Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/1ryczSW_hRRZ0x_NJCiFZQK8wvU.roa
File: 1ryczSW_hRRZ0x_NJCiFZQK8wvU.roa (raw, json)
Hash identifier: 5UPITgXkspZ3WVR2wlP9A1cgYwy2nkLzQPWXQfoAXG0=
Subject key identifier: D6:BC:9C:CD:25:BF:85:14:59:D3:1F:CD:24:28:85:65:02:BC:C2:F5
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 03767FD5
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/1ryczSW_hRRZ0x_NJCiFZQK8wvU.roa
Signing time: Sat 01 Jan 2022 09:02:21 +0000
ROA not before: Sat 01 Jan 2022 09:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47268
IP address blocks: 195.216.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58097621 (0x3767fd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jan 1 09:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6bc9ccd25bf851459d31fcd2428856502bcc2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:05:02:24:c3:4e:84:97:9b:82:b9:b7:e5:
40:38:7f:c6:49:f5:58:2e:fc:ac:24:2a:57:33:58:
32:7f:42:c9:22:b7:59:94:3e:36:5e:1e:2d:7a:5a:
69:82:32:b1:45:fd:0e:d3:68:29:52:99:0d:9f:fa:
cf:83:b3:4f:16:64:7c:1f:3a:d1:18:ea:20:39:b3:
f9:23:d7:6b:0b:82:7a:fe:89:44:16:99:bb:06:be:
98:7c:23:35:b6:5c:fc:43:09:9a:76:af:a3:85:9d:
64:7b:5d:04:03:c4:ce:15:81:82:59:40:b6:8b:75:
72:e3:33:33:a2:c8:ea:9c:7e:0c:2b:9e:bf:fa:35:
4a:3e:7a:46:56:4b:de:ac:f9:9d:3f:ea:25:40:05:
51:bb:2a:8e:1e:33:93:d6:41:f3:04:aa:bc:e0:b8:
29:d4:f1:8b:2e:c2:7e:24:12:84:9d:23:85:d2:cb:
25:a3:19:f3:20:0d:79:90:24:36:b4:09:5b:c8:f0:
13:ce:26:29:73:be:64:6c:d0:ab:1d:3d:32:d9:5a:
65:3c:b8:94:3c:62:af:30:87:96:8b:03:a1:fd:21:
48:07:79:d1:b3:ec:f7:99:da:2a:98:2e:b7:9c:c7:
6e:db:6a:08:1f:a5:4b:ce:aa:ce:21:40:ef:72:02:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:9C:CD:25:BF:85:14:59:D3:1F:CD:24:28:85:65:02:BC:C2:F5
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/1ryczSW_hRRZ0x_NJCiFZQK8wvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.249.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:65:4d:60:8f:28:e0:c0:92:d9:8b:24:f7:ce:a1:13:49:9e:
b8:d5:91:49:75:f0:93:ae:8d:d2:38:81:54:6c:b1:87:5f:56:
76:ba:65:5d:98:1d:3c:a4:62:73:58:5e:c7:e7:a6:a4:91:6b:
a5:7f:8c:6e:20:00:25:3e:a0:d4:e4:93:ff:2d:65:10:59:ef:
de:f8:f8:a2:7c:66:13:c9:d3:81:57:0b:30:99:89:9a:65:77:
9d:b2:f6:b9:5c:6a:1f:06:68:94:1f:f7:46:9d:3c:88:d8:b2:
a0:64:c7:02:0d:c7:61:01:18:29:42:1d:97:ff:31:c1:7d:68:
62:df:bb:ed:fd:d6:6e:e5:1f:20:3c:52:9e:bf:7e:7a:38:8c:
00:98:bf:5c:ed:97:dc:0b:6a:76:33:0a:75:57:e4:1a:94:84:
5d:7a:4b:c0:05:87:8e:64:8e:07:fa:bb:20:9a:b7:bb:a4:57:
56:34:74:df:e6:76:60:5a:bd:0c:ba:d2:d2:cb:c0:6d:c6:df:
5b:46:e9:c6:db:b7:8a:e7:00:65:5c:48:06:3b:7a:2e:80:e9:
78:58:c9:11:96:04:a6:08:de:e1:20:2a:15:e5:3c:7a:cc:a0:
13:6a:ac:be:f8:94:95:91:0f:43:ac:b1:25:94:06:be:66:dd:
54:20:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:05 2024 by rpki-client on console-ams.rpki-client.org