Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0BcwQxtdYWHpWOP6G50lTTOOYvU.roa
File: 0BcwQxtdYWHpWOP6G50lTTOOYvU.roa (raw, json)
Hash identifier: F5fI10s7sflahH4Ak1dSxN8ue7sBIZoiR0+aLQPipyI=
Subject key identifier: D0:17:30:43:1B:5D:61:61:E9:58:E3:FA:1B:9D:25:4D:33:8E:62:F5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 06FEC279
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0BcwQxtdYWHpWOP6G50lTTOOYvU.roa
Signing time: Sat 01 Jan 2022 03:54:09 +0000
ROA not before: Sat 01 Jan 2022 03:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50751
IP address blocks: 195.62.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117359225 (0x6fec279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 03:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d01730431b5d6161e958e3fa1b9d254d338e62f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:1b:f6:b4:b9:cb:9c:64:fc:46:cf:5b:4a:
18:63:5d:51:46:1f:c5:72:a6:5b:4c:19:e9:43:67:
0f:de:9c:76:b2:33:0c:c0:75:fb:a7:ae:68:1b:42:
a0:67:cd:3e:f5:c1:b0:fd:4d:c9:52:2d:8f:0c:91:
7d:a5:5b:d1:ad:44:21:69:a7:d6:ce:97:a5:a5:90:
12:a5:2a:87:d3:13:85:11:c1:1a:90:ef:00:72:83:
38:03:a3:cb:15:d0:ca:83:f1:f7:c6:f9:80:90:a4:
3d:cf:5a:8d:3f:99:fa:70:69:f8:a3:65:0a:91:cf:
07:23:2a:2f:74:a8:b2:98:b7:3f:b6:77:35:46:00:
b9:27:22:b8:a0:24:63:98:b1:56:6f:f8:3e:c5:b5:
76:13:ce:c9:97:0b:14:c3:1d:ad:fe:ed:6b:45:b4:
2a:27:a7:88:9b:1b:55:b9:69:98:c7:bd:cc:a1:a2:
82:50:99:00:be:d4:9e:d4:f9:84:9e:94:6c:35:a2:
4f:34:6c:50:52:2d:6b:1d:6f:62:78:4d:96:ee:62:
72:3d:59:22:df:d8:b1:35:a8:57:b8:cc:8a:9f:2e:
f1:ed:e4:8f:7b:33:65:4d:3b:c3:0f:3d:22:58:cc:
aa:27:43:55:d8:b9:60:48:bd:79:fd:07:91:e3:7e:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:30:43:1B:5D:61:61:E9:58:E3:FA:1B:9D:25:4D:33:8E:62:F5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0BcwQxtdYWHpWOP6G50lTTOOYvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:97:21:34:1f:30:42:e5:72:dc:7b:8e:89:77:d3:8e:89:22:
1f:0d:ca:5d:6f:b4:85:3d:9a:ea:67:d1:ef:7f:5a:5b:fa:0e:
62:53:33:24:fb:b1:4c:ad:c5:36:e5:0f:05:ce:ab:4a:49:52:
ad:2b:02:aa:87:f5:fa:c0:35:84:6b:de:e0:bd:24:da:ae:f5:
1f:5e:99:f4:16:65:6f:dc:f2:7b:83:66:3f:16:44:f9:da:96:
bc:58:c6:79:56:fa:ea:eb:e0:de:fc:03:46:b2:c8:c2:fb:9f:
69:57:05:77:f8:bc:8b:dd:4d:ac:2c:7d:8e:f0:a6:20:31:45:
09:5d:f0:f0:ac:65:d4:11:ce:21:41:cc:48:f3:ea:2c:41:89:
30:f6:27:9d:c9:cb:b5:21:44:9e:9a:11:28:ff:b6:b9:ae:ea:
d6:a9:8d:f2:46:42:a4:2d:61:36:18:94:5e:41:8c:44:ca:3c:
46:c3:c6:26:80:8c:aa:16:f4:2c:d9:04:b7:7e:ab:3a:36:1a:
2c:7d:c3:4a:15:08:5b:e9:b6:8a:c3:c4:2f:ff:6f:74:fc:b2:
83:5e:d9:a3:38:37:fb:2d:b3:84:44:c8:19:a1:9e:c6:2f:2a:
f4:26:5a:92:f0:6c:5f:a6:62:b3:78:1e:bd:d2:d3:55:f7:3d:
dd:92:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org