Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/95cjXMLa60JhwNXhRZYM74oYjxs.roa
File: 95cjXMLa60JhwNXhRZYM74oYjxs.roa (raw, json)
Hash identifier: iodToVUdwItKbEINS6mAt4E0/2ACBHi4HXyOn7tmQj0=
Subject key identifier: F7:97:23:5C:C2:DA:EB:42:61:C0:D5:E1:45:96:0C:EF:8A:18:8F:1B
Certificate issuer: /CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Certificate serial: 01E453E2
Authority key identifier: 2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/95cjXMLa60JhwNXhRZYM74oYjxs.roa
Signing time: Sat 01 Jan 2022 09:02:47 +0000
ROA not before: Sat 01 Jan 2022 09:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34762
IP address blocks: 185.190.86.0/23 maxlen: 24
2a0a:640::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31740898 (0x1e453e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Validity
Not Before: Jan 1 09:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f797235cc2daeb4261c0d5e145960cef8a188f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:23:c0:cc:5b:61:fd:f2:6d:8e:ba:f5:1e:
5e:6a:f6:9a:b0:41:6f:60:18:8d:a6:10:77:e9:7b:
53:fd:32:88:17:dd:0c:d0:e5:06:0d:e5:52:35:09:
e1:12:d4:6e:d1:5f:c3:6e:df:45:b6:ee:01:43:5a:
48:1b:00:42:b5:4d:28:c9:f5:d4:da:2d:76:da:47:
7f:17:d4:2d:c8:0c:60:8e:fe:0b:05:77:b5:ea:ae:
82:91:89:de:3b:42:dc:1d:fc:3e:b2:25:a9:67:42:
6c:be:f1:2e:65:47:32:42:1a:ce:da:9f:99:f1:2f:
d1:79:4c:52:b2:31:ac:af:26:60:c2:ce:92:be:d0:
43:6f:74:40:d8:5a:1a:39:7b:c9:ea:5b:b0:a5:c3:
29:51:61:16:83:c9:e4:47:8f:10:78:af:c0:9b:b1:
2d:51:82:14:8d:e3:09:40:62:96:48:4b:57:b0:01:
ed:71:7b:40:35:aa:20:cb:7d:9c:66:dd:ae:f5:33:
4d:55:be:00:24:b7:02:fd:00:3c:3b:10:0e:c7:92:
43:cd:77:00:96:71:07:b1:d1:3a:39:62:e8:b6:f9:
2c:ff:3b:e3:a6:29:17:de:d8:a3:69:a2:74:d0:00:
93:aa:1c:18:eb:a7:6b:e8:c5:79:a9:ea:e0:cf:61:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:97:23:5C:C2:DA:EB:42:61:C0:D5:E1:45:96:0C:EF:8A:18:8F:1B
X509v3 Authority Key Identifier:
keyid:2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/95cjXMLa60JhwNXhRZYM74oYjxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.86.0/23
IPv6:
2a0a:640::/32
Signature Algorithm: sha256WithRSAEncryption
cc:05:95:4f:11:96:be:25:5c:f7:1b:d6:2b:95:7f:52:f9:2c:
b7:ae:4a:09:22:af:1b:ec:f3:db:9a:6c:45:da:72:1d:9a:28:
92:5a:95:23:4b:5b:11:18:13:16:78:16:23:6b:af:37:89:69:
f1:c1:a8:80:47:c9:2b:af:13:11:0c:ca:44:a4:55:45:c6:b9:
a5:d1:f1:5f:24:dd:a7:20:52:5d:63:a7:bb:b3:2c:88:b7:23:
aa:78:7e:0b:e7:33:12:fc:76:c6:bb:68:ad:f5:83:10:48:b1:
6c:66:7d:0e:4e:0a:c2:0b:c8:3d:93:a2:2b:7d:c5:78:10:6c:
0e:0a:99:17:90:ec:96:d2:68:c1:54:3f:74:b2:93:26:b3:32:
6c:5b:f1:00:89:6f:2c:8c:7f:4c:1d:b3:78:22:40:85:45:4e:
2e:ec:0e:c8:ff:68:14:14:32:4c:47:ac:b5:a1:bf:0c:11:1b:
60:f9:aa:13:bd:c2:08:2a:12:9a:e8:ae:54:e4:05:a7:c5:5c:
8b:86:9b:a5:6e:02:b6:53:ef:35:e5:9e:50:1f:1a:1c:62:15:
a7:d6:63:35:e5:56:4b:7a:de:3e:c0:41:a1:15:00:57:fd:de:
ef:d8:88:23:23:b0:a2:08:a1:d1:fa:aa:1f:81:a6:b6:57:37:
64:ba:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:51 2024 by rpki-client on console-fra.rpki-client.org