Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/KEP8UmkaCjgbgchsSDfGVGl4IVM.roa
File: KEP8UmkaCjgbgchsSDfGVGl4IVM.roa (raw, json)
Hash identifier: lNjLjIgaV7tOWmdcr//YUO5V/Bw8W0y2e1fsTx1OEDM=
Subject key identifier: 28:43:FC:52:69:1A:0A:38:1B:81:C8:6C:48:37:C6:54:69:78:21:53
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 01835501E6D997296D72AC7FF05634E9FF0B
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/KEP8UmkaCjgbgchsSDfGVGl4IVM.roa
Signing time: Mon 19 Sep 2022 09:08:51 +0000
ROA not before: Mon 19 Sep 2022 09:08:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 89.204.160.0/20 maxlen: 24
95.83.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:01:e6:d9:97:29:6d:72:ac:7f:f0:56:34:e9:ff:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Sep 19 09:08:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2843fc52691a0a381b81c86c4837c65469782153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:8c:83:6c:20:d1:3a:6b:2f:d8:82:a5:61:
05:d8:e9:6a:07:53:bb:2e:4d:e8:b9:b9:9e:ad:38:
73:69:f9:4b:f9:f6:81:f2:fe:56:64:35:9a:3c:3b:
c4:38:41:da:39:f8:a3:b9:07:11:3b:87:01:bf:b9:
0c:82:1b:48:b0:73:2c:24:5f:d9:25:77:23:f2:64:
61:99:30:93:72:fc:5d:4f:0f:6f:85:ab:60:05:9d:
ab:bb:7e:cd:7a:2a:af:b7:1b:94:2c:b7:32:85:4c:
6a:06:1c:c9:fa:39:6c:42:8c:ff:82:17:00:3d:5b:
93:b6:b9:e4:f3:f3:83:32:9f:a4:58:3f:f9:18:8b:
69:71:2e:3f:91:bb:95:8a:d2:3b:76:4d:16:b5:75:
69:18:36:b8:6b:50:5e:f1:3c:4c:98:35:57:b7:3c:
05:0d:7b:a6:5b:2a:0d:9c:c1:ce:ba:57:53:30:74:
b7:ca:1b:f7:e6:ed:19:43:76:c7:9d:f1:d8:30:b2:
71:83:6b:51:94:bf:0c:58:a4:b3:f2:21:a8:57:c4:
81:c5:8f:c2:72:1d:3a:d4:b4:09:d6:ee:89:68:70:
0d:17:e9:de:ef:a6:e9:1d:59:de:16:8d:81:56:37:
d1:b1:ff:e7:da:9e:9c:53:98:dc:15:e7:c8:3e:92:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:FC:52:69:1A:0A:38:1B:81:C8:6C:48:37:C6:54:69:78:21:53
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/KEP8UmkaCjgbgchsSDfGVGl4IVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.204.160.0/20
95.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5e:7b:b0:b2:8b:86:17:eb:e5:f9:f0:f5:82:63:89:43:9f:
b7:5e:40:d0:09:84:6f:e4:3b:11:d1:aa:ad:5f:81:c1:2d:8b:
09:c6:0d:a7:93:31:61:87:0f:e1:1c:72:39:84:9b:9d:af:1c:
d8:68:f3:b2:8b:62:29:a6:35:c6:52:09:1d:97:d7:0b:6e:30:
ab:28:32:d4:8b:5c:8f:ee:31:ef:6d:e4:bb:7e:dc:6f:10:e1:
d4:5e:39:45:4a:b1:81:7a:95:0e:62:6f:92:3e:21:77:1f:b4:
12:27:54:86:72:b2:06:39:83:57:52:eb:8d:ba:5f:c8:17:94:
bf:fc:34:4c:02:4a:8b:09:fa:ae:c0:a4:7f:9b:62:3f:51:01:
0a:88:81:90:1a:8b:2c:46:79:33:bf:1a:1f:67:90:94:b4:3d:
aa:16:b4:de:a3:b0:3f:11:ae:1f:c1:fe:5c:67:6c:08:7e:f2:
c1:4c:ae:4e:a0:f3:39:c2:5e:4b:92:42:c1:af:37:6a:5c:eb:
eb:23:c4:0c:36:57:f6:e6:ee:5b:be:ce:e7:7e:44:81:a1:91:
08:14:e3:f5:1b:64:ba:53:32:bd:6b:18:8a:94:5a:af:69:9e:
68:8f:8b:f4:cf:98:93:e8:d8:e0:14:c7:5c:8a:29:c6:eb:fb:
86:51:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:47:36 2025 by rpki-client