Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/B3veBRTGZUFndFOu-PO8paTw2NY.roa
File: B3veBRTGZUFndFOu-PO8paTw2NY.roa (raw, json)
Hash identifier: kU/v3iCc62hC+4eyojlRz7ZTbKOL7ZfCNYAJJlYvT90=
Subject key identifier: 07:7B:DE:05:14:C6:65:41:67:74:53:AE:F8:F3:BC:A5:A4:F0:D8:D6
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0A34151F
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/B3veBRTGZUFndFOu-PO8paTw2NY.roa
Signing time: Fri 13 May 2022 12:08:40 +0000
ROA not before: Fri 13 May 2022 12:08:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25206
IP address blocks: 95.158.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171185439 (0xa34151f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: May 13 12:08:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077bde0514c66541677453aef8f3bca5a4f0d8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:dd:00:63:a1:12:41:4f:35:35:83:cd:5e:
bb:0f:3a:62:0e:f1:02:77:bf:52:b3:75:1f:b6:46:
0c:8e:45:1a:c3:ca:10:00:b5:58:43:fc:1d:ce:1b:
8b:32:01:d0:38:e7:f0:da:77:3f:40:82:36:11:ca:
d6:d6:1a:c9:c0:13:ba:28:27:a8:cc:23:17:01:99:
95:0b:45:7c:39:b5:dc:62:9c:a8:fb:e5:bd:cb:aa:
f1:f9:2f:6b:15:c4:71:a8:e4:88:10:a3:a0:1b:3b:
9c:57:36:c3:3e:f2:23:7c:f9:0b:0a:95:55:8b:bd:
f9:ec:3c:46:65:ac:9b:8e:83:0a:7a:88:2b:dd:a1:
b9:61:b8:c7:5e:84:3e:1f:15:81:5d:b8:ab:9f:cb:
a8:e4:85:cd:7a:78:48:97:50:07:d0:be:c1:cc:21:
24:88:74:e0:fe:6c:ac:90:81:a1:58:cc:95:57:37:
2c:5d:75:84:b7:1f:a2:62:11:dc:8e:14:99:a4:8c:
0f:9a:fa:19:9b:35:a8:54:89:fa:a8:9a:37:ed:1a:
2c:d6:e0:c2:ef:de:41:c6:1c:e1:56:14:bd:19:20:
04:f7:f2:9b:3c:e0:27:b9:35:5d:20:ee:00:43:17:
4c:47:af:91:8c:6f:e3:75:0e:b0:90:02:d5:e8:bc:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:DE:05:14:C6:65:41:67:74:53:AE:F8:F3:BC:A5:A4:F0:D8:D6
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/B3veBRTGZUFndFOu-PO8paTw2NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8f:96:dc:45:e5:8a:68:60:03:9e:6a:b3:b3:2a:42:08:c7:
4f:63:c5:73:c4:84:d3:b5:cf:08:4f:cc:1a:c7:09:bb:38:0c:
ff:09:19:5a:0f:92:d8:ed:b3:29:ff:81:7f:06:4d:49:55:80:
cc:42:a0:9f:0b:69:18:df:b3:48:7c:ef:20:f6:24:7a:21:e4:
7b:12:01:a1:f3:48:ea:dc:f9:3c:98:22:7c:c4:c6:e5:ee:f4:
fa:f1:4b:85:29:46:4a:45:9f:80:80:31:10:fd:bd:e9:60:04:
a3:2e:16:aa:40:aa:4b:cd:d5:a8:21:49:cb:a8:0a:39:b7:a3:
64:a1:b8:a3:76:6c:f5:5d:ff:31:ba:f8:09:49:b3:73:47:f7:
35:89:07:55:a0:a4:67:6b:46:db:1c:62:70:f4:67:f7:f7:23:
65:c8:a7:da:f0:df:f4:10:11:b5:0d:b9:78:b0:aa:91:72:8e:
65:03:20:35:3d:14:6d:bf:5f:62:5c:f2:a1:6b:6a:f8:52:d0:
62:9f:df:fc:35:ee:46:64:f2:41:67:ac:78:23:a5:57:94:9c:
dc:34:33:c0:fa:e9:df:b1:f1:e4:2b:91:26:e6:9e:c3:a0:02:
ba:03:78:48:f5:2b:5e:6d:8d:59:74:bd:a1:6d:d6:2a:82:e6:
96:30:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:15:23 2025 by rpki-client