Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T0cHfJLDFf6FsqtxPwz2VTqI04Q.roa
File: T0cHfJLDFf6FsqtxPwz2VTqI04Q.roa (raw, json)
Hash identifier: xMrmwOpObvq4zY/oxogJoCovcJM8UJ2LhNIyiDCTQgA=
Subject key identifier: 4F:47:07:7C:92:C3:15:FE:85:B2:AB:71:3F:0C:F6:55:3A:88:D3:84
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0B82E927126B97906F52753F10417
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T0cHfJLDFf6FsqtxPwz2VTqI04Q.roa
Signing time: Mon 02 Jan 2023 05:25:01 +0000
ROA not before: Mon 02 Jan 2023 05:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199389
IP address blocks: 195.136.200.0/24 maxlen: 24
195.136.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b8:2e:92:71:26:b9:79:06:f5:27:53:f1:04:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f47077c92c315fe85b2ab713f0cf6553a88d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:74:fb:c1:16:97:7d:31:08:b8:bb:7c:71:
11:f1:4e:74:de:b7:71:90:86:44:c8:aa:39:3e:41:
17:c2:b0:c7:f0:74:0c:c9:36:6e:16:14:8d:2a:a5:
3d:26:86:0e:38:b7:f8:2e:ac:e9:56:ab:99:7f:e7:
f2:2e:a2:38:23:58:80:ac:be:ed:7b:01:fd:29:f5:
bf:d2:79:b6:85:ea:cc:4a:20:22:21:ac:d0:a4:8c:
df:4e:21:4f:44:71:51:6f:27:29:7c:f2:79:0a:71:
9f:e0:21:f5:ec:69:74:32:92:aa:73:0b:fc:b1:49:
8a:ad:fa:1e:7f:78:09:2e:bd:3e:49:5b:b1:ab:5b:
dd:08:17:f4:e1:31:42:a5:0e:38:8c:d1:c8:60:24:
09:c6:8e:14:88:50:28:7b:de:06:3c:6c:14:1c:bd:
b6:cf:9f:df:ea:e3:52:23:94:4d:bf:2f:f7:d5:e6:
80:5f:7d:a2:78:ae:c4:bf:a4:3f:da:b2:16:ee:15:
15:1d:35:7f:ce:53:1f:96:1c:18:76:d2:98:ab:7d:
c1:44:46:2c:24:96:77:a4:09:6f:c2:3f:69:ba:7f:
67:95:c8:2e:55:41:6f:ce:89:0f:c9:38:0c:69:27:
ed:da:16:48:63:09:cb:08:7b:ba:f4:ef:f6:1f:93:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:07:7C:92:C3:15:FE:85:B2:AB:71:3F:0C:F6:55:3A:88:D3:84
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T0cHfJLDFf6FsqtxPwz2VTqI04Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.200.0/24
195.136.224.0/21
Signature Algorithm: sha256WithRSAEncryption
52:2f:e5:4c:05:a3:56:3c:bc:65:80:e7:80:04:18:86:a1:e5:
04:3c:9d:5f:c2:ce:a2:34:19:ee:3e:03:fb:57:59:c1:5f:b5:
ec:0a:3a:c0:74:61:1a:b1:4a:62:43:d3:46:ec:88:20:59:60:
7d:9a:9f:c1:20:2b:6c:c4:67:31:2b:16:71:26:87:5a:db:d0:
1d:19:6c:2c:4a:8d:a8:c2:8f:25:d4:51:f8:da:78:f3:f7:e8:
ba:93:b0:b4:65:59:a1:0e:2e:47:58:81:64:39:dd:69:ca:c6:
88:03:90:d8:59:79:07:74:55:81:4f:45:8e:00:01:2c:de:0a:
82:06:27:81:7b:23:42:65:b6:1f:d7:f0:8d:b8:51:aa:d8:e4:
bd:21:c7:17:72:0e:6e:27:7f:e8:07:3a:42:a3:ef:d6:88:9f:
dd:ca:b0:b1:f2:52:11:86:8a:d6:50:66:14:06:67:43:5b:d7:
0b:e2:b2:13:2a:60:7f:24:62:48:76:74:0d:ac:31:07:ea:58:
94:be:27:4c:cc:63:f0:82:6e:9b:d4:46:7e:e1:bb:64:c8:f3:
72:4a:6e:64:33:f6:89:e3:8d:8d:84:f2:eb:a0:e1:d7:cc:08:
0d:5f:40:0e:e2:a6:bd:7d:22:c6:e5:51:eb:f6:23:01:3b:ae:
71:1c:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:40 2025 by rpki-client