Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/uP_7wHLMXk58hgAatGe67I0S6ko.roa
File: uP_7wHLMXk58hgAatGe67I0S6ko.roa (raw, json)
Hash identifier: XVbn9xKQdKs+4d+ItYpYJIl3AuQdZwpsX2Uq2e8p/dA=
Subject key identifier: B8:FF:FB:C0:72:CC:5E:4E:7C:86:00:1A:B4:67:BA:EC:8D:12:EA:4A
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 018722615303608C0D391B37C68EB0FD02B5
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/uP_7wHLMXk58hgAatGe67I0S6ko.roa
Signing time: Mon 27 Mar 2023 09:23:36 +0000
ROA not before: Mon 27 Mar 2023 09:23:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20847
IP address blocks: 195.211.72.0/22 maxlen: 24
141.138.168.0/22 maxlen: 24
141.138.168.0/21 maxlen: 24
2a03:3c00::/33 maxlen: 33
2a03:3c00::/32 maxlen: 32
2a03:3c00:8000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:61:53:03:60:8c:0d:39:1b:37:c6:8e:b0:fd:02:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Mar 27 09:23:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8fffbc072cc5e4e7c86001ab467baec8d12ea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:a6:12:09:ee:c0:70:41:60:bc:7e:60:35:
35:79:34:a7:e6:7b:41:4c:29:13:84:68:a4:ab:06:
89:ed:9a:84:68:69:e7:f1:ea:7c:8c:8d:d7:15:fa:
2a:4f:6f:5a:8c:8b:e1:d2:ba:c9:2f:1e:56:b1:6e:
f2:83:bd:ac:d1:b8:9a:a0:f7:28:62:c1:a5:29:ee:
ac:13:3d:a3:e9:f0:26:d1:5b:94:48:d2:12:68:5f:
92:fe:cc:9c:c6:4c:03:22:38:39:eb:99:ed:f2:e8:
a8:c4:cd:96:86:4f:6b:99:cb:28:5f:04:56:e5:51:
61:73:0e:66:52:54:d4:fc:52:c5:fc:05:d5:ab:1b:
61:82:e2:cc:b3:c0:d6:78:bf:c4:db:59:b0:4b:61:
47:0f:da:03:ce:0e:87:dc:14:0f:d2:c3:4d:30:87:
02:55:43:d3:76:eb:54:91:a5:8e:ea:d4:63:e2:6a:
34:37:2c:98:27:5b:7d:3a:e4:e6:c2:13:cc:c9:b6:
8c:91:dc:a7:1b:98:27:73:6f:31:23:37:38:3c:47:
1a:8e:e5:fb:a0:60:46:3c:8d:76:f8:b6:b9:99:6b:
3b:71:88:37:cd:cf:a8:95:36:d8:79:e8:a4:db:19:
ad:18:a8:26:0c:7e:67:0e:3c:dd:f6:fb:27:0f:19:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FF:FB:C0:72:CC:5E:4E:7C:86:00:1A:B4:67:BA:EC:8D:12:EA:4A
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/uP_7wHLMXk58hgAatGe67I0S6ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.168.0/21
195.211.72.0/22
IPv6:
2a03:3c00::/32
Signature Algorithm: sha256WithRSAEncryption
42:33:d2:a7:56:24:a7:8f:20:14:5d:0a:5a:21:6f:f4:74:56:
c4:25:3f:b3:a0:1e:4a:a0:b4:02:be:d4:4c:47:91:60:0c:ba:
be:8d:7e:67:9f:88:4d:9f:67:a3:23:92:ba:be:58:b3:3c:91:
c7:16:c1:9f:3d:c3:6f:a9:5c:32:82:2b:98:76:7a:4a:e6:c3:
0b:75:df:79:3d:ed:d5:97:38:75:75:e1:7f:97:74:ff:ec:ed:
ac:92:9e:29:e1:52:6f:c7:64:fa:3a:77:7f:a2:0a:cb:d0:0b:
20:a7:3c:de:66:36:c3:70:b2:8f:bc:e7:7d:15:2d:4c:eb:49:
9b:fa:ce:e7:03:8b:e0:3f:86:bd:25:3f:cd:a9:32:ab:00:65:
14:78:ce:a2:1b:9f:ac:69:5a:ee:a6:91:0b:97:0d:00:0f:e5:
d4:bc:eb:b8:13:86:e9:44:af:22:ae:5f:e3:72:eb:3f:8c:71:
f5:c2:68:37:1d:4c:85:b9:5c:70:e9:b0:02:fd:b3:18:e3:f7:
df:f3:7f:3e:76:2e:d2:a5:7f:4c:33:20:37:88:b3:c5:68:44:
91:14:c6:98:7e:41:0d:07:0d:bc:74:89:23:b0:62:f5:6c:ed:
19:35:78:e6:7d:86:2a:2c:79:e6:37:e0:a7:f0:01:5e:34:5c:
c6:ef:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:01:39 2025 by rpki-client