Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/pOsn831b7G-eU-OMs6LDLgAkiO0.roa
File: pOsn831b7G-eU-OMs6LDLgAkiO0.roa (raw, json)
Hash identifier: X8mKA3bQ/9MHQo8/qWCOzLPEXHsu1SIfiWgTr7r5Pzw=
Subject key identifier: A4:EB:27:F3:7D:5B:EC:6F:9E:53:E3:8C:B3:A2:C3:2E:00:24:88:ED
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 1D46
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/pOsn831b7G-eU-OMs6LDLgAkiO0.roa
Signing time: Wed 16 Feb 2022 15:38:52 +0000
ROA not before: Wed 16 Feb 2022 15:38:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31543
IP address blocks: 195.60.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7494 (0x1d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Feb 16 15:38:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4eb27f37d5bec6f9e53e38cb3a2c32e002488ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:4d:c9:47:cd:30:a0:83:87:f8:4a:99:31:
07:b1:88:38:cd:69:e4:8f:66:bb:e1:88:5a:83:80:
25:92:25:8f:a9:1a:ef:e2:87:68:ce:3b:11:96:da:
61:1c:a1:ce:7c:b1:5f:43:10:e0:c2:ab:c2:ab:23:
43:82:36:f5:ed:ea:7f:77:4b:c3:27:76:69:1e:16:
6b:72:5c:66:39:c3:7e:31:65:6c:8c:45:06:14:57:
aa:97:5d:b5:ca:d3:b9:f4:c1:7a:f9:43:63:22:fb:
df:d0:bc:2e:63:12:b0:fc:38:4a:1d:3d:2a:99:44:
07:0a:e2:ea:d9:2c:4d:30:ed:94:2e:72:79:54:5c:
41:ff:b2:63:75:8f:90:9a:72:68:88:a9:a6:3e:de:
78:5d:ea:16:e0:c0:d9:10:5b:e7:f6:b7:c5:f0:16:
7b:f9:af:28:eb:67:46:66:47:12:21:b8:68:17:87:
87:fb:67:1a:a8:ef:ca:59:e2:86:3f:5d:96:59:31:
fa:c3:9c:05:e2:78:a1:f5:8a:2b:dc:d8:31:93:ac:
73:df:a1:0a:9e:f7:db:e4:04:b7:d9:f0:00:ec:a6:
9a:d0:c5:15:3d:11:77:2e:a8:96:2f:dd:31:49:ff:
b1:8a:ab:4b:e3:3f:13:8a:22:f7:07:82:91:3b:ab:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:27:F3:7D:5B:EC:6F:9E:53:E3:8C:B3:A2:C3:2E:00:24:88:ED
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/pOsn831b7G-eU-OMs6LDLgAkiO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.66.0/24
Signature Algorithm: sha256WithRSAEncryption
16:15:70:cf:00:87:48:6b:88:6d:25:5b:44:6e:dc:ed:78:48:
1f:a7:50:38:14:1a:6b:35:bd:bd:a1:0e:4b:ec:a5:67:57:9c:
93:0a:86:a1:89:77:cf:86:5b:44:80:0b:e3:20:5f:cd:6b:61:
2f:63:a5:8c:f6:78:aa:32:94:f6:6f:fd:63:42:af:e8:c9:be:
40:00:d6:5a:65:9e:81:aa:59:28:91:2e:01:94:35:58:44:4b:
45:ba:a7:1a:35:8e:eb:09:fc:01:e3:4c:37:23:5f:f9:b0:b6:
8c:77:81:15:3b:e3:0f:c0:9a:44:08:72:84:58:38:74:e2:56:
94:a9:96:f9:aa:81:9b:85:28:4b:14:b9:bf:ac:54:37:05:05:
e5:a0:8d:10:fe:9d:19:8f:73:60:cd:bf:6e:be:cf:de:73:9f:
75:be:ab:a8:f6:1f:40:1d:ce:d4:72:e2:32:d0:1b:47:66:39:
7a:59:b1:ca:16:93:b4:fb:e4:9c:dd:5f:1c:4d:95:f6:0d:a2:
f3:6c:b4:6b:a3:96:0f:e7:6c:b1:44:ff:e5:4b:40:43:66:32:
5e:9b:7d:d2:38:c9:aa:9c:47:e0:19:a5:0d:7b:e2:a0:e0:ee:
2a:59:a8:d0:a3:b3:bd:62:17:21:e6:74:0a:46:b7:20:be:ec:
c5:17:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:39 2025 by rpki-client