Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/z59GdItwjL-LUrCR0WIKO-PURi4.roa
File: z59GdItwjL-LUrCR0WIKO-PURi4.roa (raw, json)
Hash identifier: 4IuJ842u892a+XPQSmfpp66hMPN0QTws/Bqfqmxj4QE=
Subject key identifier: CF:9F:46:74:8B:70:8C:BF:8B:52:B0:91:D1:62:0A:3B:E3:D4:46:2E
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 01856CAF3216620F4F9D73E718A5F08DBF33
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/z59GdItwjL-LUrCR0WIKO-PURi4.roa
Signing time: Sun 01 Jan 2023 09:34:58 +0000
ROA not before: Sun 01 Jan 2023 09:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198085
IP address blocks: 195.66.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:32:16:62:0f:4f:9d:73:e7:18:a5:f0:8d:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Jan 1 09:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf9f46748b708cbf8b52b091d1620a3be3d4462e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:98:26:1e:78:53:3b:62:50:01:12:1d:a9:f1:
37:93:da:16:3b:d0:a4:75:c4:01:1f:d1:d3:fc:60:
02:7c:30:d9:30:aa:3d:c9:79:39:bf:44:8c:c8:4b:
52:c4:c6:90:d2:0e:1c:17:35:43:49:6f:a4:95:c9:
b7:41:ae:f2:ee:a4:96:f2:18:dc:2e:86:bd:4e:3f:
ca:0c:51:c9:49:1d:4d:00:48:0a:b1:49:73:3e:ea:
4d:c1:98:65:f6:4e:8a:7f:50:96:86:79:b7:88:c8:
1c:66:40:1d:93:d1:f1:d1:82:f1:80:14:b8:b5:c6:
c8:c7:2a:1c:80:9f:eb:2e:c1:59:08:0b:97:7b:b4:
1f:56:a8:ec:9d:9b:25:cc:f1:c5:78:44:6c:40:9e:
ab:b6:b5:a6:2d:3a:21:e7:6c:88:98:95:06:99:ca:
db:7c:58:68:34:7a:4f:45:89:5d:3e:11:7a:cd:ec:
e7:51:49:ca:bf:0e:7b:ef:e4:17:b3:5c:eb:8c:1c:
ec:fc:ed:9e:be:c9:92:58:e5:3a:bd:40:49:8d:33:
ad:7e:44:76:f7:7c:2f:92:0e:e4:ce:17:e6:cb:77:
50:e8:76:ab:97:65:ad:a3:13:df:2b:99:4c:29:ef:
9e:f1:56:0c:8f:cf:4b:5e:d5:ed:ca:7b:0c:fd:8d:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9F:46:74:8B:70:8C:BF:8B:52:B0:91:D1:62:0A:3B:E3:D4:46:2E
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/z59GdItwjL-LUrCR0WIKO-PURi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:01:d0:a8:1b:06:5d:ba:02:1f:85:70:e5:91:7a:f8:44:bf:
01:f9:09:21:37:e3:d5:a7:2a:b7:12:77:26:f5:25:8d:e6:57:
17:4c:5b:a0:54:e7:90:4b:e2:46:b1:a9:76:80:ce:da:fd:32:
06:61:20:6b:9e:51:ce:57:be:c7:8c:3b:9a:47:1f:25:a9:93:
8a:5a:6a:d3:97:c7:00:6e:b9:86:89:e6:5a:20:c1:3b:a3:c0:
2d:38:14:db:99:b8:86:07:1f:ed:a2:9c:b4:50:b0:51:a7:08:
48:1f:59:23:cf:45:2e:f9:db:9d:5b:63:ce:cf:f6:cc:da:cc:
53:31:67:ed:19:76:3b:1d:c1:49:c0:76:35:5f:02:5e:14:14:
c9:e4:f3:cd:d8:44:b5:79:5a:9d:49:e9:f9:e8:7b:2f:97:db:
ea:1c:4d:54:78:e2:43:5b:ca:00:13:c5:04:5f:a4:01:00:b6:
bd:8d:43:b9:a2:ad:9d:61:cf:a5:b6:90:6c:31:8a:de:6b:ec:
5e:96:58:4d:cc:50:77:05:ee:2c:3d:40:0b:94:8a:42:2c:53:
67:89:14:6f:4c:d3:70:bf:70:1a:19:cb:82:15:f0:91:71:fa:
36:8e:ec:52:69:90:0a:ee:f4:a2:ea:56:2a:ea:ea:2d:ac:14:
02:b0:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:50:17 2025 by rpki-client