Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/p56mG7jOSrFbNWP7yYhVGoZ_L_k.roa
File: p56mG7jOSrFbNWP7yYhVGoZ_L_k.roa (raw, json)
Hash identifier: o571SMCP7ZjjW2HwPdPM57wnZLnvmgwMRXy2dmWS/jU=
Subject key identifier: A7:9E:A6:1B:B8:CE:4A:B1:5B:35:63:FB:C9:88:55:1A:86:7F:2F:F9
Certificate issuer: /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial: 01856C53A7325750CD9B382689259F3C24C0
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/p56mG7jOSrFbNWP7yYhVGoZ_L_k.roa
Signing time: Sun 01 Jan 2023 07:54:59 +0000
ROA not before: Sun 01 Jan 2023 07:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16199
IP address blocks: 195.250.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:a7:32:57:50:cd:9b:38:26:89:25:9f:3c:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Validity
Not Before: Jan 1 07:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a79ea61bb8ce4ab15b3563fbc988551a867f2ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:9a:5d:b4:b0:04:34:e6:b1:f0:7c:2c:ac:
e0:51:d5:90:61:3d:92:1d:eb:1c:a4:dd:15:ff:ff:
86:bd:0a:a1:26:54:50:e4:77:a6:ac:f5:76:78:9c:
78:a2:1d:55:bc:e0:2f:58:63:f6:c3:43:af:c7:c1:
c7:65:82:c6:ef:4c:f9:79:80:69:3f:5a:df:bb:e4:
81:07:e3:a4:46:7d:da:c1:52:16:36:dd:e0:8f:64:
43:43:d2:53:dc:88:ae:18:24:d8:01:83:28:de:8c:
2e:50:a7:48:43:b9:fe:c0:d8:06:bf:56:2f:0e:40:
3e:14:2f:9e:69:e0:e0:f9:9d:59:9e:62:19:1f:96:
a7:29:59:43:0c:47:fe:be:92:fa:20:5b:ad:a8:7d:
3d:0f:9f:6a:d7:75:1f:37:42:d8:34:1f:3c:76:d4:
75:79:2d:ed:b9:5b:dd:68:43:1f:b3:66:e3:ab:50:
cf:63:25:a7:6c:30:1b:b4:3e:9f:d9:ae:7d:db:64:
f8:4c:1d:95:38:92:87:8a:57:ba:79:7c:95:0a:0a:
d0:d9:24:fe:fd:e4:c5:b7:e4:f8:7b:08:c2:b8:90:
b7:34:4c:08:bc:99:60:46:a9:21:60:9f:c9:fc:05:
bd:f1:70:8d:e4:e3:98:4e:01:49:89:77:47:79:af:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:A6:1B:B8:CE:4A:B1:5B:35:63:FB:C9:88:55:1A:86:7F:2F:F9
X509v3 Authority Key Identifier:
keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/p56mG7jOSrFbNWP7yYhVGoZ_L_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.59.0/24
Signature Algorithm: sha256WithRSAEncryption
07:96:db:12:87:46:af:fe:cd:a9:78:1a:3b:10:fd:a3:24:7c:
0c:5d:a1:67:3c:c4:53:1c:1c:94:14:2f:b7:46:42:c1:8b:89:
9a:11:01:63:8a:53:ba:71:5f:3e:73:3b:d4:75:13:2f:1a:f5:
47:32:fb:30:6e:91:63:79:6c:05:f5:59:9d:54:e7:5d:ea:75:
24:2e:30:bc:8c:e9:00:f5:38:0d:c4:89:30:4d:58:4e:d2:b4:
c3:bb:0a:9f:34:da:26:d4:d9:83:c3:87:dc:d6:ec:25:8f:ce:
cb:ee:ec:64:a2:e5:6d:37:bd:d8:62:8e:5e:67:6a:43:c6:9b:
01:2a:ed:68:90:cd:06:fa:94:09:93:1b:a0:09:c1:68:bf:27:
73:e8:9d:43:57:4c:03:59:5b:64:04:de:e3:92:ec:d6:89:3e:
ca:ab:96:52:07:b2:2e:81:f6:6b:9e:4f:4a:c0:5f:96:60:34:
87:f6:2a:1d:48:7b:40:cb:76:0b:16:55:64:e5:ce:d3:fb:17:
5a:00:2b:1b:a5:2f:91:a1:77:56:fa:d8:15:8b:68:50:f2:bf:
d7:51:ea:ac:a2:27:aa:bf:9f:26:ee:d6:dc:6e:c5:42:76:05:
a3:22:ee:db:15:80:44:a9:e4:5c:52:35:fc:3e:6a:9a:9b:aa:
a5:69:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:35 2025 by rpki-client