Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/aJM_cNh5tHCHMHPHF5Wv3eWXgas.roa
File: aJM_cNh5tHCHMHPHF5Wv3eWXgas.roa (raw, json)
Hash identifier: YQg13yg10rSP/ZqvRU5ToyE1ljrg4F8ioRyw6oySypw=
Subject key identifier: 68:93:3F:70:D8:79:B4:70:87:30:73:C7:17:95:AF:DD:E5:97:81:AB
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 06D4F0
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/aJM_cNh5tHCHMHPHF5Wv3eWXgas.roa
Signing time: Sat 01 Jan 2022 00:55:36 +0000
ROA not before: Sat 01 Jan 2022 00:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12741
IP address blocks: 195.85.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447728 (0x6d4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Jan 1 00:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68933f70d879b470873073c71795afdde59781ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:83:3f:4a:ef:4d:8f:46:73:f0:7d:dd:10:
c5:2e:0a:7d:85:a3:84:d1:5d:14:22:26:0b:f6:3b:
a1:b8:39:b6:df:a9:f4:4d:d4:8d:f2:52:e4:53:d2:
df:a1:e9:77:56:77:87:b2:77:25:60:1f:fa:b4:d4:
d7:95:a1:c5:fc:75:b8:78:e4:d6:51:c0:e9:38:95:
bd:62:d2:ef:67:2e:61:bd:bc:31:1d:f1:ab:3d:dd:
2a:91:9e:71:65:84:32:fa:ef:b8:0d:54:a7:4d:09:
e0:1c:c1:36:c2:d2:91:63:38:bb:f2:3d:52:e8:25:
fc:63:14:d7:fb:b5:5b:87:cf:8f:a1:25:f6:75:81:
70:1d:a0:b6:4f:25:6a:35:d6:d3:5c:cf:43:94:53:
54:8f:e6:f6:ad:bd:8c:44:e9:16:f1:0a:d4:cb:83:
f3:af:20:fc:12:9f:40:4b:bc:ca:32:10:3d:de:1c:
f0:87:b8:86:1e:d0:79:06:a7:6c:12:0e:e1:86:a3:
2b:4f:54:2e:f9:c9:1f:a1:8a:d4:9f:e6:a6:f4:5f:
22:de:fb:ad:77:94:0a:2e:7d:9f:1d:65:7a:54:11:
8f:fc:6d:5c:1b:5f:8b:97:45:4b:4e:7b:08:7f:07:
13:a1:ab:0a:e5:79:64:d9:1e:7f:44:28:7f:12:3c:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:3F:70:D8:79:B4:70:87:30:73:C7:17:95:AF:DD:E5:97:81:AB
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/aJM_cNh5tHCHMHPHF5Wv3eWXgas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.241.0/24
Signature Algorithm: sha256WithRSAEncryption
10:01:a9:6f:27:f0:e1:e8:33:f8:88:89:3b:1a:9a:08:1b:a6:
a9:e0:00:06:a9:88:a1:7d:d5:4e:6d:0a:56:a7:80:25:c4:06:
90:7c:4f:5a:fe:26:b4:a7:56:9d:9c:b8:2b:0e:c0:6d:b6:ae:
8b:90:8f:e5:c8:15:de:cd:2c:d1:d5:35:a4:1f:69:9f:58:fd:
e5:41:af:bb:f9:6e:10:6a:b7:04:c3:4c:4a:93:8d:29:bb:53:
ec:cc:be:ba:1a:a3:63:5d:01:7b:e4:04:c8:26:03:e9:c7:d2:
95:29:5c:f1:fb:e1:05:70:31:c8:45:eb:97:f6:8b:e1:39:7a:
63:89:4b:ea:bc:fe:7c:47:44:77:e7:98:80:8d:44:25:43:0d:
93:e2:37:3c:25:d5:38:9e:56:65:c6:83:ba:29:47:ab:df:7b:
90:11:b6:50:b3:99:c6:47:09:d0:a1:ed:31:29:e4:b1:10:cc:
af:28:86:dd:8f:18:38:66:1c:ff:2b:22:0d:72:17:9c:de:1a:
30:01:7b:60:4f:b3:09:ac:48:28:72:ce:be:96:0f:cf:2f:a9:
a3:72:08:0f:4e:ec:60:86:1d:cd:5f:59:dd:8e:bf:3f:c2:48:
1e:74:32:50:4d:95:cf:64:6c:90:53:ad:aa:c0:f9:65:35:83:
21:ba:3a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:17 2025 by rpki-client