Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ld6nO3dAX9hRxSdnFMsz2GS7zyA.roa
File: Ld6nO3dAX9hRxSdnFMsz2GS7zyA.roa (raw, json)
Hash identifier: z8epsWGfvC/EK4rgHuh2gIuwA4yO2e3BXlMcPeA90TE=
Subject key identifier: 2D:DE:A7:3B:77:40:5F:D8:51:C5:27:67:14:CB:33:D8:64:BB:CF:20
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4616E692
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ld6nO3dAX9hRxSdnFMsz2GS7zyA.roa
Signing time: Wed 18 May 2022 18:27:17 +0000
ROA not before: Wed 18 May 2022 18:27:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24954
IP address blocks: 195.25.80.0/24 maxlen: 24
195.25.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175905938 (0x4616e692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: May 18 18:27:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ddea73b77405fd851c5276714cb33d864bbcf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:d9:95:9e:88:65:b2:42:6c:5d:5e:43:57:
5b:58:88:e2:b6:ba:2d:2a:17:92:79:84:4a:88:99:
84:98:cc:9c:df:dc:8a:bc:c0:de:61:d4:92:f8:bd:
c5:9e:d3:ae:c8:8f:d6:8e:f0:98:b5:82:9b:3a:aa:
c0:b3:0b:8d:eb:8e:ff:de:b4:d4:e1:76:89:e0:e1:
18:34:d9:11:cb:4a:ce:1b:63:4f:6c:a9:77:e6:cd:
52:78:22:d1:10:f3:b5:22:15:a3:b6:2e:cf:ce:10:
d5:1e:c2:c3:df:07:eb:8b:81:4a:24:b3:3c:d2:80:
bc:51:a4:0e:76:eb:13:1d:8a:4b:06:ee:43:45:34:
07:e4:4d:9b:83:d0:4b:8f:83:6c:93:32:5c:76:ff:
e6:cb:35:9c:66:de:16:62:1f:6b:45:95:f0:a9:31:
c1:62:5f:16:f1:fc:84:d9:35:c6:b6:de:e6:c1:c0:
f5:5a:e4:3a:bf:18:b7:9a:db:56:c2:ee:d0:bc:5a:
f0:0a:07:5a:2c:10:d8:46:2d:b8:b4:5f:1d:1b:c9:
f1:43:04:34:3a:37:75:d8:c9:56:88:9b:7b:05:ec:
fc:3f:92:ac:90:e1:da:0b:4b:71:c1:c0:43:0d:b2:
9f:44:2d:38:5b:67:98:55:ce:9b:51:c5:25:10:d6:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:A7:3B:77:40:5F:D8:51:C5:27:67:14:CB:33:D8:64:BB:CF:20
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ld6nO3dAX9hRxSdnFMsz2GS7zyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.25.79.0-195.25.80.255
Signature Algorithm: sha256WithRSAEncryption
56:32:e0:c7:92:73:d4:10:86:f6:e6:82:63:61:b3:01:52:a1:
0a:fb:33:14:7b:31:99:36:15:2a:63:e4:6c:81:15:c8:78:f3:
96:c8:60:54:65:9d:8f:71:82:27:ec:52:97:d5:92:ee:c9:ae:
eb:20:1c:60:9b:86:fe:3a:7f:2c:74:7c:1c:2e:42:aa:14:7e:
9e:a7:2e:bf:c6:ff:ab:75:22:56:44:10:47:22:2b:f4:d1:d8:
da:d4:79:3e:56:32:0a:c4:8b:76:01:28:04:44:f9:12:df:21:
7c:de:9c:ba:95:76:2b:3c:2e:73:6f:9c:30:0a:6a:71:4f:04:
85:98:a7:da:ad:c1:f9:2b:41:4b:74:86:f3:d0:10:1d:37:6c:
a4:07:09:92:1b:e6:d0:d2:50:db:8d:01:ca:55:67:5e:c7:9d:
ff:f4:c6:57:51:db:e1:22:ec:03:d6:03:40:5b:b6:ed:c7:40:
87:99:86:55:e7:12:85:4d:12:48:d7:56:ca:e1:65:c9:ca:09:
ca:49:75:10:56:51:dc:34:b4:ec:be:e9:df:c1:ce:1c:08:13:
6f:0b:ee:c8:43:e2:01:73:bf:4e:1a:df:ff:a4:51:a4:3e:a1:
83:02:c3:30:83:1b:af:ea:f0:fd:d1:9d:ba:85:3b:83:a7:61:
00:b1:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org