Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1iWmMQ-hicvzXUBh4MIv_qlMLnU.roa
File: 1iWmMQ-hicvzXUBh4MIv_qlMLnU.roa (raw, json)
Hash identifier: 6p1+bsxIZ1dWIVVNBYYDXB5WwNEr3juyB1TpPBweraE=
Subject key identifier: D6:25:A6:31:0F:A1:89:CB:F3:5D:40:61:E0:C2:2F:FE:A9:4C:2E:75
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3B02786F
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1iWmMQ-hicvzXUBh4MIv_qlMLnU.roa
Signing time: Wed 16 Feb 2022 07:27:39 +0000
ROA not before: Wed 16 Feb 2022 07:27:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35115
IP address blocks: 195.136.68.0/23 maxlen: 23
195.136.74.0/23 maxlen: 23
195.136.80.0/23 maxlen: 23
195.136.188.0/23 maxlen: 23
195.136.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990017647 (0x3b02786f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Feb 16 07:27:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d625a6310fa189cbf35d4061e0c22ffea94c2e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:42:6d:14:95:54:97:1a:1f:12:ba:1c:ed:
09:d5:27:53:7a:5f:dd:9a:f5:33:fb:42:d6:f6:0c:
a7:0b:87:dc:a2:f9:c8:d5:fc:5d:90:26:c7:a0:38:
59:e0:c1:f8:2f:96:b5:50:00:fa:85:7b:3e:d8:6d:
f0:79:45:93:d9:7c:7d:2b:1e:0e:52:a8:ed:fc:bd:
10:95:42:07:f7:07:49:9e:c5:29:a7:ab:66:9b:62:
c3:70:f3:bd:51:0e:0c:9c:86:37:db:f0:b3:58:c9:
4b:4f:37:3d:93:d9:85:ac:a0:ed:e2:ce:60:2a:0f:
5d:bf:1d:fe:4f:97:8e:ed:ec:22:06:92:76:01:d7:
25:6f:41:a7:02:74:4b:70:59:ba:c5:ef:c4:2a:b8:
e7:bb:14:1d:d6:93:a3:18:55:9e:8b:e2:24:6c:a5:
ae:5f:b2:bc:11:03:ce:c9:29:b3:25:a6:7c:27:43:
4e:92:40:7d:3f:43:a4:ec:b5:44:51:10:ba:ae:fd:
2b:d8:7e:9d:9c:12:52:cd:09:e0:8b:8e:0e:b6:12:
9f:ab:51:74:e7:b1:55:da:d8:76:fe:99:80:3b:9a:
35:48:21:86:06:be:73:ac:c4:09:d9:18:7f:d1:0a:
f0:bb:b7:de:75:82:4d:a2:16:a4:fb:f5:a0:f0:47:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:25:A6:31:0F:A1:89:CB:F3:5D:40:61:E0:C2:2F:FE:A9:4C:2E:75
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1iWmMQ-hicvzXUBh4MIv_qlMLnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.68.0/23
195.136.74.0/23
195.136.80.0/23
195.136.96.0/22
195.136.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:06:28:28:c9:a1:bb:3c:13:de:32:1e:0a:5f:90:4e:5b:7a:
a6:cf:87:5a:27:0e:85:85:9e:17:3b:dd:d2:e3:bf:dc:3c:b7:
8e:78:88:81:b6:97:94:6d:fe:79:87:da:53:28:b8:ca:d1:5d:
09:79:d4:1a:5a:29:f1:1a:b4:d3:d1:2f:99:f1:7b:a5:ee:52:
7d:a5:5d:36:7b:b9:0f:57:cd:71:b7:4f:6e:ba:d0:6c:6b:ba:
8f:59:7b:ec:a0:27:9b:d5:7a:be:13:8c:9d:e9:4f:2d:5c:ff:
8b:d7:3e:d0:3b:f0:98:6d:ca:9b:49:ed:d8:a4:d3:69:2f:a8:
e7:6e:1f:6e:a0:c0:e0:32:1f:a1:b2:50:17:0a:ec:4d:dd:41:
83:71:7a:ce:90:27:c1:14:12:7b:ff:67:de:53:bb:7a:92:fb:
35:bd:0a:f3:f2:d9:da:24:32:2c:26:7d:19:ef:02:31:d7:60:
1b:19:7e:50:b5:ae:cf:c9:e2:5c:f1:ac:3c:ab:92:80:98:d8:
ef:a8:cd:1f:7c:90:fe:c4:8f:cd:15:25:16:66:86:a0:8b:e3:
22:e2:6a:d3:a8:88:4b:51:dc:21:29:0b:fc:22:0e:d0:c7:4e:
94:a1:4c:83:b3:69:bd:10:0a:ca:d2:9e:a6:70:6b:c2:79:0b:
63:1c:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:08 2025 by rpki-client