Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/9785ggZCSYSNKeNLQvcbecJkexQ.roa
File: 9785ggZCSYSNKeNLQvcbecJkexQ.roa (raw, json)
Hash identifier: GkNP7ebksS9lw8kTub4yXYPmwAdUC8WDDEewHeeUrtQ=
Subject key identifier: F7:BF:39:82:06:42:49:84:8D:29:E3:4B:42:F7:1B:79:C2:64:7B:14
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA43379D7A11AE6931560C0272B125
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/9785ggZCSYSNKeNLQvcbecJkexQ.roa
Signing time: Mon 02 Jan 2023 13:44:47 +0000
ROA not before: Mon 02 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8618
IP address blocks: 195.130.124.0/22 maxlen: 22
195.251.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:43:37:9d:7a:11:ae:69:31:56:0c:02:72:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7bf3982064249848d29e34b42f71b79c2647b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:ec:87:76:33:1c:dd:5d:02:04:27:6b:e3:
80:21:7a:2d:cc:93:4a:d2:9a:58:63:e8:66:2c:7a:
c8:5c:e8:e5:38:11:a9:69:28:8f:a7:0a:57:da:79:
70:51:9a:0b:bb:f6:8c:11:75:e1:b8:05:e9:b0:4a:
49:b1:67:b6:96:36:6d:86:66:0d:23:85:01:bd:6a:
c5:96:67:72:6f:72:fc:aa:2c:d4:01:db:41:42:4e:
dd:af:77:81:5c:70:27:c7:60:25:d2:1e:10:67:2b:
47:fa:b3:41:fa:8d:b4:2a:64:77:f4:e2:d4:81:4c:
bc:d0:05:e6:11:81:6f:ba:10:4d:4a:65:98:00:29:
55:da:16:f2:9c:e8:62:61:21:5f:2e:85:1d:1e:48:
e9:6b:ba:ff:ab:86:eb:eb:23:b0:ad:aa:a7:e5:07:
b8:8d:03:26:42:b9:d6:4b:6c:9e:2b:98:19:68:c3:
68:c9:c4:68:01:e9:0e:a5:20:9f:89:44:d0:b4:e6:
49:99:53:a0:59:ef:eb:7e:7a:86:8d:fe:4e:82:45:
15:ec:6f:98:51:04:0a:9e:44:32:d2:02:b4:3c:1a:
f0:0a:34:be:cf:83:6c:12:1a:8f:60:fd:41:d8:30:
37:61:d0:ff:b9:ad:e1:a7:dc:26:cc:73:52:c8:3e:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:39:82:06:42:49:84:8D:29:E3:4B:42:F7:1B:79:C2:64:7B:14
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/9785ggZCSYSNKeNLQvcbecJkexQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.124.0/22
195.251.110.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:ac:d7:71:f1:6f:f3:ba:d1:3f:2b:13:9a:73:5c:8b:f8:bb:
59:18:b0:e5:13:0b:69:fc:e5:77:63:9b:10:a8:dd:f1:cc:de:
16:bc:71:e0:52:73:42:27:2f:19:3b:ac:0f:07:ba:b2:0e:23:
f4:9d:55:47:93:04:d7:3a:5d:ae:de:5e:5c:e5:34:27:5d:63:
ba:58:93:83:49:a5:ff:e8:24:50:78:2f:6d:92:b0:ae:58:48:
a2:31:06:92:f2:49:1e:ba:6b:a3:c8:b2:e6:21:07:a9:30:59:
ec:5a:94:c3:02:3c:c8:bf:b5:1f:3f:4b:5c:01:39:31:cd:97:
82:c2:1a:2b:ad:0d:8a:a6:67:1d:a6:9b:14:f1:e9:d3:20:ed:
07:b9:3f:65:b1:56:37:86:6e:9d:3d:ad:ae:74:f7:d9:c9:e9:
e9:7b:46:7c:28:f1:17:74:06:62:d9:2b:37:71:40:70:2d:b2:
f3:cf:ff:96:0c:11:03:b6:93:21:71:4b:a2:10:0e:af:da:11:
fa:0f:5f:42:5f:27:66:03:cf:24:64:ee:69:c4:f3:d3:1a:fc:
47:1c:37:9a:fe:fe:81:b6:f7:da:ab:ba:31:8a:24:3d:d4:79:
52:f4:87:9e:40:4d:05:c9:98:6e:2a:0e:93:b3:9d:c9:db:d0:
54:60:5b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:55 2025 by rpki-client