Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/b5CzLiOstL_KyQ3KtsIyh7nh8a4.roa
File: b5CzLiOstL_KyQ3KtsIyh7nh8a4.roa (raw, json)
Hash identifier: qLFeys3iVegXY8swJzSe2pbIo94OIRZFaD1xCfkxc2E=
Subject key identifier: 6F:90:B3:2E:23:AC:B4:BF:CA:C9:0D:CA:B6:C2:32:87:B9:E1:F1:AE
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 052A47FF
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/b5CzLiOstL_KyQ3KtsIyh7nh8a4.roa
Signing time: Sat 01 Jan 2022 12:57:11 +0000
ROA not before: Sat 01 Jan 2022 12:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25082
IP address blocks: 195.64.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86657023 (0x52a47ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 12:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f90b32e23acb4bfcac90dcab6c23287b9e1f1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:cf:5c:66:e0:cf:79:f3:13:28:7c:99:b4:
43:d9:6b:56:b0:73:09:b5:b1:1a:ec:52:a4:e4:98:
24:b5:aa:17:48:30:1c:c4:ad:c0:d2:5d:8e:c0:47:
d7:9a:89:41:2c:19:bb:88:cd:c9:af:37:cf:0c:57:
71:ff:61:b2:f9:29:7c:97:7b:a2:cb:f1:4b:40:db:
d7:38:df:e1:3f:c5:7a:d1:40:ce:af:84:19:76:66:
d2:cb:ec:e8:62:7e:63:ba:09:5c:83:14:80:a9:96:
03:81:39:4e:4e:aa:cb:ed:e4:21:de:54:7c:f8:b0:
e5:75:54:74:57:50:c6:ea:5a:b9:31:98:25:33:d9:
26:d3:00:65:b2:f3:5b:e3:fe:16:3a:a5:b0:53:cc:
08:73:d0:7a:3c:b6:98:56:18:be:46:88:73:ca:d9:
5c:3a:a3:ee:2b:9f:25:30:fa:74:6f:36:b6:d8:39:
50:47:1e:5a:8a:51:1a:2d:8e:cf:84:69:35:19:b2:
93:fc:d0:49:1e:18:76:e7:fd:05:33:02:71:01:66:
e2:0f:5c:88:7c:dc:17:2f:7c:ea:8d:c8:d2:e7:84:
05:9b:79:ce:33:3a:26:f0:d8:68:31:5f:9c:ec:5b:
2a:cc:14:1a:a6:18:52:1a:4b:48:ac:d1:f6:0f:3a:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:B3:2E:23:AC:B4:BF:CA:C9:0D:CA:B6:C2:32:87:B9:E1:F1:AE
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/b5CzLiOstL_KyQ3KtsIyh7nh8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.248.0/22
Signature Algorithm: sha256WithRSAEncryption
48:22:c6:fd:eb:ba:a8:b3:44:ed:d1:13:a7:1f:a0:b8:be:a3:
99:e6:76:e5:9a:40:41:b5:c3:e5:67:a2:9f:d7:bf:36:48:b6:
c9:8b:ec:14:10:1b:1d:4a:04:27:b2:7d:0a:91:fc:4d:fb:d8:
5c:bf:6c:e1:d3:c5:71:52:a9:b1:27:91:2f:c1:30:d6:b7:3f:
b5:86:e6:de:02:81:f5:be:7c:39:b3:26:7c:5b:6e:f0:d8:25:
76:6b:1d:32:5f:98:83:99:72:e1:85:b8:63:b7:9f:51:6f:9d:
d2:e8:45:6c:c0:6b:36:24:7c:aa:26:7e:1b:4f:63:7d:c0:f6:
26:f0:42:38:b7:43:f0:91:dc:d2:89:33:44:ab:34:67:c0:10:
94:06:cf:1b:e6:a3:59:03:2a:5d:b3:86:51:af:8f:0a:b7:77:
a7:fe:7c:a1:54:45:4c:e0:e8:82:6a:b8:d9:e9:7c:c5:07:c7:
be:df:ba:52:72:19:27:cc:40:56:bd:1f:56:c9:5b:2a:01:d5:
de:03:d3:a7:5b:8b:4a:c3:65:dd:de:9c:c0:52:8a:66:59:62:
dd:77:44:79:c5:96:97:2c:d0:e6:e5:ff:1a:d9:e0:7a:2b:4e:
69:59:66:17:74:17:fb:d0:0d:35:d9:0e:01:31:b2:21:0c:3f:
f9:13:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:33 2025 by rpki-client