Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/V530oBfbWsv61XM3JRT4keY3oBs.roa
File: V530oBfbWsv61XM3JRT4keY3oBs.roa (raw, json)
Hash identifier: fnTBeWPf1IXmIrsYlbb2S1o05Rt1GtAR2v3f4g053Ec=
Subject key identifier: 57:9D:F4:A0:17:DB:5A:CB:FA:D5:73:37:25:14:F8:91:E6:37:A0:1B
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 0B1BB5EA
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/V530oBfbWsv61XM3JRT4keY3oBs.roa
Signing time: Sat 01 Jan 2022 08:58:24 +0000
ROA not before: Sat 01 Jan 2022 08:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197190
IP address blocks: 195.226.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186365418 (0xb1bb5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Jan 1 08:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=579df4a017db5acbfad573372514f891e637a01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:6b:53:f3:59:82:7b:76:cb:d3:7c:8a:68:
00:85:c5:95:39:3a:fe:e5:d4:1a:b9:9b:fb:24:8d:
a1:46:43:24:d7:39:3f:23:82:25:18:55:24:0b:bb:
9e:57:4e:97:05:ce:ba:7d:49:3e:47:40:a0:3c:6a:
ea:bd:29:ed:de:a4:a0:18:d5:08:21:1b:c8:d8:41:
71:a5:41:6f:5c:65:03:ac:1e:77:2b:ec:1a:ed:5f:
63:07:f0:bd:6f:7d:b7:bc:dd:44:b4:ac:eb:36:45:
f6:6f:35:48:7a:16:f7:75:4f:1a:45:9a:96:a9:22:
99:48:60:5a:73:10:b6:b4:af:31:31:62:64:59:e3:
7d:61:83:0a:72:1a:65:5e:a2:5b:b5:77:b0:8b:b5:
94:bc:29:cf:31:91:25:4f:05:da:63:2b:3d:16:8b:
ab:95:ed:37:7f:43:19:57:12:b8:55:36:9a:11:96:
ff:3d:63:e8:cb:6d:c9:6d:4e:ce:3b:83:b9:20:f8:
3f:bc:8b:d1:f2:11:9e:19:d3:91:8a:00:5c:cc:a5:
66:74:66:1d:1a:e8:31:17:55:f8:38:8b:3f:cc:99:
45:b2:75:08:7b:06:67:73:24:dd:42:9f:e9:eb:b1:
0d:26:df:77:68:be:3b:4f:79:77:df:ce:d6:4a:0c:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:F4:A0:17:DB:5A:CB:FA:D5:73:37:25:14:F8:91:E6:37:A0:1B
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/V530oBfbWsv61XM3JRT4keY3oBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.199.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6c:27:41:e3:ec:71:7c:79:dd:2a:ad:42:de:8f:03:90:36:
b9:23:e4:5c:2f:eb:48:3c:8a:4c:cb:57:d1:e5:6a:5d:03:30:
47:1f:f4:84:bd:4b:e5:4b:e3:2e:ac:ed:f1:1f:cb:26:d1:21:
b3:b1:f6:e8:ca:af:33:b5:c2:0c:a2:d6:8e:6e:c6:f7:37:34:
40:86:50:10:6f:b9:fc:e7:88:e7:b6:f2:59:e9:13:65:06:57:
4f:9c:4f:00:54:14:24:80:02:59:3b:ae:71:15:7b:8b:8d:50:
13:8f:b6:51:9b:19:fe:1c:34:ad:84:9b:08:da:2a:03:19:2f:
cb:88:e7:c7:c0:97:68:46:58:36:76:35:cf:df:53:18:67:40:
a4:24:78:8b:01:d2:6d:05:07:74:ef:18:0b:74:f3:71:4c:d0:
5b:74:53:fa:84:01:9c:44:47:41:05:cd:76:ea:4d:af:9a:1f:
d9:08:a8:17:77:7c:e1:7c:a5:91:60:82:ad:3f:ef:cc:77:9b:
9a:81:4b:60:8a:9b:33:66:08:17:b4:89:93:e2:3a:5f:c7:54:
d1:b4:b6:ac:b8:bd:06:ca:d4:67:14:3f:25:cf:17:05:0f:55:
91:cf:34:59:bf:89:1d:9f:2f:b3:46:1a:6f:b7:6c:b3:33:47:
e1:3d:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:21 2025 by rpki-client