Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/1-AqQwfqQ_YnPkmoIIUyHNvVTBhw.roa
File: 1-AqQwfqQ_YnPkmoIIUyHNvVTBhw.roa (raw, json)
Hash identifier: hbmBInKDYMIeeSkhUKZkre/jLrsqcMvv0OJOsuVe2sc=
Subject key identifier: F8:0A:90:C1:FA:90:FD:89:CF:92:6A:08:21:4C:87:36:F5:53:06:1C
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01855A03E0F10AB0125264D1D67499B95D4F
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/1-AqQwfqQ_YnPkmoIIUyHNvVTBhw.roa
Signing time: Wed 28 Dec 2022 18:34:41 +0000
ROA not before: Wed 28 Dec 2022 18:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 195.28.182.0/23 maxlen: 23
2001:67c:2f6c::/48 maxlen: 48
2a0a:8c46::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5a:03:e0:f1:0a:b0:12:52:64:d1:d6:74:99:b9:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Dec 28 18:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f80a90c1fa90fd89cf926a08214c8736f553061c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:db:c5:57:ee:fd:43:ce:86:9f:37:bb:be:
d7:de:d5:7d:83:9b:a5:80:41:73:3b:97:81:10:45:
c1:ed:86:ae:5e:b7:f1:d1:de:96:e1:12:d6:76:d8:
59:51:e7:d4:b7:b4:0a:d2:9b:19:48:4d:4c:7d:78:
d3:e0:ab:6d:79:83:52:84:73:79:51:3a:ef:de:68:
c9:78:e0:4d:55:65:99:18:23:dd:7c:c0:25:a1:d0:
02:47:b8:b7:d6:99:93:7c:16:9f:3f:9a:e7:57:06:
91:07:7d:f6:bb:18:3b:86:55:c9:36:96:41:d9:3b:
24:d0:b6:4c:09:ce:61:88:c2:a6:bb:f4:80:81:5b:
1d:0b:e1:64:5e:83:d6:c2:a3:a9:32:99:78:11:6b:
fb:02:b7:3a:83:09:0b:5f:3c:4a:6a:e7:3e:23:16:
e1:55:7e:cf:a7:79:29:cf:64:bd:bc:a6:a7:8c:0e:
e6:5a:56:20:f1:79:8f:54:65:3c:cb:6b:02:b2:5e:
6a:60:b4:31:ef:5c:e5:23:99:16:b0:7c:fc:95:eb:
9b:5f:0f:e7:0a:1b:46:b6:1f:7e:84:e3:80:d7:08:
41:3e:48:3e:90:94:2e:06:dd:81:a0:92:34:c2:2d:
46:60:2c:6e:cc:1a:02:d2:f5:32:55:7c:e3:bb:61:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:90:C1:FA:90:FD:89:CF:92:6A:08:21:4C:87:36:F5:53:06:1C
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/1-AqQwfqQ_YnPkmoIIUyHNvVTBhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.182.0/23
IPv6:
2001:67c:2f6c::/48
2a0a:8c46::/32
Signature Algorithm: sha256WithRSAEncryption
1a:a9:de:95:c8:ec:42:bf:d8:a1:85:65:dc:83:29:a0:05:ba:
53:58:53:fc:6d:1f:5d:88:fe:b8:20:68:f3:bd:ae:69:d3:7a:
ed:ae:8e:6c:b7:78:46:ec:23:e2:d3:91:5b:df:b4:62:de:03:
57:25:5f:01:49:a6:a2:25:4f:e2:31:c8:ce:24:cc:bc:e5:19:
32:86:df:4f:6e:8e:2b:01:53:5c:8f:bd:ba:37:46:30:08:39:
b6:8d:20:27:03:9e:5e:2e:d2:83:23:59:08:8f:f5:d9:f7:db:
75:6d:73:7a:41:4e:54:d1:df:94:14:5a:50:f5:c3:d9:58:b0:
c5:40:4f:80:b6:bc:d3:90:ec:3c:9e:34:8a:e0:8d:fd:1e:fd:
50:1b:f8:66:66:66:6d:53:62:8e:18:7f:cb:29:68:1c:a4:91:
87:60:6f:b0:83:a1:2e:8a:cc:08:c7:5f:40:2c:41:b0:5b:cc:
61:9c:16:47:95:76:26:8e:7b:98:e0:49:99:1c:d5:a6:71:25:
21:f7:f6:31:a0:75:9a:52:1f:45:04:eb:3d:69:a9:57:75:ae:
6b:4f:36:31:14:ed:6e:ef:be:6b:b9:e9:48:73:df:c0:9a:7d:
42:60:09:82:8c:ad:77:fd:ff:18:34:2a:91:53:de:26:de:ca:
91:2a:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:16 2025 by rpki-client