Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/9ydEAVooV4hudv_ktez57zcsQBM.roa
File: 9ydEAVooV4hudv_ktez57zcsQBM.roa (raw, json)
Hash identifier: AvrY0gEA8xspHjGOpJ6hOBJDovCZRUN0eTwBKTtNOcM=
Subject key identifier: F7:27:44:01:5A:28:57:88:6E:76:FF:E4:B5:EC:F9:EF:37:2C:40:13
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 0184C4C6E926C727FDA41A816D2DEE107883
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/9ydEAVooV4hudv_ktez57zcsQBM.roa
Signing time: Tue 29 Nov 2022 19:04:40 +0000
ROA not before: Tue 29 Nov 2022 19:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39276
IP address blocks: 195.238.91.0/24 maxlen: 24
195.238.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:c6:e9:26:c7:27:fd:a4:1a:81:6d:2d:ee:10:78:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Nov 29 19:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f72744015a2857886e76ffe4b5ecf9ef372c4013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:d1:20:9c:61:8f:69:d3:68:a6:84:b3:61:
1a:f0:c4:05:33:71:33:ec:75:01:e2:d5:94:42:81:
5e:7c:01:e8:87:1f:8e:29:4f:ae:cb:d9:11:b9:db:
07:08:a7:06:24:e8:18:f1:9e:b8:41:ec:8b:3a:8f:
47:4f:04:89:23:f8:0a:50:67:91:92:73:48:b4:2a:
a6:1b:c3:0f:d7:06:0c:5e:a2:2a:0a:c7:50:83:4f:
51:75:19:cd:ed:9b:b9:c9:75:b9:b2:56:9a:98:8c:
bc:35:4f:fa:6d:41:4f:24:23:c4:06:6a:83:c2:3a:
08:2e:eb:a9:3c:ff:0e:cf:e7:ba:46:77:75:95:9b:
46:ea:4a:7b:60:34:0e:d7:d1:cc:d6:61:d6:26:7a:
ee:ce:b1:7a:44:10:b4:da:1a:22:d2:6c:c6:e4:76:
27:4a:28:1b:8d:8a:4a:8d:f8:a8:38:cc:a5:cd:91:
ef:90:c2:9d:dd:27:b2:84:dd:9a:04:3a:b9:72:5b:
d9:ee:b5:43:f3:a9:41:71:6f:60:77:2c:2b:49:88:
3a:8f:82:1b:25:55:5b:94:3f:04:dd:2b:99:76:4a:
4d:d9:d2:8c:18:a7:b5:73:8d:71:08:98:fa:1d:4b:
03:3a:aa:3b:55:66:4f:96:35:27:50:2b:1c:25:27:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:27:44:01:5A:28:57:88:6E:76:FF:E4:B5:EC:F9:EF:37:2C:40:13
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/9ydEAVooV4hudv_ktez57zcsQBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.90.0/23
Signature Algorithm: sha256WithRSAEncryption
42:36:89:7f:fc:9e:c7:21:db:17:a7:ec:5a:5e:94:3b:59:97:
27:66:ba:77:f5:f8:50:18:26:bf:ac:90:ff:8d:66:4d:3a:9c:
63:e5:c8:ee:69:e9:22:80:8b:0c:2c:d8:89:9a:b5:07:2e:5c:
60:b4:9d:9e:8c:4b:0a:56:2a:66:db:8b:50:e3:0e:a1:19:97:
ec:38:0f:39:77:e0:91:1c:fa:dc:64:91:e3:5f:22:28:33:20:
48:a3:05:3b:0e:02:6d:fa:f7:96:29:c0:9b:6c:1c:2e:49:e1:
93:13:b7:01:ef:f2:10:9a:c0:3f:20:76:9f:49:20:0e:f5:be:
f7:22:ca:49:97:13:cd:44:c9:45:15:eb:b9:4f:81:c1:2c:05:
a3:8e:3a:0f:d0:ce:b6:61:27:7d:0f:d2:58:99:3e:f1:23:f6:
e9:9c:36:91:fe:11:b0:ac:ab:57:c6:3b:26:87:8a:bf:70:79:
75:a9:6d:2b:1b:51:72:d9:bf:97:91:e6:a2:40:0f:8d:48:50:
59:ff:b4:3e:e0:81:89:3e:95:b7:e8:69:89:09:57:e1:8f:07:
b3:17:55:cb:64:50:24:ed:e7:8d:e5:1f:13:95:6d:af:d7:54:
40:80:1d:38:7a:23:0b:ee:52:6a:24:66:c6:79:48:e0:01:c2:
1c:e4:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:40 2025 by rpki-client