Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/jPYaWdBTH2rCCmYhvkBbPpiwamk.roa
File: jPYaWdBTH2rCCmYhvkBbPpiwamk.roa (raw, json)
Hash identifier: Bk8ooHcyrQ5PDrPycbIxQnYtHqzeGyJ/LOA9NlAahy0=
Subject key identifier: 8C:F6:1A:59:D0:53:1F:6A:C2:0A:66:21:BE:40:5B:3E:98:B0:6A:69
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 0B1C8044
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/jPYaWdBTH2rCCmYhvkBbPpiwamk.roa
Signing time: Sat 01 Jan 2022 08:58:24 +0000
ROA not before: Sat 01 Jan 2022 08:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212055
IP address blocks: 195.226.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186417220 (0xb1c8044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Jan 1 08:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cf61a59d0531f6ac20a6621be405b3e98b06a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:2a:da:49:c4:5a:12:16:30:88:f2:48:71:
c8:c8:de:0b:8d:66:c2:50:91:82:7b:32:a7:c0:9b:
79:1c:f7:cf:7b:5a:e5:93:90:6c:5d:d1:56:07:a0:
0c:f1:06:c9:ef:11:cd:95:51:30:78:31:92:19:b5:
4e:41:85:ba:0d:07:6a:fc:04:29:e4:58:f1:64:c1:
70:00:41:f5:28:b1:77:31:1b:ed:56:51:01:64:af:
76:32:2e:fc:3f:9a:a6:92:a0:c5:fe:a3:c5:92:d2:
6a:b2:d1:45:1f:af:01:e3:6b:58:15:af:39:40:fd:
0d:3d:6e:55:2a:92:7c:ad:d1:6c:74:cb:c3:79:f2:
f2:5a:76:ea:d5:f8:c4:e7:91:6e:f0:22:dc:86:d6:
be:fb:d4:df:b1:00:5f:c2:89:c5:c7:b4:e7:3b:6d:
ce:30:0e:e3:c1:7c:89:63:f5:22:e3:16:cd:82:7c:
f2:43:50:77:c8:b0:fa:f0:61:b7:dd:e5:aa:c4:6d:
d1:88:66:b5:b4:b6:23:d2:93:74:da:31:4e:89:f0:
37:66:c2:51:1e:b8:64:f8:02:64:9b:74:20:48:af:
f7:6b:1f:e5:8d:9a:86:3e:74:8a:b9:1c:49:37:e9:
92:84:1b:90:8b:3e:1b:6c:18:f2:79:d3:e5:fb:92:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:1A:59:D0:53:1F:6A:C2:0A:66:21:BE:40:5B:3E:98:B0:6A:69
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/jPYaWdBTH2rCCmYhvkBbPpiwamk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:28:29:f9:90:92:36:64:9a:78:b8:97:bf:b6:79:84:9d:03:
94:54:c2:06:62:7a:2d:f3:60:d6:86:f7:96:2d:14:a5:7b:3c:
bb:c9:20:b5:4b:3b:a7:b3:92:23:15:dd:a8:19:11:e5:f8:f3:
b9:ac:f1:5f:e7:0d:1a:3d:69:64:3d:36:8b:dc:06:bf:83:ed:
20:31:ba:7a:17:15:fb:3e:8e:98:6a:7b:cb:8f:17:04:c8:ee:
06:64:67:fd:bf:ba:9c:b8:d4:d5:b3:7f:16:e1:1f:60:71:fe:
24:3d:15:f5:6e:e3:10:b3:be:24:32:c3:2d:ab:c4:d9:33:20:
0b:2a:ed:25:83:f3:3d:57:d1:c6:56:ce:26:2d:65:7b:c3:56:
76:10:c0:ad:b0:cc:ac:f0:f1:45:37:19:0f:c7:e7:c1:cc:5c:
05:90:66:df:44:96:ce:1e:20:b5:3d:16:08:a9:e6:ce:56:c2:
7c:55:9f:90:b7:e1:be:65:59:15:22:27:18:ab:9c:1a:0c:1d:
bd:32:4b:f0:30:99:08:08:72:e5:31:5a:b1:1c:ad:1d:14:ec:
b6:23:59:76:1d:0c:4b:45:d6:b5:92:59:ba:69:e1:94:eb:e9:
5c:f1:f8:69:2a:33:a1:c6:c9:ae:ab:b5:88:67:16:b7:97:4c:
42:31:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:42:02 2025 by rpki-client