Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/AOKhB18M8AaxiDCdzvQqwU-WDKU.roa
File: AOKhB18M8AaxiDCdzvQqwU-WDKU.roa (raw, json)
Hash identifier: l2Gw6I/RlmRXvcVKjKMZEpgWJd193Z04b48IQYqKSwk=
Subject key identifier: 00:E2:A1:07:5F:0C:F0:06:B1:88:30:9D:CE:F4:2A:C1:4F:96:0C:A5
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 042DF53C
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/AOKhB18M8AaxiDCdzvQqwU-WDKU.roa
Signing time: Sat 01 Jan 2022 04:03:17 +0000
ROA not before: Sat 01 Jan 2022 04:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 195.245.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70120764 (0x42df53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Jan 1 04:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00e2a1075f0cf006b188309dcef42ac14f960ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:a4:5e:e0:45:3e:f2:4f:d0:7b:19:ac:29:
92:c2:a1:77:39:86:1b:d9:e0:5b:4d:8f:99:0f:4c:
ac:b1:d2:88:8a:18:a4:4a:0f:e0:2c:69:14:2a:97:
07:e3:2c:cb:bb:26:a3:1c:fa:b7:5c:06:fe:a1:0b:
9f:6d:24:3e:3d:9e:ed:2c:02:74:d2:ad:18:6e:3a:
b7:43:c5:40:7b:8f:14:42:70:66:79:a0:0c:02:36:
cf:48:12:9a:35:42:54:4a:51:af:b6:52:39:e5:81:
a6:8f:e5:33:fa:95:c5:20:e7:82:d5:e5:a1:d1:d5:
99:97:d4:49:08:5f:a6:27:e9:ca:4f:a5:31:ef:8b:
5a:25:18:4e:dd:c8:f1:f7:63:a9:96:0f:4e:0d:22:
c0:96:b8:0e:8d:4f:86:77:85:2b:a3:81:55:c7:02:
58:f0:95:92:97:ca:6a:af:4e:e1:de:42:b9:88:ad:
44:b4:90:9b:d5:61:5f:03:3c:31:97:fc:10:77:17:
6b:c1:c5:a4:6d:34:b1:d2:2e:94:25:35:b3:d6:2a:
22:16:bf:37:1a:d6:04:0d:9c:21:b8:32:cb:4a:3c:
10:19:82:00:36:14:d4:bd:af:fe:6b:82:24:5f:e0:
9c:82:24:fa:2d:b1:d5:bb:58:00:15:bd:30:5a:c1:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:A1:07:5F:0C:F0:06:B1:88:30:9D:CE:F4:2A:C1:4F:96:0C:A5
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/AOKhB18M8AaxiDCdzvQqwU-WDKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.85.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e7:3e:99:bd:e9:d3:91:47:65:36:43:33:f3:25:78:a4:a2:
77:f5:ee:d4:54:0e:c3:f2:5e:cc:3a:e3:b8:9e:dd:1d:7a:df:
99:9d:ca:5c:2b:8a:87:f4:16:a1:57:cd:53:56:9e:17:d9:00:
a1:ad:1d:ca:65:eb:c7:0a:23:5f:fb:08:18:22:09:37:9a:19:
21:07:19:fe:4e:85:07:3f:6c:8d:ba:cd:5b:0a:62:fc:bf:f0:
64:8f:dc:d7:60:b1:45:87:cc:dc:10:52:3a:0b:51:8f:ba:43:
c5:e3:96:2a:bf:db:67:d7:96:ec:3d:22:08:ab:be:62:48:37:
ee:34:46:ce:25:4a:a8:8b:55:a8:25:aa:fa:fa:c9:10:6f:85:
2f:d5:c2:0f:3a:05:0e:73:25:8b:cc:4b:8c:6b:31:d5:c3:b7:
c6:36:cf:d8:4d:87:eb:9d:ba:fb:13:47:c5:b1:96:70:9f:00:
0e:fb:c0:be:20:e8:ee:e3:c6:fd:75:1a:ef:2a:67:3d:9f:f0:
0a:96:fd:47:f7:46:d7:e0:31:4d:d1:bd:0c:da:85:a7:e6:6a:
45:61:df:45:e7:cb:5c:07:dc:86:9e:b3:2b:b8:41:e2:8f:dc:
ff:fc:ee:19:17:dc:01:68:c6:67:9b:db:31:ac:69:e8:2c:2a:
bd:42:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:43 2025 by rpki-client