Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/0utMf4KvsvUFpohME1VKOmStZQA.roa
File: 0utMf4KvsvUFpohME1VKOmStZQA.roa (raw, json)
Hash identifier: xXPx9/Mwah+3QT0tnldABM0E5T+IOJN0v4dWrmyBSE4=
Subject key identifier: D2:EB:4C:7F:82:AF:B2:F5:05:A6:88:4C:13:55:4A:3A:64:AD:65:00
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 0188B5ABECF5AD09B4342950F2E30C03D45D
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/0utMf4KvsvUFpohME1VKOmStZQA.roa
Signing time: Tue 13 Jun 2023 16:52:03 +0000
ROA not before: Tue 13 Jun 2023 16:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39082
IP address blocks: 195.60.178.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:ab:ec:f5:ad:09:b4:34:29:50:f2:e3:0c:03:d4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jun 13 16:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2eb4c7f82afb2f505a6884c13554a3a64ad6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:1c:af:1a:4b:71:18:b5:cd:d6:36:3e:96:
bb:47:dc:0b:31:36:d8:4f:e1:a2:ff:5a:a5:0b:41:
fa:63:e9:63:7d:8c:d1:13:8d:69:d1:22:99:50:38:
8d:53:08:2f:7b:a1:68:2c:d0:ff:43:63:06:73:9d:
25:80:ee:2a:14:91:be:d5:ca:00:b5:b9:84:2d:91:
40:8b:1e:65:98:73:ff:15:f4:6c:61:2a:57:c8:1b:
30:38:2b:92:d3:9b:ee:fa:70:2b:8f:76:e4:70:b6:
c3:61:9a:6c:1a:40:40:c4:eb:3b:e5:22:b0:fb:13:
23:89:48:a6:6e:31:e6:5f:cf:58:95:09:5b:e5:2f:
b2:17:f6:c6:e4:22:34:d2:60:d5:81:f7:d7:18:c8:
c8:82:0a:e0:0a:b3:55:a1:7c:06:d5:d1:ec:5e:5a:
54:96:23:ae:af:63:2e:d7:94:3a:3e:4e:5a:76:c8:
5f:83:aa:60:87:61:c6:21:37:9c:e0:c1:cf:80:79:
6d:91:17:7f:00:71:8a:f0:17:02:41:69:1e:12:c5:
60:9b:22:ea:8d:11:37:4e:17:4f:b0:9d:02:a7:c2:
60:2c:ac:09:07:8a:91:b0:68:9e:27:09:dd:48:81:
60:b5:83:0a:9c:21:73:a4:cc:d8:d1:97:98:c1:ba:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:4C:7F:82:AF:B2:F5:05:A6:88:4C:13:55:4A:3A:64:AD:65:00
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/0utMf4KvsvUFpohME1VKOmStZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.178.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:5c:42:fd:60:1c:25:2f:e3:5d:97:ad:2d:17:d7:c1:6d:e6:
44:fd:d3:d2:29:2e:2f:b8:1c:dd:8c:ab:39:71:2b:36:f5:24:
e5:bd:0a:09:0d:53:42:ae:6d:2f:a2:dd:4d:af:e7:e3:20:20:
af:bc:2c:ac:69:5a:9a:af:aa:79:f1:a0:7f:54:ab:12:7f:d9:
d3:e4:de:1a:53:80:5e:08:dc:cd:1d:2f:c3:8b:61:d9:2a:8e:
95:ba:f1:65:f2:d2:55:eb:e0:be:77:d3:0c:ed:45:49:5b:bb:
19:d4:88:90:d4:b9:b9:3a:7a:a5:fb:4b:bc:a8:bf:34:39:60:
bd:5d:ba:9b:a9:cf:f9:b6:35:4f:2f:81:08:13:85:d8:b2:06:
4e:cf:c5:ca:cc:1e:04:a4:e1:f3:71:37:fc:d5:38:3b:7c:ac:
e2:65:00:9c:90:09:f2:2e:31:96:9a:70:7c:ca:5c:de:82:7a:
77:fe:5a:eb:c1:a9:87:c0:13:2c:a7:6c:c3:a5:00:99:5b:e0:
92:97:49:d4:ee:8e:e4:07:04:69:09:84:ce:fe:44:d5:4a:b3:
ed:4c:50:57:6b:c3:e7:9e:9d:54:77:46:ca:e2:08:89:0d:40:
f4:49:f5:4c:e4:11:d0:a5:df:ec:22:8e:90:a8:14:c0:96:78:
16:67:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:38:43 2025 by rpki-client