Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/TtaDJarcCf6hHciCZXnzT6ejUTs.roa
File: TtaDJarcCf6hHciCZXnzT6ejUTs.roa (raw, json)
Hash identifier: VoRe7GLE0ykUvxq/u4uTEHvuzVI2wFUQlECJBUFk/Bs=
Subject key identifier: 4E:D6:83:25:AA:DC:09:FE:A1:1D:C8:82:65:79:F3:4F:A7:A3:51:3B
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 0187943D0C4825F885E0E92CC64338A31907
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/TtaDJarcCf6hHciCZXnzT6ejUTs.roa
Signing time: Tue 18 Apr 2023 12:00:41 +0000
ROA not before: Tue 18 Apr 2023 12:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 95.81.84.0/23 maxlen: 24
95.81.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:3d:0c:48:25:f8:85:e0:e9:2c:c6:43:38:a3:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Apr 18 12:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed68325aadc09fea11dc8826579f34fa7a3513b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:08:d8:55:93:6e:1f:96:01:2c:b8:97:77:
34:e2:9e:f6:8b:92:fc:bf:16:c2:59:57:23:54:7b:
87:d0:da:35:40:2f:bc:3a:e2:2f:c1:7f:b6:d1:ca:
46:55:24:54:15:03:c0:e3:81:66:f2:cc:48:08:df:
05:19:03:a5:f5:af:33:84:18:91:68:52:ed:cf:b3:
95:89:73:ba:76:2f:2b:38:8f:b1:f0:e8:8f:60:47:
b4:7c:ca:fd:78:87:cd:e4:f4:99:27:a5:27:a5:b2:
1d:5c:ac:ac:fe:45:bf:31:94:fb:ca:21:5f:05:a6:
25:69:25:10:7d:9a:11:59:b7:5a:1c:f0:2b:a5:78:
68:28:86:f0:58:f0:8a:5d:71:ca:1b:9c:59:b7:dd:
e5:41:04:78:8e:4a:e9:79:b3:c9:8b:7b:e9:0e:9a:
27:46:53:34:bd:40:b7:7d:0d:fa:f5:dc:2e:4a:ff:
f0:83:3f:ad:24:58:8d:ea:cd:17:d5:06:f3:41:d6:
f7:50:32:1e:41:46:85:0b:d1:e1:8d:90:57:8a:a7:
41:16:53:f2:b7:03:45:52:90:8a:82:bb:4e:a0:c8:
65:e8:89:bd:da:e0:16:54:1b:6c:b0:5e:ff:d9:e0:
0c:7c:df:48:d9:89:22:e8:c1:5c:1f:3e:24:f1:34:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D6:83:25:AA:DC:09:FE:A1:1D:C8:82:65:79:F3:4F:A7:A3:51:3B
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/TtaDJarcCf6hHciCZXnzT6ejUTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0/23
95.81.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:bd:4e:dd:ef:ea:28:f3:19:56:58:61:72:68:c7:2e:5c:b4:
5a:19:c7:05:af:9f:90:dc:81:7f:6c:35:fb:34:7d:a6:5e:1a:
02:ff:b6:89:a1:9e:31:e0:2d:d2:fb:2b:03:85:e3:f0:82:f0:
16:4f:ee:11:36:22:d5:c1:b0:be:a3:40:c7:65:22:9b:e6:c7:
63:7c:09:b4:43:2d:7a:9e:e4:69:c9:1d:38:c4:bd:ce:c8:1d:
46:ef:3f:de:99:bf:bb:c5:be:c5:67:e8:cf:6e:82:30:76:fd:
97:40:d7:8e:07:cb:9f:ff:7a:c6:32:07:e1:96:20:ef:31:86:
6b:00:39:67:57:cd:75:e2:44:83:c3:13:1b:1c:4d:17:b7:b1:
22:29:c8:5a:f7:59:b2:0f:04:ae:d6:63:15:e7:0e:af:b8:01:
a3:31:50:e4:0d:44:73:1b:03:5e:51:e9:ef:3d:94:6f:d4:62:
be:93:5f:95:21:87:35:e4:72:20:37:bf:79:f9:84:27:93:90:
06:ac:6a:5d:54:51:8d:d1:33:6f:ca:cd:75:26:1b:4f:18:0e:
64:89:af:24:f6:1d:5d:90:7f:b7:b1:ad:20:14:80:05:2b:6b:
51:db:72:e2:36:67:e9:f8:aa:f8:fb:39:6b:26:9f:b2:76:0b:
d3:0c:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:13 2025 by rpki-client