Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/zUVKFHc5d9eY0N3sM2_nOQf9ZtY.roa
File: zUVKFHc5d9eY0N3sM2_nOQf9ZtY.roa (raw, json)
Hash identifier: 2JIaEuzJWvgR/bynBjv++gkvMfMsj/OWdq8xBqRtOpM=
Subject key identifier: CD:45:4A:14:77:39:77:D7:98:D0:DD:EC:33:6F:E7:39:07:FD:66:D6
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01847FC3FE5CC9A3A63F9862E36A43A4BF3D
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/zUVKFHc5d9eY0N3sM2_nOQf9ZtY.roa
Signing time: Wed 16 Nov 2022 09:27:41 +0000
ROA not before: Wed 16 Nov 2022 09:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.80.0/24 maxlen: 24
95.81.80.0/23 maxlen: 23
95.81.81.0/24 maxlen: 24
95.81.88.0/22 maxlen: 24
95.81.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:c3:fe:5c:c9:a3:a6:3f:98:62:e3:6a:43:a4:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Nov 16 09:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd454a14773977d798d0ddec336fe73907fd66d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:fb:e2:90:b5:a9:a6:4f:25:cd:e0:54:f4:
77:08:9c:dc:7c:00:7e:de:31:37:30:7c:d2:e3:a0:
07:7f:9b:7a:39:cb:dc:99:77:6c:db:da:1e:72:10:
d9:b1:0d:30:46:74:a8:0a:07:29:73:29:da:6d:00:
46:fb:1e:fb:96:9d:4f:a0:34:5e:65:77:02:5e:2e:
d4:34:a4:d0:27:1d:13:c9:3a:2a:81:b9:41:bd:05:
97:5b:8e:ee:6e:aa:07:e0:be:80:63:4d:9d:03:3c:
17:c3:b5:db:84:d4:65:7a:68:dd:fa:ee:26:87:d2:
6a:ff:1b:b5:21:ef:81:9a:95:8e:41:da:97:f6:b9:
2e:5d:c9:3d:4e:f3:59:45:ae:d0:a9:89:c8:d8:ea:
61:af:c8:96:9f:c2:29:0d:d6:4b:51:aa:6a:53:6e:
84:d5:a6:b6:53:46:4c:96:28:dd:71:cb:ce:79:96:
6a:98:6d:ee:98:2b:af:54:28:a6:ff:21:54:76:01:
42:3f:cb:f0:d0:9e:40:a2:91:2f:e5:90:24:5c:1f:
27:92:a5:c6:3f:4a:77:0d:b7:af:2c:15:0d:77:dd:
4c:9d:a4:54:0e:71:bd:4f:c0:03:a0:99:5e:31:c3:
a7:6c:24:c2:d1:70:b0:80:f2:bc:04:64:b5:1a:7f:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:45:4A:14:77:39:77:D7:98:D0:DD:EC:33:6F:E7:39:07:FD:66:D6
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/zUVKFHc5d9eY0N3sM2_nOQf9ZtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.80.0/22
95.81.88.0/22
95.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
56:43:d5:11:da:bb:ba:88:3e:37:d2:a6:cd:3e:15:d3:34:b1:
7d:e6:76:52:20:ea:2c:5a:ec:57:d7:e7:5f:62:2e:9f:f2:7c:
64:05:82:59:d8:ed:9d:95:e2:75:6a:4b:9e:7a:ad:c6:05:ce:
58:f0:ea:66:6a:4e:da:37:1b:f5:52:56:33:26:a8:3b:e4:ec:
b3:92:ba:7c:62:b8:b3:f3:c0:07:ae:58:23:76:b4:65:27:08:
89:a9:c6:68:0f:ec:75:e9:4b:de:a0:58:3f:05:f1:7b:1f:b6:
31:18:61:bc:57:10:d8:d3:ef:99:b8:44:06:1f:ce:15:be:b8:
20:1b:fc:57:89:32:5b:b4:d3:c8:d4:29:de:f3:45:c8:15:bc:
84:d4:0b:dd:10:4a:1e:ea:48:fb:39:d0:9e:c9:4c:8f:a4:1d:
03:f8:05:83:54:30:14:6b:58:af:01:47:4c:8f:1f:24:8f:0a:
5b:81:d1:6c:1d:7a:07:b1:0c:15:2c:92:ff:cb:90:04:89:d1:
d0:4f:b4:21:20:e1:bc:cd:23:ae:68:02:dc:bb:eb:30:3c:5c:
af:d9:66:93:36:d8:35:a4:e2:32:17:bf:a8:be:2b:26:21:ec:
c3:34:ef:69:fb:c1:08:3f:30:fc:a7:7a:04:1c:09:b0:22:15:
07:25:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:10 2025 by rpki-client