Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/mr2WZ-M_jTKrs5tvopxW3ffzrvw.roa
File: mr2WZ-M_jTKrs5tvopxW3ffzrvw.roa (raw, json)
Hash identifier: O22aKFTFeu0szZ0lwbhktwItSrZWCUDqQH5tgvoEkDI=
Subject key identifier: 9A:BD:96:67:E3:3F:8D:32:AB:B3:9B:6F:A2:9C:56:DD:F7:F3:AE:FC
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 28B0DE0D
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/mr2WZ-M_jTKrs5tvopxW3ffzrvw.roa
Signing time: Sat 01 Jan 2022 06:02:36 +0000
ROA not before: Sat 01 Jan 2022 06:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12330
IP address blocks: 195.94.96.0/21 maxlen: 21
195.94.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682679821 (0x28b0de0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Jan 1 06:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9abd9667e33f8d32abb39b6fa29c56ddf7f3aefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:b1:fe:ab:9e:ed:2b:08:f0:af:52:fe:bf:
22:22:a3:37:26:6c:98:cc:1e:6f:a6:51:88:9c:00:
a3:de:f2:ca:6b:c6:97:a0:54:01:06:6f:04:0f:b8:
87:d5:90:ef:ff:07:86:13:0f:68:fc:d4:7b:3f:67:
7e:93:2a:d6:2e:75:67:85:2a:e3:6f:32:7f:71:f5:
21:35:13:e2:d2:db:cf:5f:08:0c:a0:5b:f3:5a:70:
3b:c5:f8:49:1d:fa:5e:cc:0a:4a:f3:35:aa:0a:68:
1d:02:e7:71:f0:6c:3e:11:2a:b1:33:3f:8e:c3:ab:
87:43:63:9e:ca:c0:b6:69:07:20:5c:a8:f1:70:65:
59:fe:09:39:19:a2:7e:0d:4c:3f:08:df:31:63:85:
a6:62:fd:8f:94:82:37:3e:9e:5a:6b:e9:76:47:bb:
3d:79:8e:0b:d6:f2:f0:3d:6f:67:35:9c:89:61:7c:
b1:6d:d4:41:c8:fc:6e:7c:5b:4a:87:b3:02:55:c8:
48:71:05:f1:73:fb:72:d7:ac:0f:68:d4:0e:bb:a4:
75:82:85:d5:78:fc:d4:08:79:9e:8d:42:d5:15:0b:
17:c1:b7:d0:ed:3e:1e:0b:de:fc:ea:e6:5c:89:b1:
e7:23:56:86:ce:1d:b5:c7:aa:34:26:98:0b:ff:71:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:96:67:E3:3F:8D:32:AB:B3:9B:6F:A2:9C:56:DD:F7:F3:AE:FC
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/mr2WZ-M_jTKrs5tvopxW3ffzrvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.96.0-195.94.107.255
Signature Algorithm: sha256WithRSAEncryption
6c:bf:24:46:b7:13:d1:cb:2c:84:ca:25:b0:a9:e7:d1:6b:b3:
ee:8c:2b:e9:30:14:0b:af:bf:6f:d2:ef:6c:b7:7f:38:97:a2:
2e:f5:b0:96:e5:07:61:f0:b3:6f:e5:6c:f8:94:3c:5a:24:82:
cd:24:c0:d5:b4:a3:4b:8d:87:75:f0:5d:65:c1:94:51:68:2f:
68:a3:3d:13:5a:bd:f5:56:f6:43:98:14:78:11:80:41:1a:5d:
c0:1b:db:77:d4:ed:fe:50:d2:66:c4:bc:04:65:a2:ff:6b:bb:
b9:21:b1:ca:28:aa:bf:f5:a2:09:63:3e:e9:ae:a5:88:b4:14:
ac:4c:8b:0c:3b:40:00:0a:68:a5:82:46:2a:c1:b6:d4:24:f7:
58:08:6e:22:17:0d:0c:d4:ad:34:c0:28:37:9d:64:5c:93:ea:
26:cc:f2:3c:74:e7:60:31:8d:fc:78:27:a3:ec:04:04:3f:eb:
8b:f1:01:d9:08:a5:da:8c:91:2e:86:fe:df:8b:42:ce:f6:aa:
17:dc:e3:7d:b1:d0:5a:60:c7:b9:79:09:f4:49:73:ee:4f:f7:
77:6a:32:32:37:8d:2b:f7:d5:fe:16:43:bf:4f:1a:f8:cd:06:
2c:0f:59:a1:de:61:89:bd:78:a1:73:67:6b:48:55:cf:d8:47:
99:91:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:34 2025 by rpki-client