Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/0uAqTyLubOLVopS3jEBrJRmLPqc.roa
File: 0uAqTyLubOLVopS3jEBrJRmLPqc.roa (raw, json)
Hash identifier: nwXH0SB1Fsx8LD4hU6qrQhhgkdyQyMAc0ZqcRW3KQM4=
Subject key identifier: D2:E0:2A:4F:22:EE:6C:E2:D5:A2:94:B7:8C:40:6B:25:19:8B:3E:A7
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 09158B1C
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/0uAqTyLubOLVopS3jEBrJRmLPqc.roa
Signing time: Sat 01 Jan 2022 02:59:35 +0000
ROA not before: Sat 01 Jan 2022 02:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29117
IP address blocks: 195.234.61.0/24 maxlen: 24
2001:67c:195c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152406812 (0x9158b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Jan 1 02:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2e02a4f22ee6ce2d5a294b78c406b25198b3ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:ab:94:9d:00:7e:35:66:88:5c:b1:35:93:
15:09:56:02:50:45:44:9a:4d:58:18:0e:eb:5e:de:
f7:36:f7:4f:39:b6:09:ce:37:0c:53:fa:84:2c:9c:
54:49:46:d4:47:42:80:3c:46:c3:6c:6a:0f:21:bf:
a3:76:56:e2:ab:ff:ba:34:e7:74:d2:f6:a9:73:41:
0c:c0:56:03:b4:19:7c:bf:c7:fe:f1:b6:a2:7e:80:
f5:f1:db:4a:95:dc:1d:28:89:80:21:ee:53:54:e0:
21:9b:87:3e:46:f2:1e:a6:03:71:85:ee:26:b3:00:
43:2c:99:f9:51:54:c3:de:15:27:82:7e:14:6c:7c:
24:09:f9:b8:5c:69:1d:a2:19:45:ff:18:71:07:65:
fc:ee:12:c1:a8:bc:15:a9:30:5a:f0:1a:f6:d2:7e:
af:1d:ef:c3:73:1a:76:11:14:40:0a:b8:41:9c:9a:
d4:89:85:c6:b9:88:50:45:b1:b9:2a:31:07:e5:43:
72:4a:e4:1c:24:f4:17:f2:b9:84:d1:10:ca:3c:ed:
1b:b9:21:7e:90:5e:f0:e1:45:25:71:70:46:9a:69:
d1:14:14:35:27:ac:8a:a7:c9:4d:3d:44:03:7d:8f:
87:d5:83:c2:39:c4:18:e5:2b:f4:ef:7d:52:14:18:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:2A:4F:22:EE:6C:E2:D5:A2:94:B7:8C:40:6B:25:19:8B:3E:A7
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/0uAqTyLubOLVopS3jEBrJRmLPqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.61.0/24
IPv6:
2001:67c:195c::/48
Signature Algorithm: sha256WithRSAEncryption
aa:c6:6b:f4:5d:25:c8:c8:0b:fc:d7:3f:65:a5:f7:c4:b9:96:
a5:8d:67:a3:75:82:70:9a:73:df:3b:09:67:ca:4d:e9:49:82:
ea:38:d4:53:71:a7:f8:c7:bb:98:83:6f:c2:5d:71:be:ff:3b:
30:d5:b3:d9:6a:45:0f:42:f1:e2:b1:c9:7e:f9:3a:e9:00:1d:
a8:3b:b4:09:90:d0:40:06:b7:dd:05:73:06:d4:fb:1d:31:c9:
32:62:b2:74:64:95:3b:ab:36:f8:6d:46:cf:70:f2:22:1d:c6:
72:83:0e:1c:75:8a:cd:ea:70:dd:fe:fb:01:d2:8a:db:9a:92:
24:2e:c0:8f:08:37:b8:3a:f1:ea:ca:d9:df:65:30:e6:45:37:
ca:29:68:67:a0:a0:b2:d6:ea:82:a0:cd:10:c4:11:a5:29:31:
a5:a9:f1:f1:4e:c6:bc:29:6d:83:83:a2:b5:1e:5f:a0:89:88:
0e:96:16:46:b1:9c:76:30:3e:91:b1:6d:fb:8b:c8:9e:29:29:
f8:bb:62:89:f6:2d:fb:1e:b8:f1:80:21:c6:ec:73:3c:a7:92:
43:c6:a0:64:9b:78:ef:92:32:2f:6a:43:db:0b:b0:a4:9a:47:
d1:c6:f1:09:05:60:4e:a2:20:28:a7:59:81:aa:44:f1:3a:81:
ff:c9:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:45:34 2025 by rpki-client