Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aS5e7YSfQxU154kd-Uy4X0OkA7M.roa
File: aS5e7YSfQxU154kd-Uy4X0OkA7M.roa (raw, json)
Hash identifier: iKelznboju28as7cMsgr622B9Qq0H0a1kJqHx65Vock=
Subject key identifier: 69:2E:5E:ED:84:9F:43:15:35:E7:89:1D:F9:4C:B8:5F:43:A4:03:B3
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 39438E9A
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aS5e7YSfQxU154kd-Uy4X0OkA7M.roa
Signing time: Sat 01 Jan 2022 03:53:02 +0000
ROA not before: Sat 01 Jan 2022 03:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15690
IP address blocks: 195.251.204.0/24 maxlen: 24
195.251.202.0/23 maxlen: 23
194.177.194.0/23 maxlen: 24
2001:648:2011::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960728730 (0x39438e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=692e5eed849f431535e7891df94cb85f43a403b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:f6:ea:8d:10:dd:49:95:c8:65:3f:99:c2:
4b:f4:a0:0a:59:dc:ff:9c:27:6f:c9:22:5f:cd:75:
70:75:af:c7:60:36:1a:c5:f7:93:1f:6a:4a:2e:4b:
ee:ff:ab:11:d2:19:bf:10:c5:5f:12:3f:d4:37:76:
d8:49:50:f0:54:29:0f:ce:b4:65:c5:de:e4:ed:02:
5c:19:75:a1:aa:f3:65:93:8d:b2:d7:fe:71:aa:57:
29:d6:c7:39:9d:d8:b5:f4:e2:13:e5:75:5d:15:47:
70:a2:b4:f0:9f:0e:cb:97:f2:41:54:13:ab:ee:f7:
42:e9:23:7b:51:fc:dc:d5:86:1b:02:fc:b4:c5:30:
87:51:6b:57:22:fc:4e:ca:3d:5c:e1:e0:0b:2b:1d:
7b:60:89:f4:ed:52:59:93:08:28:0f:be:18:16:49:
33:79:f3:3c:6f:5c:cd:33:e8:d5:d9:c7:c8:2a:ed:
e3:c5:2c:8b:8d:6e:2a:27:c7:77:ee:7c:ea:0c:8e:
19:e3:89:a2:f0:a7:93:3a:44:0a:3c:09:5d:ec:2a:
38:3d:ed:d7:67:ac:4e:70:d7:61:b9:c3:6c:64:d9:
e5:ba:f4:be:b4:c2:e1:ef:9c:bb:99:63:1f:4f:0b:
ff:1c:69:27:47:91:2b:36:13:61:70:41:28:c5:74:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2E:5E:ED:84:9F:43:15:35:E7:89:1D:F9:4C:B8:5F:43:A4:03:B3
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aS5e7YSfQxU154kd-Uy4X0OkA7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.194.0/23
195.251.202.0-195.251.204.255
IPv6:
2001:648:2011::/48
Signature Algorithm: sha256WithRSAEncryption
37:ec:5f:c7:97:13:63:02:da:f4:ca:c1:be:c9:f6:b8:5d:e1:
96:f0:2d:08:09:38:8b:52:27:9e:f6:04:52:3a:19:ba:d0:e4:
5e:52:69:75:09:9a:81:dd:32:b5:da:a1:33:e7:58:e1:cd:48:
23:69:e6:48:99:ec:df:ca:e4:05:a7:39:b1:39:39:45:00:b5:
c6:dc:a6:22:19:22:11:40:b3:5a:7a:91:da:27:07:63:c8:22:
20:8b:71:17:33:49:68:55:e8:4a:84:4d:65:0d:fe:64:49:fd:
a1:2c:aa:63:75:8b:01:3f:1a:e1:8c:ee:86:9b:d1:0f:1b:22:
74:5c:69:aa:64:7c:b3:68:79:5e:aa:56:34:d6:7f:bd:63:8c:
d8:c9:e7:6c:5e:7c:6b:7a:c4:52:15:24:18:0d:d8:45:70:fe:
a6:69:1e:e0:07:61:bc:3a:d5:8d:34:87:2b:79:2c:eb:a2:77:
08:b8:96:fe:1e:ae:8c:c9:35:06:f1:91:98:48:7e:ff:d5:9f:
7a:7e:59:5b:31:be:65:9e:1b:d4:9d:b2:36:83:62:f1:d2:fc:
9d:08:b2:5e:b5:0f:e3:60:d3:ec:80:ca:44:7c:e0:c7:55:97:
6c:d5:ff:55:6d:e5:7a:d5:e7:be:48:f0:3b:94:ba:69:69:b6:
62:fb:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:53 2025 by rpki-client