Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/hjSXYZyfuKq65kdsdtcqo53G_Z0.roa
File: hjSXYZyfuKq65kdsdtcqo53G_Z0.roa (raw, json)
Hash identifier: bNdBtJA6n6MOKVamgE/gpgeD1GmiDgf8dQCLbuDdHE0=
Subject key identifier: 86:34:97:61:9C:9F:B8:AA:BA:E6:47:6C:76:D7:2A:A3:9D:C6:FD:9D
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: ABEC83
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/hjSXYZyfuKq65kdsdtcqo53G_Z0.roa
Signing time: Mon 11 Apr 2022 18:38:28 +0000
ROA not before: Mon 11 Apr 2022 18:38:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210511
IP address blocks: 195.60.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11267203 (0xabec83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Apr 11 18:38:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=863497619c9fb8aabae6476c76d72aa39dc6fd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:02:e0:3e:9b:36:02:71:6f:a3:e2:f2:b5:
02:3c:0d:f3:b5:af:5b:3b:d0:50:17:21:ef:d1:f6:
2e:35:5a:09:c5:de:9f:f8:ad:a3:ea:a7:b3:1c:47:
bf:77:06:c7:b9:98:86:28:34:6e:f5:0e:2d:20:d3:
f5:02:bc:4f:40:34:c7:79:6e:5b:d3:67:f5:cf:1d:
30:c0:c2:37:76:54:93:de:ca:a3:68:43:ef:33:0a:
ed:c7:88:17:7d:30:84:23:14:6e:91:83:06:28:08:
2e:42:7d:01:e3:8f:8d:1a:db:ab:08:4e:1f:7b:4b:
fa:49:61:7c:10:3c:65:2f:8e:76:94:ec:6f:ef:1a:
2c:66:5f:65:9e:ed:3f:0b:c8:7a:16:a3:07:c5:02:
40:d5:cc:21:2a:6f:db:fd:6f:f3:c1:81:67:bb:05:
1d:ee:6d:e1:db:77:92:68:98:5d:74:31:a6:30:5d:
cc:43:ba:53:31:38:7c:e2:6a:a8:4f:c0:38:6f:c5:
d6:2f:1b:cc:ce:dc:bd:59:32:1f:6d:49:08:7c:17:
94:7e:30:2f:28:24:4a:23:a4:72:91:55:18:34:a5:
85:78:cd:60:1d:6a:19:f1:ec:9d:d2:b7:0c:59:d2:
dd:4d:15:f5:76:88:b3:55:db:f5:8a:f8:d4:4e:5c:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:97:61:9C:9F:B8:AA:BA:E6:47:6C:76:D7:2A:A3:9D:C6:FD:9D
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/hjSXYZyfuKq65kdsdtcqo53G_Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.172.0/24
Signature Algorithm: sha256WithRSAEncryption
15:82:86:06:ca:39:c7:cd:35:bd:ce:40:f0:b2:79:f7:b8:72:
95:4a:d2:5f:f8:19:db:ed:fa:7a:7a:5f:d3:f1:8e:3a:01:5a:
c6:b3:3a:6c:67:a5:8e:b6:5a:72:9e:9c:00:89:f2:75:cf:88:
ee:5d:31:38:44:2f:3b:0d:65:51:6a:fc:32:f3:ba:b8:0a:8f:
39:92:f3:49:40:f3:86:61:e3:f1:6b:be:21:8c:5e:40:3f:ec:
04:67:ea:1b:cc:d9:d6:71:44:f1:fd:52:0d:37:81:ef:31:61:
ea:26:5d:a8:7d:cd:5d:83:60:b7:9e:5e:3a:ec:ad:a6:1a:1d:
29:85:c1:c6:74:ab:44:d6:48:e9:11:6b:c3:a8:cd:5e:df:f1:
a1:52:d0:74:d4:07:a9:ae:e3:8b:2d:ee:c5:e5:8e:e8:6f:b4:
fe:88:56:80:12:bf:1f:4b:cf:fe:e6:80:ab:22:2f:bf:44:81:
3b:e8:b6:89:16:3b:b1:67:0a:3c:3c:7a:27:58:8d:52:8f:b5:
00:88:ea:77:e7:d5:ce:b2:d8:a9:77:d6:b1:68:30:06:9e:fc:
06:25:d3:d8:8e:69:2b:90:b5:29:a6:7d:54:d3:e2:f4:be:b6:
1b:d3:36:05:fe:60:dd:8b:16:55:7c:ff:ad:91:77:e9:5c:90:
0a:fc:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:34 2025 by rpki-client