Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/li45ICz35wdQ6DJaS48gm92OC6M.roa
File: li45ICz35wdQ6DJaS48gm92OC6M.roa (raw, json)
Hash identifier: nug1XnRCaDq0ttoHrKoYHGzrNpsjG0xsvXpRYYg0OZU=
Subject key identifier: 96:2E:39:20:2C:F7:E7:07:50:E8:32:5A:4B:8F:20:9B:DD:8E:0B:A3
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA455CDBAD579714FD16966243A4A4
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/li45ICz35wdQ6DJaS48gm92OC6M.roa
Signing time: Mon 02 Jan 2023 13:44:48 +0000
ROA not before: Mon 02 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8762
IP address blocks: 195.251.48.0/24 maxlen: 24
194.177.198.0/24 maxlen: 24
2001:648:2c10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:45:5c:db:ad:57:97:14:fd:16:96:62:43:a4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=962e39202cf7e70750e8325a4b8f209bdd8e0ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:4b:a0:7c:6d:42:f3:8c:0a:38:bf:ff:ba:
eb:b2:10:5e:47:40:3a:30:2b:93:a5:92:0e:04:f6:
16:48:69:1e:a7:14:c7:5e:ee:cf:96:7f:86:ae:a4:
5b:fc:fb:11:b9:75:94:86:b9:a8:aa:79:81:84:a4:
46:58:ad:39:92:f8:6d:41:e9:1b:cf:85:d7:89:d4:
56:e5:93:9e:e3:5b:3a:26:09:bb:05:a1:c0:7d:3e:
c8:c3:e3:b6:73:59:19:c5:5a:58:dd:66:67:bd:82:
e1:8f:6d:c5:cc:d0:4b:76:d6:d9:37:9e:64:83:23:
1a:35:80:22:c3:c0:ba:3f:2e:c9:1b:4a:8c:86:7c:
f3:23:41:21:86:5e:f0:9f:ba:66:90:7d:b7:41:2f:
4d:8a:49:ab:8c:09:ce:eb:fb:cc:be:7b:54:b1:e0:
87:26:fa:65:68:6d:44:cf:13:34:52:eb:0d:f9:3a:
db:9a:11:bc:e9:a1:c9:3a:e9:ea:21:a1:6a:1a:ee:
b1:1d:45:58:b2:e4:eb:67:7b:17:83:49:34:29:74:
09:63:64:6d:98:34:c9:af:f8:ed:23:b2:30:97:91:
62:8a:ba:21:1b:de:2d:45:cf:c0:60:75:c2:51:0d:
dd:8c:e6:dc:68:82:96:1a:7f:c1:cf:16:d5:ac:cb:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:39:20:2C:F7:E7:07:50:E8:32:5A:4B:8F:20:9B:DD:8E:0B:A3
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/li45ICz35wdQ6DJaS48gm92OC6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.198.0/24
195.251.48.0/24
IPv6:
2001:648:2c10::/48
Signature Algorithm: sha256WithRSAEncryption
64:18:7c:99:a4:46:c0:76:1c:71:8c:35:1a:b9:0c:3f:19:d5:
b2:8a:e2:73:88:28:ce:bf:b2:e4:38:b6:13:df:9f:73:9d:89:
d7:af:16:be:dc:57:16:7b:00:28:56:22:92:5c:91:46:9f:77:
0b:7e:56:cf:76:a8:89:40:34:ba:2b:cd:53:62:01:d6:bc:1a:
b6:32:f1:dd:02:3b:c1:33:bc:74:21:24:65:da:01:96:c8:d5:
73:5c:0d:2e:97:56:53:59:c3:6f:7d:c1:2e:95:a1:cd:cc:49:
ae:ef:43:80:5f:73:40:bf:0b:4a:25:07:4b:d4:90:8d:fc:ed:
1c:cb:7e:a9:ca:c5:7a:27:26:28:b5:81:6a:da:48:67:e7:85:
cc:fd:93:17:b3:4e:03:9d:d0:65:0a:29:87:aa:a6:42:54:21:
bd:fa:a1:69:cd:20:59:85:72:3f:71:ce:52:4b:42:9e:46:7b:
0f:38:35:64:a7:71:00:aa:14:9e:fa:1f:22:7a:08:2c:ca:1f:
ed:e2:41:ae:80:db:fa:30:d5:f1:44:26:e6:84:74:70:f6:15:
bd:6a:7c:4f:99:88:5b:d8:55:a1:09:6d:ff:fc:90:ee:05:41:
8e:3f:93:50:db:d6:65:92:09:08:b9:64:44:e9:5c:d2:14:2e:
d4:9c:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:24 2025 by rpki-client