Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/71QmZkCWoogpdR8Tyaau1-PXT9s.roa
File: 71QmZkCWoogpdR8Tyaau1-PXT9s.roa (raw, json)
Hash identifier: x7/fzTqAeQ98cC1v/9B+e1hL9KLbG8KFPP8Y8KJV5yI=
Subject key identifier: EF:54:26:66:40:96:A2:88:29:75:1F:13:C9:A6:AE:D7:E3:D7:4F:DB
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 0183550010779AE52A62E6F6AB057C74F34D
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/71QmZkCWoogpdR8Tyaau1-PXT9s.roa
Signing time: Mon 19 Sep 2022 09:06:50 +0000
ROA not before: Mon 19 Sep 2022 09:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13280
IP address blocks: 89.204.160.0/20 maxlen: 24
95.83.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:00:10:77:9a:e5:2a:62:e6:f6:ab:05:7c:74:f3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Sep 19 09:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef5426664096a28829751f13c9a6aed7e3d74fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:b9:69:20:ae:c2:7f:67:ff:d0:05:af:43:
79:68:77:3b:ea:e8:38:66:4d:61:6e:68:f3:39:31:
ef:ee:18:d7:37:0f:eb:9d:b4:c9:5f:a2:63:e8:60:
b0:74:ee:e7:7b:b2:de:ec:61:e9:3e:d8:24:90:2b:
35:e5:ae:6d:38:bd:5d:81:ce:2f:61:ab:d2:ff:6c:
d4:a2:c2:91:28:4a:7e:82:a6:61:97:b0:d1:96:03:
7b:74:df:fc:68:99:50:68:cf:b3:a9:4b:fb:dc:45:
cc:f3:58:a6:31:6b:3e:80:29:6a:70:36:ec:47:1c:
1a:f2:43:fa:67:69:b3:3c:d6:96:48:60:2f:33:83:
93:54:1e:f5:bd:80:37:93:46:9b:7f:74:44:76:b3:
0f:3d:d8:7c:de:08:28:1e:89:48:86:f2:40:c8:6f:
04:9d:d9:1f:88:2f:b5:35:0a:ac:8b:62:1c:5b:ea:
b8:1c:8e:3e:e3:ec:a5:7c:7e:58:8f:9b:57:83:9f:
89:5f:c9:54:47:24:e1:0e:f1:59:ee:a3:e3:47:a4:
77:8d:3f:fe:f1:f8:5a:a3:0a:9d:52:4b:6a:33:54:
1b:5c:90:cf:de:92:67:99:b5:7b:78:31:8c:b6:6d:
68:94:84:6b:df:0a:b6:92:70:ff:04:87:a8:a8:5b:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:26:66:40:96:A2:88:29:75:1F:13:C9:A6:AE:D7:E3:D7:4F:DB
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/71QmZkCWoogpdR8Tyaau1-PXT9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.204.160.0/20
95.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4d:5c:86:0b:ca:21:6d:10:43:ce:79:1f:3c:f8:e6:05:ec:
57:e9:8a:1e:c8:af:23:58:5f:fa:59:72:1b:ae:25:4b:2e:ca:
c2:21:bd:91:c7:dd:e8:69:f9:0b:85:5c:7c:f5:87:c5:45:f6:
18:a4:10:69:0a:b6:42:01:bc:4c:29:60:f8:7d:1d:f1:01:0f:
fb:10:89:c9:e9:1c:e7:0f:8c:8b:02:bb:52:6f:10:c3:ee:cc:
47:ff:1a:e7:90:a5:79:35:96:ca:b2:bd:84:28:04:50:46:10:
69:9e:e0:67:7c:a3:14:cd:0a:43:03:a5:d5:90:cc:28:5b:f1:
7c:a9:69:d1:69:3e:11:33:79:21:ac:a4:e4:75:22:25:a5:00:
47:bf:f3:ca:54:2c:1a:69:07:df:bc:eb:7b:9c:f6:8a:98:5b:
b8:8d:77:42:1c:9b:32:df:f6:d6:6f:74:00:30:ae:1b:d4:9f:
2a:5e:4e:af:ea:09:5e:16:ef:ea:27:ff:21:06:e1:3c:95:ac:
5c:02:8e:c1:13:5d:98:3c:7b:5e:e5:d5:d2:f3:11:a3:13:9f:
f9:ad:9d:ba:9a:d6:cf:00:35:1d:0b:ab:38:c2:39:32:58:31:
c0:c7:81:9f:57:83:0f:cc:a5:86:c6:31:7f:c7:71:87:ae:85:
ee:13:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:50:00 2025 by rpki-client