Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/TWsGDrPmxFrXk2h5ihsO4Uvyw5Q.roa
File: TWsGDrPmxFrXk2h5ihsO4Uvyw5Q.roa (raw, json)
Hash identifier: HSqButi8xes1JIO3br3xmyMgRf6sBS1+lb9LQPmvaCE=
Subject key identifier: 4D:6B:06:0E:B3:E6:C4:5A:D7:93:68:79:8A:1B:0E:E1:4B:F2:C3:94
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 08AB7221
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/TWsGDrPmxFrXk2h5ihsO4Uvyw5Q.roa
Signing time: Sat 01 Jan 2022 05:56:33 +0000
ROA not before: Sat 01 Jan 2022 05:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49969
IP address blocks: 195.211.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145453601 (0x8ab7221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 1 05:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d6b060eb3e6c45ad79368798a1b0ee14bf2c394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:19:ab:86:4e:f4:9d:d5:12:e1:1f:f2:b7:1f:
02:1f:6c:c8:45:db:7e:a5:c9:fb:84:86:98:1b:1c:
51:be:b5:51:5c:44:3c:66:8b:03:49:11:f7:6d:fa:
43:42:19:6d:59:26:0b:ac:6c:d8:b8:62:fd:0f:3a:
2c:f2:b4:08:27:72:80:29:1a:41:f9:bc:55:ad:c0:
bb:f6:8e:4e:3f:d5:4b:08:9d:2a:d8:3f:9e:df:d7:
bd:09:8d:29:77:06:13:4c:2e:c4:aa:d0:3f:01:0d:
cd:1a:0d:18:16:bc:20:ed:b1:40:88:0b:2f:be:a9:
1d:cc:fa:00:2a:f9:65:b2:c2:0f:d9:40:5b:11:ee:
4a:59:71:ff:ce:97:04:d8:bb:36:32:b0:c5:5e:07:
db:89:e5:fc:09:84:97:de:f2:03:62:af:70:7d:cd:
06:31:7f:c0:02:3c:f1:b8:29:6a:0c:6c:46:f5:13:
3a:35:5b:43:5b:b0:39:39:23:e1:a4:e2:eb:84:cf:
21:26:3f:5e:53:ab:6d:7d:96:24:bc:aa:1a:4a:f1:
21:c0:5b:cc:ec:85:9a:ae:12:26:da:10:94:00:f8:
17:2c:a7:0f:8a:3c:8b:ab:a1:16:3d:61:1c:c1:f6:
dc:d6:fe:70:c6:b0:3a:53:b1:b5:46:c3:0f:19:28:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:06:0E:B3:E6:C4:5A:D7:93:68:79:8A:1B:0E:E1:4B:F2:C3:94
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/TWsGDrPmxFrXk2h5ihsO4Uvyw5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:15:09:b1:2d:42:cd:4a:04:88:16:71:ec:d6:9c:60:30:27:
99:a1:5d:c4:6a:16:16:ad:a7:aa:8d:1b:b4:b9:d5:79:16:48:
7a:4a:1a:db:53:f6:a4:65:fb:09:84:f3:b3:b3:15:7a:be:9c:
7a:1f:86:1c:84:35:67:f5:63:c3:85:82:5e:4f:fa:d1:62:39:
27:f4:56:fe:32:f7:35:4f:4b:67:b0:1c:ef:34:1a:aa:84:1d:
4c:6d:90:ab:eb:24:0d:d4:ad:0a:c3:6d:1e:2a:50:be:9f:fd:
b2:7f:09:e6:4b:bb:7f:cc:21:4b:87:42:63:3d:68:83:5d:3c:
61:84:ca:c0:c7:fe:2a:1f:7f:32:d4:e9:fb:5f:de:e1:c7:43:
54:d7:b1:4e:df:45:66:16:50:fd:44:2e:17:f3:95:69:4f:54:
78:20:7a:50:84:04:0c:35:7d:90:b4:33:4e:dc:13:4c:80:a8:
be:9a:91:f9:32:5a:a5:0f:72:bd:f4:41:d5:dd:9e:d8:60:59:
b3:c2:30:a3:24:0a:55:af:9c:49:07:a3:61:9e:b9:af:b9:3d:
20:7a:69:81:42:3f:45:73:aa:a8:3e:c2:0b:1e:cf:24:e6:77:
48:ce:8e:cb:51:99:8a:c0:d5:4d:a4:f3:93:80:f6:8c:ce:be:
1f:50:7b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:28 2025 by rpki-client