Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/81-oOJUeSQwjri8pKjGMH9cfugU.roa
File: 81-oOJUeSQwjri8pKjGMH9cfugU.roa (raw, json)
Hash identifier: WpZdzFiyHXAsl6915vp0pz666HITX2mdIL4sq7T8kVk=
Subject key identifier: F3:5F:A8:38:95:1E:49:0C:23:AE:2F:29:2A:31:8C:1F:D7:1F:BA:05
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DDEC6C725D2D63A7E583DD4C089FD
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/81-oOJUeSQwjri8pKjGMH9cfugU.roa
Signing time: Sun 01 Jan 2023 22:05:00 +0000
ROA not before: Sun 01 Jan 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49659
IP address blocks: 195.168.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:de:c6:c7:25:d2:d6:3a:7e:58:3d:d4:c0:89:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f35fa838951e490c23ae2f292a318c1fd71fba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:28:8d:0c:1f:5f:c3:5f:de:a8:da:69:c9:
88:4a:fe:3e:6d:01:d6:e4:1a:87:32:6f:fd:1d:56:
b1:2e:a9:c0:82:06:72:cb:b3:d8:6a:26:6b:f7:3d:
f9:9a:52:cf:e8:bd:96:29:a0:73:b7:7c:b4:36:a1:
a0:af:e9:45:18:26:79:6e:15:c5:90:59:6a:99:16:
c6:f3:d9:8a:c7:4c:47:27:72:09:6b:65:27:21:f0:
e5:25:7c:ef:17:31:77:d9:66:a0:c4:17:db:9a:fc:
46:db:db:a2:99:f5:79:c8:79:3c:b1:9a:7d:9d:e6:
fe:b1:15:da:bb:df:83:1b:df:d8:7d:e9:be:3b:58:
50:ea:f4:60:45:dd:34:6b:cc:e2:36:cf:5d:c4:b1:
99:95:c6:44:10:5e:9a:da:d9:50:a5:d9:b3:d8:74:
ee:9d:d2:5a:91:e7:12:fb:ba:70:ce:85:08:d8:66:
c1:73:b0:35:53:6d:e8:d7:97:b5:fb:2a:93:a8:33:
75:e8:98:7c:e4:e1:c3:8c:bd:f7:94:82:83:90:42:
06:34:e3:fb:b4:6f:59:50:29:10:32:0b:f9:66:56:
f1:5d:ac:9a:1a:97:76:61:6a:43:b2:70:e9:02:fc:
5b:a7:a4:74:50:e2:f5:85:df:35:1e:72:52:f4:80:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:A8:38:95:1E:49:0C:23:AE:2F:29:2A:31:8C:1F:D7:1F:BA:05
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/81-oOJUeSQwjri8pKjGMH9cfugU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.110.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c8:b4:a9:5c:47:01:a4:83:e3:4b:b5:f8:16:d2:22:37:2d:
cd:ed:24:b3:4b:e3:26:22:a2:3d:5c:ca:98:2b:61:0e:25:b2:
c4:d3:74:ae:32:23:b3:c0:2f:e9:5a:c3:b3:34:7a:27:4c:70:
cf:1f:e4:81:97:44:e9:b8:50:1f:1a:ed:7e:71:f8:01:39:0e:
39:81:fc:72:cf:a2:c0:aa:f5:78:4b:13:2c:32:a5:25:80:ac:
9b:d3:90:1c:ab:0b:ab:e6:9b:73:72:b1:9e:45:80:b7:bd:49:
5a:13:87:1d:73:9c:9e:e1:73:18:fe:43:1a:8a:25:95:43:ee:
c0:7f:7b:8d:1a:82:f7:b2:6d:62:6e:0f:e0:51:2a:51:90:11:
2e:aa:c7:9b:ab:cf:aa:55:9f:07:72:a9:dc:94:8b:97:2a:de:
11:ae:c1:0c:bd:5f:e4:4c:55:ef:6c:aa:02:21:98:03:ae:a5:
3b:89:6b:3a:49:12:d7:19:1e:96:47:45:c9:54:fb:d5:3f:76:
4a:de:26:19:0b:93:bd:69:57:54:58:3a:27:76:c5:83:74:05:
19:bd:a7:c9:38:ac:38:d2:8c:b4:4f:a3:a8:b6:10:d5:b9:32:
d6:19:ba:33:ec:b6:22:9f:51:29:5d:5c:ec:e0:9e:19:3a:71:
25:37:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:38 2025 by rpki-client