Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Ks1fbNZ1BpFDvshZA1Oal80hQ7Y.roa
File: Ks1fbNZ1BpFDvshZA1Oal80hQ7Y.roa (raw, json)
Hash identifier: +etMZtiAnf2C1R3CKQjUaGJ1cnuvLambMq5vMvH0OBE=
Subject key identifier: 2A:CD:5F:6C:D6:75:06:91:43:BE:C8:59:03:53:9A:97:CD:21:43:B6
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01856ECB9E27452645940054CF0A020681DF
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Ks1fbNZ1BpFDvshZA1Oal80hQ7Y.roa
Signing time: Sun 01 Jan 2023 19:25:16 +0000
ROA not before: Sun 01 Jan 2023 19:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209748
IP address blocks: 195.123.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:9e:27:45:26:45:94:00:54:cf:0a:02:06:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jan 1 19:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2acd5f6cd675069143bec85903539a97cd2143b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:34:c8:e6:e2:c4:47:ec:ec:0a:61:6b:8b:
1e:21:bc:06:bd:68:65:81:b4:34:f8:2b:75:d2:1b:
56:0a:4e:d2:3c:88:57:59:0c:a1:2a:66:81:74:4e:
67:87:a2:bd:fe:78:50:43:a6:8b:62:32:19:fe:8e:
93:78:1e:02:8e:8c:c9:b6:44:33:1a:75:60:d5:8c:
d6:04:54:ed:ed:8e:4b:1c:2b:2f:96:1f:30:76:06:
12:ba:d8:a0:4e:2b:db:6d:47:c4:15:08:0a:80:c7:
40:be:09:53:71:e5:f5:9d:51:05:d3:0a:30:4f:77:
84:a0:65:f0:1b:e8:3a:73:8c:81:8a:c9:41:fb:c2:
60:27:2d:86:c0:48:e0:47:5a:40:8c:27:7b:d3:01:
71:2b:99:63:ef:4f:34:fb:22:83:c9:47:8a:50:b0:
ed:34:f7:eb:5e:b9:e1:fa:a3:78:04:f4:9e:98:b1:
4c:ee:8a:19:cc:ac:d9:49:f2:0f:55:39:d9:ef:f2:
50:c3:42:54:c3:6f:b4:cf:89:88:c5:b7:1e:ea:20:
1a:46:48:cf:54:3b:4d:53:d3:22:6f:b7:2a:48:5c:
0b:05:e0:49:df:b6:06:2a:7b:fb:54:89:9f:c3:58:
b5:84:fa:d7:8e:d7:14:ec:26:42:a6:d8:5d:3b:5d:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:5F:6C:D6:75:06:91:43:BE:C8:59:03:53:9A:97:CD:21:43:B6
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Ks1fbNZ1BpFDvshZA1Oal80hQ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6b:2f:a4:5b:4d:c5:87:5f:f7:2b:22:21:4a:69:0e:a8:64:
e7:91:9f:a3:05:5a:12:93:36:c9:f9:9b:8d:68:49:cc:3c:fd:
f8:58:ae:6d:b8:55:5a:0c:02:18:20:99:6e:f3:14:a2:53:31:
22:07:dc:30:23:72:c5:f3:14:fe:c9:ef:6b:3d:20:75:85:eb:
d2:a6:22:a6:3b:69:ff:32:44:be:d1:49:4f:7a:3e:b2:34:ce:
09:d7:88:9e:07:60:8e:ae:f7:e8:83:49:54:2e:d2:ad:4f:a0:
01:42:16:32:15:f7:5c:9f:57:20:2f:35:5c:2f:58:ed:23:52:
1b:dd:0c:78:30:7a:ab:b9:dc:a1:16:f7:6c:5f:95:4f:3b:df:
af:1a:3d:8b:03:b3:3f:19:08:b2:eb:a1:af:5c:27:bf:f9:d4:
74:4f:d8:26:98:22:a8:c2:ab:30:95:e5:2c:2e:fb:1a:b7:db:
c3:82:7c:c8:20:ba:bf:ab:c2:96:79:2c:09:04:6c:12:c1:11:
bd:0b:bd:bc:0d:2b:76:2e:0e:26:f8:be:66:d3:98:f3:4e:bd:
e0:3e:82:66:e7:08:e5:27:89:63:7d:57:1c:fa:8f:92:ff:e6:
be:ac:32:a1:52:5e:23:a6:6f:64:37:5e:23:03:fe:94:fa:02:
e4:73:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:06 2025 by rpki-client