Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/d0DXpB7jNILTOmZ9MKbQLc9CwU4.roa
File: d0DXpB7jNILTOmZ9MKbQLc9CwU4.roa (raw, json)
Hash identifier: t7IM3saMqkcg2RoLwSAAiN6mnUnoZ0671zZ6UOs6Zrs=
Subject key identifier: 77:40:D7:A4:1E:E3:34:82:D3:3A:66:7D:30:A6:D0:2D:CF:42:C1:4E
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 088172BC
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/d0DXpB7jNILTOmZ9MKbQLc9CwU4.roa
Signing time: Sat 01 Jan 2022 14:59:57 +0000
ROA not before: Sat 01 Jan 2022 14:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25437
IP address blocks: 195.20.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142701244 (0x88172bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 14:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7740d7a41ee33482d33a667d30a6d02dcf42c14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:5e:a7:8e:e1:3c:ee:42:3f:3f:0a:27:41:
47:dc:7f:62:14:fe:e7:76:b9:78:bb:97:3b:3b:59:
6f:36:e7:60:ce:66:4d:df:93:62:58:d4:a3:e3:f0:
62:07:23:b0:34:13:0d:62:17:57:55:25:74:3f:5c:
5d:38:63:87:fd:5f:df:78:01:60:65:f6:e1:ba:cc:
36:13:8c:a9:28:46:80:cd:80:69:aa:99:75:f7:f6:
6d:76:c4:45:9e:6b:01:cc:a8:9f:ac:63:10:e2:75:
13:8e:bf:2c:b3:0e:0d:fa:93:b6:16:ff:bf:7d:db:
c8:67:5a:2f:51:ac:56:bd:a6:db:be:4b:50:d9:8f:
7a:0d:57:d3:27:d7:a5:bd:73:e6:cd:e2:33:f4:47:
27:43:6a:ab:9e:28:2a:f7:a7:3e:ac:5a:50:8e:ae:
90:39:73:0e:06:32:65:21:4f:da:b5:d9:2a:85:64:
b8:9b:55:b5:9d:bd:9f:cb:74:77:64:2e:9f:14:9f:
fd:e9:a1:8a:3e:57:88:bf:50:e5:ff:1f:0d:25:3a:
01:30:51:8d:71:8f:8e:a3:e8:dc:f6:67:51:45:63:
20:b9:fd:52:c7:fd:2a:9c:07:30:4a:38:21:56:d8:
9d:62:4b:86:69:38:72:b5:67:8b:76:6a:dc:1d:ca:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:D7:A4:1E:E3:34:82:D3:3A:66:7D:30:A6:D0:2D:CF:42:C1:4E
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/d0DXpB7jNILTOmZ9MKbQLc9CwU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.119.0/24
Signature Algorithm: sha256WithRSAEncryption
81:68:77:0e:79:f1:2a:97:57:c2:3b:64:74:d7:9f:0b:62:80:
99:e8:57:ad:c9:9d:4c:d4:7a:ea:67:9d:d1:dc:68:81:df:1b:
2a:eb:ef:86:ec:47:03:c6:49:f0:f7:13:26:e2:9d:05:be:c6:
a0:b5:f7:e2:d8:f2:44:b8:0e:e1:ab:fe:9b:50:32:7f:81:89:
34:7b:4d:1e:86:4b:f1:bd:47:17:09:9f:8d:81:b5:48:f1:2b:
17:71:f7:33:ec:7d:f9:65:2b:82:26:0b:e3:2d:c9:10:d0:72:
7e:35:9c:ba:e3:61:5f:fe:16:7a:90:64:12:73:73:57:98:7c:
95:ca:1b:29:06:bb:97:08:a5:47:a5:c0:68:ef:d7:26:8d:a2:
34:3b:6a:d6:1e:c4:08:35:d9:c7:bb:fe:db:a2:c7:b2:29:71:
d7:04:82:80:82:68:74:74:a6:b4:29:ad:0e:02:6c:51:43:cf:
f1:aa:c3:91:56:57:95:2e:90:25:f7:d6:53:79:6a:5f:6f:14:
d3:f2:d8:c7:f1:bc:17:19:43:11:9a:ba:51:ae:9f:0e:6d:fb:
0b:ed:19:1a:55:d3:96:eb:d8:3d:4c:52:cb:fb:19:49:53:4c:
f8:a7:5d:4c:60:e8:3f:1e:a2:80:43:ab:1b:8b:b8:9a:08:75:
2a:cd:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:04 2025 by rpki-client