Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/ySFJDWHxXEsquxOZudXmKLkitS4.roa
File: ySFJDWHxXEsquxOZudXmKLkitS4.roa (raw, json)
Hash identifier: 88S8NOLNlerB0x3LK8AG6yxnBRW/RO0b1I0AuNm3+7U=
Subject key identifier: C9:21:49:0D:61:F1:5C:4B:2A:BB:13:99:B9:D5:E6:28:B9:22:B5:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 05DC0948
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/ySFJDWHxXEsquxOZudXmKLkitS4.roa
Signing time: Sat 01 Jan 2022 08:54:12 +0000
ROA not before: Sat 01 Jan 2022 08:54:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207327
IP address blocks: 195.226.218.0/24 maxlen: 24
2a10:2d80::/29 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98306376 (0x5dc0948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Jan 1 08:54:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c921490d61f15c4b2abb1399b9d5e628b922b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:d6:da:82:c9:69:b9:07:13:ff:5a:00:2f:
5b:e3:9c:dc:15:82:69:14:b7:9b:7c:e7:2c:8d:96:
fe:23:82:38:d8:35:b3:c4:ad:e3:87:14:49:04:10:
2b:0d:30:3b:11:c8:84:7e:7e:15:0a:27:3a:fd:e7:
4f:b4:8d:8a:eb:74:e8:f1:72:c5:8b:cd:27:7f:3c:
24:ab:30:56:d5:4e:f1:15:d1:a1:49:7a:fc:4e:02:
92:63:78:21:1e:d2:50:00:06:b9:e6:35:bc:35:ac:
bf:f5:8d:ae:de:e4:a1:d4:66:52:42:00:ce:7c:5a:
50:23:6b:c3:b1:06:34:1f:dd:eb:43:a8:93:0e:36:
c3:fb:c4:00:03:bd:e7:16:b9:41:fc:e5:3d:d4:d9:
39:c2:ae:01:e3:7d:29:ea:d9:98:97:ff:ee:d5:16:
11:02:d9:2f:1b:72:9e:31:bc:d5:bc:5f:cf:bd:18:
88:bb:ca:14:65:b0:1e:49:ea:c5:67:16:e0:84:36:
2e:12:98:16:2e:0f:cf:5d:a3:1d:75:5e:d3:6a:15:
a4:8e:53:ec:ed:33:53:70:df:b1:10:99:14:2f:92:
41:c3:69:a0:e3:12:d7:86:46:c5:5a:e9:92:cb:31:
13:94:ef:93:e8:5c:96:b6:6d:6a:1f:18:3a:4a:bf:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:49:0D:61:F1:5C:4B:2A:BB:13:99:B9:D5:E6:28:B9:22:B5:2E
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/ySFJDWHxXEsquxOZudXmKLkitS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.218.0/24
IPv6:
2a10:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
29:43:f1:43:a8:29:03:5a:1f:9d:be:78:9c:7b:19:44:8f:e6:
23:06:f7:a4:ac:eb:dd:7d:f5:3d:3d:26:16:e3:4f:52:cb:a2:
ca:b8:76:80:94:83:4f:6f:7a:1a:aa:06:e3:9c:7a:de:d5:6d:
dd:7e:9b:87:98:f0:9a:4f:d4:85:5f:98:5a:bf:ea:bc:76:c6:
d9:7d:6d:f9:95:42:f2:e3:43:4f:5c:cf:bc:d7:df:b7:0c:1f:
0a:f3:c3:19:f3:f5:6e:1a:3d:08:01:14:c9:3c:65:ee:62:b1:
f1:e6:1c:9a:5a:11:82:3c:e6:35:e1:ed:d7:e5:16:6d:e7:29:
ea:7c:54:aa:ad:c4:00:37:a3:28:1e:b0:c5:0a:53:fa:e0:e5:
7f:dd:ea:5c:9b:45:8f:48:9a:a3:59:63:75:0f:22:ce:4e:19:
db:57:5f:20:6f:66:ae:be:46:e7:5a:f9:7c:17:6c:87:3e:dd:
aa:12:6d:f7:34:7d:6a:ee:82:9e:31:17:a1:8b:f1:4a:c3:13:
03:db:2c:74:5d:2a:13:2e:ec:2b:bd:87:55:bc:67:e1:b7:0c:
1f:fc:f3:4d:c1:b6:4a:f0:1c:60:7a:56:02:e7:1e:eb:bb:14:
20:27:c8:05:6d:14:d5:5d:1b:fc:8f:d2:49:85:0f:22:a9:f7:
16:85:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:32 2025 by rpki-client