Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/hRhmzUQjlXeFCW3ti_kgSrMJyTE.roa
File: hRhmzUQjlXeFCW3ti_kgSrMJyTE.roa (raw, json)
Hash identifier: 7DhZ/qoBaoWLNfBhci1MPWzeaCcgKX4tSnJRYHktbEA=
Subject key identifier: 85:18:66:CD:44:23:95:77:85:09:6D:ED:8B:F9:20:4A:B3:09:C9:31
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 01856E6F918C5B171F288D0B3089B3DC9D45
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/hRhmzUQjlXeFCW3ti_kgSrMJyTE.roa
Signing time: Sun 01 Jan 2023 17:44:43 +0000
ROA not before: Sun 01 Jan 2023 17:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21495
IP address blocks: 195.242.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:91:8c:5b:17:1f:28:8d:0b:30:89:b3:dc:9d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jan 1 17:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=851866cd4423957785096ded8bf9204ab309c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:5b:82:68:d9:0c:83:bd:85:4a:2b:b8:87:
88:0e:d7:fb:c8:80:5c:a7:d9:a0:74:24:9e:90:15:
12:86:47:fc:96:d5:58:8b:d0:18:07:e3:94:a7:b8:
d1:0d:18:a6:ae:c3:69:2f:1c:4c:50:c9:83:f9:b9:
d4:d9:a4:b1:a6:54:60:9c:2f:69:cb:ca:78:65:92:
8b:6e:ac:3f:df:5a:07:33:e5:aa:6f:04:f4:8c:88:
4b:26:6b:84:a0:b5:2d:f3:55:38:64:d8:6f:48:44:
52:bf:bc:30:c2:41:3f:15:2a:b7:8b:7f:62:0c:41:
4f:25:3c:21:40:13:d1:5b:54:27:c8:25:6c:d4:10:
a3:c8:87:90:26:8e:39:54:6f:07:7f:dd:03:48:01:
89:cb:37:d0:b8:40:85:cc:30:cc:81:08:16:6a:e3:
5c:2f:6a:23:3d:cd:c4:c6:94:3a:5f:72:db:ed:5a:
b9:9e:4c:db:92:bf:b6:04:a0:30:d5:b0:b2:5a:19:
ac:28:af:4d:bf:1e:b6:cb:90:a9:d7:64:61:61:30:
c0:3d:01:99:d4:4c:0c:2b:e7:12:82:4e:a8:bd:57:
59:85:e8:ea:b3:73:e2:73:f9:a8:da:bf:07:f4:d3:
09:f3:7a:c5:a5:5c:4d:d6:5b:ae:6e:5d:20:a2:65:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:18:66:CD:44:23:95:77:85:09:6D:ED:8B:F9:20:4A:B3:09:C9:31
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/hRhmzUQjlXeFCW3ti_kgSrMJyTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d4:64:d2:08:c6:c8:3b:5c:87:19:fa:39:c1:04:e0:72:01:
f7:fb:a6:f1:23:21:22:ca:e1:66:25:d5:14:20:b9:2b:fb:fc:
2f:5d:24:cd:da:27:31:f4:e8:cc:26:59:d6:17:b9:ea:ff:39:
56:d6:01:5a:59:0c:bc:8f:9e:16:4f:2f:83:51:b7:12:5b:a6:
58:0f:8f:58:2f:4a:69:f5:9b:1f:16:6a:16:eb:00:36:ab:5e:
f0:18:37:54:0d:f4:86:9c:e0:c4:4a:cd:59:19:f2:49:b8:94:
d7:5d:c0:57:ce:8e:2b:82:eb:55:5e:ad:53:1b:3c:bf:74:e8:
23:14:ea:38:46:66:71:a7:7a:22:e1:8f:0f:2e:53:a0:64:f2:
42:bf:e2:a0:a8:65:29:06:b9:c5:7e:5a:e5:4e:d9:fa:e4:2c:
f5:c0:94:55:52:07:7f:8e:ed:ec:a3:21:ef:ca:9d:52:e5:0c:
9f:bc:6b:38:33:07:d0:06:e2:6e:44:40:a5:c4:0a:4d:a5:a5:
5b:ec:e4:2a:53:eb:c0:6e:16:d1:c9:af:95:11:e8:d5:b9:ca:
e8:c6:c1:c1:0a:4b:ad:38:15:d1:05:d4:b2:70:bc:72:9d:dd:
d1:12:f0:83:ae:5a:f2:e1:4d:75:8b:0b:52:81:6e:b4:5a:a5:
6f:36:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:03 2025 by rpki-client