Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/RC6e7uApqH_L7gJWpBuvbeg0Asw.roa
File: RC6e7uApqH_L7gJWpBuvbeg0Asw.roa (raw, json)
Hash identifier: KskhALNIXO4su8xHZVDCf7s/fKvv+WbiOhmfAW8XLbM=
Subject key identifier: 44:2E:9E:EE:E0:29:A8:7F:CB:EE:02:56:A4:1B:AF:6D:E8:34:02:CC
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 01892B132CFBBE73C763750CDAE82C748F92
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/RC6e7uApqH_L7gJWpBuvbeg0Asw.roa
Signing time: Thu 06 Jul 2023 12:00:24 +0000
ROA not before: Thu 06 Jul 2023 12:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 195.191.188.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:13:2c:fb:be:73:c7:63:75:0c:da:e8:2c:74:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Jul 6 12:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=442e9eeee029a87fcbee0256a41baf6de83402cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:26:8e:a0:2e:f2:75:3e:1a:b6:cd:e3:c2:
f7:96:06:47:2c:63:c6:78:01:03:59:5a:83:82:dc:
ba:2e:81:99:3f:f8:eb:ba:6f:f5:08:ef:e4:29:d9:
f1:70:c1:a5:6c:df:a3:2e:54:c2:83:d5:7b:58:64:
c0:55:1c:d4:77:5d:c2:e8:72:a7:1f:c9:9d:2b:74:
02:c4:2f:79:cc:f5:64:7c:4f:3a:f1:c4:c8:b3:b5:
ab:bd:db:31:9b:3e:76:4a:f7:fc:4d:03:79:3c:25:
63:57:f9:ba:92:e9:66:46:2a:0a:d5:9c:cd:1a:e8:
38:6a:26:73:91:f8:9c:38:3c:86:ff:06:d9:07:41:
2b:8d:b9:3b:77:eb:b1:a9:34:38:b1:ef:6b:27:bc:
d6:99:da:65:10:d4:dd:00:6a:fb:68:25:2c:5e:b4:
3e:ef:e7:b7:1c:6e:02:b7:df:bb:23:de:5a:e6:e6:
9d:91:47:b8:55:17:cd:a1:b3:a6:07:14:63:9a:1f:
de:3c:8d:8d:f4:74:33:ef:44:22:06:74:06:5f:8e:
ce:76:05:c9:39:89:d1:fd:ae:b7:51:15:fc:d9:a4:
a9:1d:8f:20:81:0f:ee:ad:5c:29:64:95:ff:c4:99:
d7:03:9c:2a:a0:68:08:24:e8:28:ad:99:e9:9c:fa:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2E:9E:EE:E0:29:A8:7F:CB:EE:02:56:A4:1B:AF:6D:E8:34:02:CC
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/RC6e7uApqH_L7gJWpBuvbeg0Asw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.188.0/23
Signature Algorithm: sha256WithRSAEncryption
51:28:6e:bf:a9:d6:20:20:70:eb:64:ec:5a:69:a7:19:74:61:
99:aa:63:ef:7b:9c:1a:64:c3:98:29:74:6c:36:db:a4:c6:00:
07:35:d9:2c:d4:b3:44:79:f2:c5:af:25:19:6e:b5:ab:10:ae:
d6:3a:10:a4:12:47:34:02:1e:68:17:1d:b2:9e:25:3a:fd:6e:
88:71:ab:11:bb:a9:1a:ea:01:e7:e2:d0:ce:14:d9:8d:10:33:
dd:40:e0:e5:3d:9b:ea:96:5a:b7:36:db:91:e8:4d:38:ed:83:
f9:10:1c:76:5e:6b:e6:fe:a0:ad:5c:72:b8:72:ec:38:c1:bf:
0c:59:6e:9a:7c:58:64:dd:8b:a5:ee:63:6b:7d:28:5c:87:b0:
94:07:f6:0c:0b:44:d9:5e:41:39:90:25:67:1a:01:e6:ba:24:
a3:ea:7f:64:21:d7:50:16:d1:7c:e1:d6:ca:c3:6f:26:e8:89:
de:b6:cf:ca:b0:52:8d:df:32:88:4b:39:c8:3e:cf:75:a1:55:
43:77:af:93:ec:fb:5d:a8:28:60:81:67:0f:1a:3f:58:ab:6b:
b7:37:86:19:08:6c:54:3c:df:3b:c8:74:a8:23:2c:ff:5f:62:
d8:33:b4:34:c9:d3:a8:a6:97:d2:d6:1e:b9:11:f3:94:ec:78:
b5:3d:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:54 2025 by rpki-client