Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/T3J_dzJ4hzF8DHlG-Fpg2rf3E9w.roa
File: T3J_dzJ4hzF8DHlG-Fpg2rf3E9w.roa (raw, json)
Hash identifier: WLqUhiEJNbXuxsHYs2wEIBNSeL8R9I5mUTC88u0659g=
Subject key identifier: 4F:72:7F:77:32:78:87:31:7C:0C:79:46:F8:5A:60:DA:B7:F7:13:DC
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 0183ACA7AE46F849D4FCB7050395CF53FCF7
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/T3J_dzJ4hzF8DHlG-Fpg2rf3E9w.roa
Signing time: Thu 06 Oct 2022 09:36:53 +0000
ROA not before: Thu 06 Oct 2022 09:36:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210882
IP address blocks: 195.216.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:a7:ae:46:f8:49:d4:fc:b7:05:03:95:cf:53:fc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Oct 6 09:36:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f727f77327887317c0c7946f85a60dab7f713dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:f8:7d:15:2b:92:16:13:d7:02:89:90:9c:
d0:c0:9b:b2:0b:6c:d8:aa:03:fc:fe:40:b4:90:21:
73:91:68:19:02:c9:18:3d:ca:41:25:f8:d7:cf:04:
92:29:85:86:ec:16:d9:42:5f:2a:b0:33:0d:8f:5c:
bd:30:99:e7:95:8e:c8:4c:d6:e5:ac:d8:65:65:80:
f4:f6:89:41:5b:23:c8:6c:3d:41:69:fe:ab:d2:7a:
3d:9f:0d:1c:66:79:d4:7a:3b:1d:51:4d:fb:2d:49:
a5:7a:a0:53:d2:cb:bc:5e:20:88:b9:f1:4a:a4:8c:
89:f1:cc:d0:4f:df:57:a9:04:53:df:ed:5c:a8:87:
43:c1:7b:4c:04:f1:56:2e:91:89:6f:f7:6f:e3:97:
3b:73:f9:89:2b:41:74:20:cb:e4:b1:8d:a8:59:55:
d3:9e:12:e8:8f:c5:ee:47:ee:ca:83:22:a2:77:68:
9f:0c:85:fa:25:f9:dd:26:b7:ec:47:ec:01:2e:84:
0e:62:88:92:c2:1c:a2:9f:0a:60:8d:ac:19:86:d5:
e3:fe:ba:ea:2f:1e:39:4f:02:15:76:65:12:10:d6:
fc:f4:6c:85:9a:87:7e:87:67:29:e9:a2:2e:ae:30:
dd:41:d2:ac:49:e1:14:e6:9c:2a:73:81:bd:3d:57:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:72:7F:77:32:78:87:31:7C:0C:79:46:F8:5A:60:DA:B7:F7:13:DC
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/T3J_dzJ4hzF8DHlG-Fpg2rf3E9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.246.0/24
Signature Algorithm: sha256WithRSAEncryption
47:17:6b:37:95:a1:c8:b1:45:17:94:64:55:ae:4f:a9:7e:ae:
41:9d:cc:1c:80:4b:42:a2:5b:6b:1d:cd:f5:51:e2:56:3c:3b:
77:af:e0:3f:ec:1e:02:1e:06:8a:96:1e:77:ab:1b:c2:d5:3a:
b0:23:88:92:85:9a:d6:a6:1f:91:2e:0b:8c:26:87:8e:6b:b4:
11:b7:0b:1f:bc:14:02:72:94:92:04:0f:f6:76:18:6c:8d:ab:
43:02:c6:e4:20:75:02:84:4c:38:f7:f2:b0:eb:9d:e7:68:53:
76:8a:73:3a:95:3b:a3:ea:c3:5e:57:fa:2d:fb:67:bd:33:b5:
fb:07:bf:49:25:a2:73:a0:0c:9f:3c:97:d3:58:a0:5e:17:4c:
84:1e:ac:3c:1c:69:30:92:f1:43:c4:5b:5e:ef:92:0f:82:58:
70:da:8c:d9:3b:5f:1f:e2:b8:d9:01:fe:83:23:12:0d:41:5d:
82:7f:ff:19:e1:96:92:bb:7b:12:5c:c3:c9:d6:a1:8b:15:0e:
07:3c:98:5a:b1:25:73:9f:96:93:db:c8:6d:10:1e:01:35:88:
51:d8:fd:b9:60:05:a4:0a:ba:05:c6:d3:a0:92:30:26:05:17:
1b:8c:24:6d:8d:07:e4:9f:c5:1a:f5:a6:8b:c1:9b:9f:2b:db:
da:41:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:54 2025 by rpki-client