Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/spyK1benJOewr546kIOPEa9MUWc.roa
File: spyK1benJOewr546kIOPEa9MUWc.roa (raw, json)
Hash identifier: xDyjb+W6zAoEWyeEJ3zaAoNsa+3/qWi7eX4FtQ1b0k0=
Subject key identifier: B2:9C:8A:D5:B7:A7:24:E7:B0:AF:9E:3A:90:83:8F:11:AF:4C:51:67
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A8375B8
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/spyK1benJOewr546kIOPEa9MUWc.roa
Signing time: Sat 01 Jan 2022 04:52:05 +0000
ROA not before: Sat 01 Jan 2022 04:52:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199260
IP address blocks: 82.177.30.0/23 maxlen: 23
195.136.12.0/23 maxlen: 23
195.136.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981693880 (0x3a8375b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b29c8ad5b7a724e7b0af9e3a90838f11af4c5167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:f0:0d:7c:c4:24:45:f0:02:af:6a:8f:f8:
41:f2:08:3d:7d:31:62:ad:91:d6:31:59:dd:d8:ca:
e0:ad:94:f0:42:1b:35:6a:d6:23:87:5f:72:77:ba:
11:af:05:32:d3:b0:fc:a8:9f:06:4b:b0:54:8b:b8:
91:e3:2c:88:d8:42:a5:d5:df:85:bd:7b:94:87:8d:
70:33:06:2d:c9:65:17:38:94:b0:8e:d2:8e:59:f4:
fb:50:18:5e:b8:ca:ab:09:be:df:bb:8b:82:01:a3:
97:fc:59:87:57:b0:8f:8e:de:32:7a:57:e1:4a:96:
de:31:85:63:7f:cb:fa:15:eb:a6:60:c9:c0:07:53:
fa:65:8b:98:89:79:c5:3f:63:ce:0d:09:73:46:60:
cf:22:2a:bd:c7:44:4f:28:bd:c1:5e:be:7b:35:b2:
e3:7e:2d:eb:75:2a:f8:ab:8b:8a:45:13:49:98:18:
1e:53:5f:ab:20:eb:d9:ab:0f:38:68:ef:50:ba:e3:
1c:b3:1b:98:ec:26:1f:fd:4c:98:71:e7:2b:0e:25:
32:65:ef:cf:23:22:db:0f:ba:ba:19:f5:3a:05:0f:
d2:98:9f:03:28:dc:1c:f3:e0:d2:9b:ae:ba:14:58:
ad:9c:9d:14:ad:be:9b:9a:8d:af:eb:af:59:a8:a4:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:8A:D5:B7:A7:24:E7:B0:AF:9E:3A:90:83:8F:11:AF:4C:51:67
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/spyK1benJOewr546kIOPEa9MUWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.30.0/23
195.136.12.0/23
195.136.158.0/23
Signature Algorithm: sha256WithRSAEncryption
68:c5:5b:a4:7b:1d:4a:1b:2a:ba:13:4a:26:37:2d:60:44:71:
6a:43:a8:26:07:8d:25:00:d7:c5:46:7f:4e:bc:08:b4:04:7d:
a4:55:1e:45:6b:94:92:1c:8f:ba:9a:1f:b0:48:8c:a6:83:40:
fe:ab:68:97:54:af:99:5e:d9:ba:7d:bb:43:61:8b:d8:97:54:
9f:5d:f9:77:7a:60:13:ce:37:f6:cd:43:b4:7d:c5:28:1d:b4:
e2:23:f2:ad:32:3b:b1:f2:84:59:62:6f:fa:da:17:87:ce:a5:
39:18:9d:45:6a:12:02:0a:01:59:b3:92:62:08:f8:9d:af:0c:
74:8b:51:40:50:1a:29:8e:55:67:3b:68:21:ae:0c:29:23:7b:
f1:13:24:0e:34:f6:4c:f7:50:48:53:05:bc:ba:de:db:41:44:
a8:2d:ab:fe:49:6d:a6:15:7f:25:64:54:30:e6:ca:42:be:17:
c9:a7:91:88:a6:e3:03:48:5c:25:33:c1:bb:ad:58:1a:c2:e1:
26:23:c9:41:ef:98:08:57:b2:8b:fb:7a:d9:99:ad:82:07:e5:
cf:3e:6d:a6:12:8a:77:a8:96:db:70:18:86:c3:35:9e:45:88:
0a:72:63:42:31:c7:f3:27:52:fb:21:dc:e5:4a:21:66:fa:00:
ca:02:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:45 2025 by rpki-client