Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uAIKn9205H_jiHwYk5j186C7ejA.roa
File: uAIKn9205H_jiHwYk5j186C7ejA.roa (raw, json)
Hash identifier: XBy2j3nrgXrxSU7SPWIXhjxMZM+BoAEJUyr5WLkeGO8=
Subject key identifier: B8:02:0A:9F:DD:B4:E4:7F:E3:88:7C:18:93:98:F5:F3:A0:BB:7A:30
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0188526277B3587D5F0F5BB4BDF37F4F7653
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uAIKn9205H_jiHwYk5j186C7ejA.roa
Signing time: Thu 25 May 2023 10:09:24 +0000
ROA not before: Thu 25 May 2023 10:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13195
IP address blocks: 195.55.34.0/24 maxlen: 24
2a02:9010:74::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:62:77:b3:58:7d:5f:0f:5b:b4:bd:f3:7f:4f:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 25 10:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8020a9fddb4e47fe3887c189398f5f3a0bb7a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:79:ca:2b:02:6b:ee:97:11:8c:9c:b2:0e:
06:4f:27:0d:f1:c2:bc:bc:68:c7:a6:db:3a:bf:82:
ad:d1:11:14:af:b1:60:0d:89:8f:96:48:02:b4:f9:
ac:7d:6f:77:16:ef:a3:90:6e:7b:91:33:67:0a:83:
61:22:a7:29:68:b3:a1:74:85:24:e6:1c:c1:8c:9c:
93:1b:d2:91:4d:70:dd:62:56:e1:bc:1b:28:bb:9a:
d0:50:9d:a0:68:72:fa:b4:76:ec:f0:fb:c2:57:d2:
44:9f:73:e1:ea:01:d0:6a:ab:86:9f:91:1f:d1:b5:
cf:32:18:6a:e8:0b:b9:60:7a:ca:b7:8b:a9:3f:fe:
09:02:2d:42:db:5b:aa:ac:8b:a3:5f:2d:49:4d:f8:
cd:e7:2b:f4:f9:e7:57:7c:c3:99:f7:a0:cf:4e:88:
5d:85:8f:77:6d:89:c4:ff:c2:63:ae:a1:d8:60:1b:
de:e0:cf:d1:a2:f2:45:57:79:2f:be:e0:68:fb:c6:
55:e5:c6:ab:2e:79:9a:93:4f:90:3e:31:91:91:d6:
20:3c:1e:2b:7a:4c:20:66:2a:b4:f3:af:23:d9:27:
a6:ae:68:3e:e1:26:6a:32:46:b3:b6:69:0e:d3:28:
38:c1:6a:d8:c2:61:dd:27:dd:83:1a:4a:f6:ac:a1:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:0A:9F:DD:B4:E4:7F:E3:88:7C:18:93:98:F5:F3:A0:BB:7A:30
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uAIKn9205H_jiHwYk5j186C7ejA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.34.0/24
IPv6:
2a02:9010:74::/48
Signature Algorithm: sha256WithRSAEncryption
09:48:15:37:de:05:93:6b:a2:ca:1a:c3:37:c3:47:99:16:43:
a3:4d:6a:5d:4e:03:01:f6:d8:c2:b5:f7:09:a9:17:ff:48:8c:
77:fe:95:eb:2a:f5:51:91:6b:32:78:00:02:2b:ad:1b:29:90:
c8:89:5d:cd:42:1f:06:d4:e0:87:d5:c0:7f:06:3b:9e:99:f1:
8b:c6:62:91:d4:c3:ef:da:16:48:d6:50:c7:17:21:ac:c8:3c:
6e:9e:c6:57:33:4d:8a:1e:3b:9e:b3:6a:c9:be:87:1e:43:56:
e2:21:f4:d6:3c:08:6a:c0:87:06:eb:b3:8c:20:6f:f9:c4:d6:
c1:86:df:cb:5c:bb:8f:46:b0:75:07:56:aa:d0:9c:e5:47:0c:
11:dc:bf:52:cb:c8:93:25:c4:d8:91:c7:49:ac:fb:52:cf:e5:
dc:a2:23:55:7f:22:c6:33:40:c6:b3:36:a1:a3:1f:d9:f8:2e:
cc:42:14:c4:5c:75:f6:17:a5:61:ac:29:f7:52:f1:b3:53:bc:
f4:08:5f:85:66:b2:53:e7:2a:22:2d:15:33:14:72:f7:55:1b:
39:c6:ed:57:b4:14:49:93:3b:3f:6c:e6:09:6f:37:46:75:dd:
86:32:14:6d:c3:1a:b5:1a:b1:35:d7:78:38:d3:96:86:57:46:
38:12:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:34 2025 by rpki-client