ab:da:
b4:8c:9b:a2:c5:54:20:01:61:7f:82:74:19:f4:50:04:d5:44:
ef:76:ed:02:e0:e1:62:60:d0:83:85:66:ba:b7:db:d6:3c:cc:
6a:07:6c:74:06:c7:6b:7b:cc:ac:d9:fc:d7:ee:26:f0:e8:1c:
8f:33:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:41 2025 by rpki-client