Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/tJY2TIUWla659yWQ7pR8ia_CkyY.roa
File: tJY2TIUWla659yWQ7pR8ia_CkyY.roa (raw, json)
Hash identifier: ZoI0+XnzthdFN3w1SZZxrFk97YnzxRXmrIjAya2ZSrM=
Subject key identifier: B4:96:36:4C:85:16:95:AE:B9:F7:25:90:EE:94:7C:89:AF:C2:93:26
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 018570B08B7AB2E49EDBBBD4B5EB93A43F6E
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/tJY2TIUWla659yWQ7pR8ia_CkyY.roa
Signing time: Mon 02 Jan 2023 04:14:56 +0000
ROA not before: Mon 02 Jan 2023 04:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43044
IP address blocks: 80.95.24.0/24 maxlen: 24
2a02:7900:ff01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:8b:7a:b2:e4:9e:db:bb:d4:b5:eb:93:a4:3f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Jan 2 04:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b496364c851695aeb9f72590ee947c89afc29326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:76:fe:22:af:eb:7c:f5:97:cb:17:71:f3:
58:b9:41:d3:86:65:81:b0:c5:4c:2b:04:72:36:09:
c4:01:44:96:12:dc:5a:22:49:dc:ca:45:79:95:0f:
6a:02:be:e1:53:47:48:5f:f4:f1:13:61:92:36:16:
72:b0:49:ca:62:d2:af:f6:39:6d:13:b4:18:86:ec:
3f:fa:3d:0e:e5:e0:60:60:b0:63:28:49:f0:f3:d5:
e0:f0:ac:0c:a2:e3:a1:a8:5e:44:57:2a:35:5f:31:
44:ac:ec:84:d0:ae:d3:7f:5d:6b:eb:f9:80:f7:48:
fa:8d:f0:a3:52:4c:de:1e:72:ff:bb:7e:71:87:0f:
e9:e4:fd:79:2a:2f:cf:5b:5b:d3:34:02:3c:71:d6:
9e:78:22:ec:de:51:a6:2e:15:07:f1:8e:c6:d7:c1:
61:17:cf:d6:e7:ff:82:9b:1b:a8:b8:68:5a:5f:b1:
73:e1:c3:05:78:69:6b:95:0b:73:51:45:c6:a8:3e:
c6:3c:0c:79:2b:90:d3:8b:e6:14:07:cd:29:2a:8b:
1f:ca:a9:cf:78:e3:16:43:98:c8:51:5d:42:71:35:
f2:eb:fd:ea:7b:4a:7d:58:5d:26:d4:c0:74:b4:41:
bf:a7:57:2b:39:ba:9b:ce:fa:34:9f:5d:31:ef:ac:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:36:4C:85:16:95:AE:B9:F7:25:90:EE:94:7C:89:AF:C2:93:26
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/tJY2TIUWla659yWQ7pR8ia_CkyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.24.0/24
IPv6:
2a02:7900:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
15:57:b8:1c:0b:cd:94:7b:b8:d1:ee:10:6a:b9:af:71:26:2e:
45:e6:f4:25:28:b2:6a:0d:c4:b1:d9:c7:49:48:fe:f7:3b:ec:
83:7a:ff:04:69:9e:09:90:61:66:88:c4:53:ad:9d:9c:04:c1:
03:85:50:06:19:04:50:1d:d7:da:03:2e:06:bd:b3:7e:c6:bd:
6d:27:09:5d:23:d6:c8:6f:58:0d:2c:21:b6:a1:f4:86:bc:8f:
ea:b8:5a:82:66:06:92:63:65:43:c5:6c:d5:71:ae:b7:6e:38:
73:ce:14:e5:9e:3e:3c:5b:d7:a7:05:d4:25:b1:3c:cb:45:7f:
96:a4:8c:1d:79:73:47:71:bb:e4:91:06:71:c4:bc:29:19:7f:
89:ab:24:ba:67:d5:9c:2f:aa:bd:9f:6c:5e:ae:c3:26:ce:80:
35:ee:3a:93:c9:97:6a:63:71:97:ff:a6:54:56:3b:09:ca:d2:
44:06:4b:63:5d:fb:a0:d7:6d:72:71:be:be:f7:76:35:38:d9:
8b:7b:23:ff:e5:3a:30:c6:0c:f7:34:5b:95:17:f1:57:79:ec:
e5:94:96:b7:d1:63:a1:8d:4f:4c:f1:ca:39:82:38:1b:fc:11:
4d:c1:b2:e4:bb:77:31:d9:31:bb:11:37:4b:e7:7f:84:56:e2:
32:4d:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:55:00 2025 by rpki-client