Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/bauzUV9WPsqvM6aVOpPzVm-1NaE.roa
File: bauzUV9WPsqvM6aVOpPzVm-1NaE.roa (raw, json)
Hash identifier: 9j2qOEHVqED/XEzxhSL7DqRH0n2wtszyr4IiCH1WrXA=
Subject key identifier: 6D:AB:B3:51:5F:56:3E:CA:AF:33:A6:95:3A:93:F3:56:6F:B5:35:A1
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 01856DEF76F8047F6A653C9C32FF606A7F36
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/bauzUV9WPsqvM6aVOpPzVm-1NaE.roa
Signing time: Sun 01 Jan 2023 15:24:47 +0000
ROA not before: Sun 01 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47617
IP address blocks: 195.162.128.0/19 maxlen: 19
195.162.128.0/20 maxlen: 20
93.187.208.0/24 maxlen: 24
93.187.209.0/24 maxlen: 24
93.187.210.0/24 maxlen: 24
93.187.208.0/21 maxlen: 21
195.162.144.0/20 maxlen: 20
93.187.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:76:f8:04:7f:6a:65:3c:9c:32:ff:60:6a:7f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Jan 1 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dabb3515f563ecaaf33a6953a93f3566fb535a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:f8:86:c9:08:46:a8:ae:63:62:9e:ed:07:
9d:9d:2b:d6:0e:33:63:d4:95:66:a8:01:27:b5:cb:
68:9b:cf:5b:76:b0:b4:f4:67:02:94:67:07:95:8a:
dd:e2:29:b0:62:e6:62:0d:72:a9:d0:56:fe:dc:f2:
a3:a7:ba:f6:34:82:2a:7e:06:dc:45:69:c2:d5:43:
9e:de:49:9c:58:a1:fb:b3:24:6c:db:8e:de:59:ea:
b3:cf:57:59:8c:9c:81:0b:0d:de:37:25:ff:d8:65:
7b:e2:a8:75:4c:80:b1:66:44:45:88:3d:1f:bc:1a:
ca:0e:e4:24:b3:31:c2:96:6b:c7:73:0c:b2:36:dd:
0c:0d:92:24:98:1f:4e:3d:c0:31:f5:9b:8f:23:0c:
14:6b:40:8a:54:9b:d0:8c:9f:cc:e4:af:7d:ef:7d:
f4:5c:2c:ed:41:ae:10:ec:73:01:a2:d5:8f:eb:a5:
7c:8b:e8:2f:a0:01:3e:25:17:16:03:00:cb:6e:ef:
60:b0:b1:10:c7:ce:1c:40:b3:ba:c4:01:e9:95:6c:
d9:62:06:bd:93:80:52:17:13:b0:f6:54:c0:7e:3c:
3c:fd:87:cc:90:d9:0d:b6:17:5f:d5:c9:ef:e3:da:
14:f4:b3:b6:d8:10:31:df:a2:5b:7f:3a:0f:57:5e:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AB:B3:51:5F:56:3E:CA:AF:33:A6:95:3A:93:F3:56:6F:B5:35:A1
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/bauzUV9WPsqvM6aVOpPzVm-1NaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.208.0/21
195.162.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:6e:ba:f0:14:54:31:68:c7:fe:ff:ff:0a:21:43:40:f9:87:
d9:c1:74:8e:ec:b5:91:e3:3f:eb:4d:cb:cc:5f:cb:d4:ca:ed:
3b:18:0d:4e:ef:1f:e2:06:0e:6c:33:38:7c:33:73:86:13:3d:
80:55:f6:e4:7f:d4:eb:6b:5e:d0:e5:fe:4e:94:54:87:78:27:
50:dc:3d:61:ec:ab:a5:90:78:a0:f1:c6:0a:64:b6:04:99:a4:
64:67:95:b5:92:cf:85:ef:5b:a0:b4:8d:9d:be:0a:9c:8e:a9:
19:a8:03:f2:50:7a:5a:d7:5b:d6:74:a7:ef:ce:81:3f:a7:ef:
25:c1:c0:80:c0:e9:2f:96:fd:dc:e1:42:3c:4f:57:be:9b:e5:
35:29:9d:c2:73:f7:25:34:72:20:db:ae:99:20:db:ca:1c:17:
1c:f8:35:3e:9d:b1:77:fb:f1:bf:a3:2f:b5:04:cd:f2:b7:b3:
fe:8f:bf:73:b2:96:6f:dc:cd:b5:50:00:cf:69:3a:2e:13:b1:
56:e4:7a:ac:a9:ac:d8:75:2c:ea:b9:3e:16:4e:ef:f7:88:07:
5c:f3:18:5d:12:b4:1b:19:90:47:dc:d5:7a:ba:65:bb:3a:a9:
a4:50:de:ab:63:db:d7:d3:67:7d:16:1a:e4:66:9a:d2:93:e3:
30:16:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:12 2025 by rpki-client