Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/_zxZy-Xdkm4vOrzdjsmYrboLYvs.roa
File: _zxZy-Xdkm4vOrzdjsmYrboLYvs.roa (raw, json)
Hash identifier: vC0zbxjetAXt+3fNbBu0jFtYKIQB55OjxacU7ORVw5g=
Subject key identifier: FF:3C:59:CB:E5:DD:92:6E:2F:3A:BC:DD:8E:C9:98:AD:BA:0B:62:FB
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 06ABB6A2
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/_zxZy-Xdkm4vOrzdjsmYrboLYvs.roa
Signing time: Sat 01 Jan 2022 13:55:40 +0000
ROA not before: Sat 01 Jan 2022 13:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50180
IP address blocks: 195.189.166.0/23 maxlen: 23
2001:67c:2ff0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111916706 (0x6abb6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Jan 1 13:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff3c59cbe5dd926e2f3abcdd8ec998adba0b62fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:fd:2f:fe:91:1c:66:6d:52:a2:78:4b:42:
e8:d0:2a:11:49:51:3f:57:ae:15:81:a1:14:78:4e:
7e:72:b0:d4:84:a5:f7:77:7d:c9:43:2d:3b:07:5a:
5d:7a:3b:dc:e7:db:ca:92:4e:35:7a:ce:96:39:cd:
46:af:37:61:c0:08:c4:28:98:29:5e:a2:af:a2:61:
8c:e3:1d:26:c2:99:cc:8a:ad:f1:72:66:97:f2:47:
82:2d:a0:49:e9:53:75:42:1d:24:1c:2f:17:6b:33:
59:08:e3:28:8b:20:f5:6b:6a:d8:d1:c7:36:d9:72:
5e:82:0e:17:db:a4:e8:ad:ca:b9:97:31:ee:fe:a8:
56:e0:3c:f5:bf:58:c6:84:40:9b:f9:31:41:2e:e7:
e7:3c:21:a9:f7:fd:aa:29:7f:65:d5:58:b0:09:cb:
8e:e5:3e:99:08:c2:8c:cf:5c:d2:4d:76:62:06:f2:
b4:eb:56:cd:81:84:c2:55:ee:af:7f:27:1a:38:6d:
9f:c0:f0:bf:d0:f4:ba:0d:4c:71:4b:47:5c:a7:ab:
a0:91:80:57:81:d5:a1:ee:cb:35:1a:a1:51:7e:48:
f0:7e:90:07:44:d4:01:28:11:ee:a1:18:18:e9:55:
81:0f:d3:81:16:f4:15:ce:eb:ec:23:62:4b:e0:12:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:59:CB:E5:DD:92:6E:2F:3A:BC:DD:8E:C9:98:AD:BA:0B:62:FB
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/_zxZy-Xdkm4vOrzdjsmYrboLYvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.166.0/23
IPv6:
2001:67c:2ff0::/48
Signature Algorithm: sha256WithRSAEncryption
56:d0:4d:aa:97:94:ed:08:12:46:e9:61:55:04:87:ff:e3:97:
ac:8d:ac:d1:06:eb:44:dc:51:19:ae:61:49:a2:7d:96:0b:86:
e6:1c:94:2c:c3:64:e1:a8:d7:b9:22:e9:3e:2d:a2:d8:4e:4e:
53:a2:2b:e7:7f:0b:74:e2:6f:92:d2:bd:c2:8b:0d:74:6f:02:
49:ba:37:a0:48:b6:4a:c1:2e:7a:6b:7c:05:80:4d:61:27:68:
19:96:08:4c:e8:18:a5:c7:da:f0:23:d7:45:2c:ea:dd:30:41:
bd:64:09:f3:c4:67:f1:3f:c2:b0:78:3a:e8:2e:47:9f:2b:00:
74:67:b7:58:7b:8c:4a:d8:43:53:c3:9c:96:0f:6d:33:b8:5b:
3a:ca:17:a2:f5:d6:32:b7:5c:44:25:19:34:f1:52:db:2b:c0:
dd:b8:b1:0b:68:15:d4:5d:83:86:61:43:2b:3f:9d:4d:11:ff:
3e:ab:19:5c:62:d7:2a:0c:73:26:f5:3d:f8:b1:43:05:ca:a8:
9b:24:e6:36:7b:b5:c4:8f:c7:00:09:e3:6c:b9:21:e7:19:11:
a3:57:f0:ac:70:50:cd:6d:67:8a:f3:b3:21:79:4e:a3:2d:da:
64:72:77:23:ba:44:62:02:86:7d:7e:c3:c2:c5:b3:b2:e0:22:
da:a7:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:37 2025 by rpki-client