Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RyNeZ568rjX5WjsStt1BfJ23PeI.roa
File: RyNeZ568rjX5WjsStt1BfJ23PeI.roa (raw, json)
Hash identifier: uG26UnWfZwhidyzFncxGzNZU2Ig2rk8vDldVvJGPSkY=
Subject key identifier: 47:23:5E:67:9E:BC:AE:35:F9:5A:3B:12:B6:DD:41:7C:9D:B7:3D:E2
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A8C94B38072853673F66EE59FAA5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RyNeZ568rjX5WjsStt1BfJ23PeI.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50116
IP address blocks: 195.136.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a8:c9:4b:38:07:28:53:67:3f:66:ee:59:fa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47235e679ebcae35f95a3b12b6dd417c9db73de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:fc:82:88:49:2d:ba:9f:76:47:3c:f0:b3:
5b:17:00:31:e2:cd:a3:f1:f3:f2:1a:11:63:e5:dd:
37:06:50:ca:c5:b2:67:c2:c9:64:8f:b2:17:b5:57:
fc:50:1c:6c:82:5e:70:c6:7b:3d:07:10:e0:ca:cc:
06:0a:a0:af:86:8d:e8:cf:39:3c:2e:22:fa:61:28:
f5:89:81:e4:69:4d:fb:9d:a9:f0:2f:86:1a:36:65:
9a:c8:dd:96:c8:14:e8:8a:d1:75:74:20:be:63:57:
9c:6d:8e:0b:99:27:a3:b5:0b:48:e6:14:1b:98:ea:
45:20:c8:ea:74:4a:85:21:53:d7:35:36:a1:72:bb:
03:10:d4:67:7d:60:30:2c:ba:97:6c:9b:34:89:71:
6a:5d:74:6d:30:c7:57:a2:ce:e8:3b:87:dd:76:1c:
f7:ea:78:cf:86:c2:86:87:3f:a4:10:5d:15:14:f6:
45:d0:c3:76:5b:22:a9:33:fb:48:2f:f0:88:2b:9e:
84:89:fa:49:cb:82:c3:ab:8b:48:2d:52:9e:ca:6c:
38:48:e5:c1:34:e7:db:a0:f0:59:b2:40:30:62:5d:
8f:9f:c1:35:c3:25:1d:a2:c9:76:57:fa:86:90:47:
90:d1:5c:77:82:03:f3:2d:f1:c7:c0:47:9e:1f:60:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:23:5E:67:9E:BC:AE:35:F9:5A:3B:12:B6:DD:41:7C:9D:B7:3D:E2
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RyNeZ568rjX5WjsStt1BfJ23PeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.34.0/23
Signature Algorithm: sha256WithRSAEncryption
00:29:98:95:1f:55:a8:09:d0:98:87:84:d8:92:f6:59:14:c0:
d2:62:2d:5b:91:af:3d:f6:aa:f4:29:c7:58:fd:6d:6f:b3:b7:
31:d2:a6:c5:15:6a:f3:5e:88:32:41:80:59:d3:69:4d:67:30:
ed:2e:35:8d:a6:1a:47:e2:5a:4d:9f:c0:6f:b8:6b:66:b0:dd:
0c:dc:52:cb:1e:ec:5b:13:af:97:03:75:06:bd:37:4e:79:6f:
06:78:76:38:bd:2c:d3:ba:22:9a:97:a0:ab:8d:cb:01:ce:54:
e8:44:32:57:1d:c3:ed:41:44:51:89:70:06:b0:85:52:ae:68:
7b:54:bb:03:e6:0f:ce:e8:95:97:5c:07:43:cf:90:34:7c:10:
e1:4f:74:ee:66:36:df:cd:c5:71:4a:6e:98:7c:2d:ff:9e:fc:
04:ce:41:a0:10:2b:23:60:c6:02:1b:5f:37:85:63:69:5b:45:
7d:d8:92:02:9a:5c:b9:73:55:87:73:ff:81:b8:81:5c:3d:74:
cb:b8:12:0e:85:df:76:73:4c:8e:18:55:31:9b:09:69:87:c4:
50:ef:a2:8b:58:cf:4c:49:89:b1:98:2c:83:d8:0c:57:19:4c:
5b:db:3e:12:24:7e:21:ec:70:5a:2d:27:96:46:70:8a:21:fc:
ed:2c:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:36 2025 by rpki-client