Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6mE6DIWuzThpc4o_BrsN9qNvkRs.roa
File: 6mE6DIWuzThpc4o_BrsN9qNvkRs.roa (raw, json)
Hash identifier: buJuIZJ06hJw0sX5mh0ndQWWCRV000f+NF9uPHISfAE=
Subject key identifier: EA:61:3A:0C:85:AE:CD:38:69:73:8A:3F:06:BB:0D:F6:A3:6F:91:1B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 18121984
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6mE6DIWuzThpc4o_BrsN9qNvkRs.roa
Signing time: Sat 01 Jan 2022 04:00:40 +0000
ROA not before: Sat 01 Jan 2022 04:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206523
IP address blocks: 95.43.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403839364 (0x18121984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea613a0c85aecd3869738a3f06bb0df6a36f911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:72:17:97:b5:a9:5c:61:c6:db:ea:7c:15:
00:65:94:2a:a0:13:14:91:c9:4d:9e:d7:8f:4f:df:
b9:49:06:7d:32:72:6f:ab:e6:36:86:25:9c:fe:ba:
28:b0:71:4a:e5:93:ea:ff:36:1c:8f:85:23:c9:0d:
ca:92:55:7e:5d:a1:24:c9:cb:75:68:ea:f5:81:ed:
76:b2:b1:c0:35:03:9e:8f:a6:c5:ba:55:85:1d:ea:
f9:f4:20:7b:a8:0d:dc:47:12:58:20:76:e9:c7:2b:
e5:44:0e:84:52:75:d7:37:81:93:30:23:65:59:1a:
6e:74:53:7c:65:1f:15:99:3a:4c:d2:31:86:ed:96:
dd:97:ab:18:8b:4b:b9:11:61:72:18:07:f8:57:a0:
c9:5c:a0:c8:1e:b7:44:99:54:cd:2b:2a:ac:ad:28:
ea:34:9d:5a:bc:68:6d:33:ca:81:1b:2a:da:de:12:
45:e1:34:5b:e8:ca:82:f4:0b:81:bd:31:2b:a9:f8:
30:e0:bb:31:d1:55:36:a2:5d:81:4a:aa:80:c3:71:
fe:10:63:17:3b:d8:f1:d7:a8:84:17:aa:0e:e2:0c:
57:d0:fd:5d:61:35:13:17:60:38:76:93:d4:6c:21:
43:0d:ba:71:c3:04:d0:d2:cc:8c:2d:b6:9d:39:43:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:3A:0C:85:AE:CD:38:69:73:8A:3F:06:BB:0D:F6:A3:6F:91:1B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6mE6DIWuzThpc4o_BrsN9qNvkRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.216.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cf:bb:3d:f6:6c:c7:fd:de:bc:ba:5e:7c:92:e4:f5:f3:b4:
85:a6:bf:71:2e:64:45:b0:cc:a8:b0:54:58:6c:df:d3:31:50:
fb:50:79:fa:2a:04:9f:b7:f4:b1:4d:e2:f7:43:2f:c9:21:50:
2e:d0:94:d9:af:10:7c:4f:73:44:30:53:64:cf:46:b3:7d:86:
17:39:de:fc:bb:07:fe:20:b6:52:fc:8e:e2:b1:f9:9d:1a:d4:
fc:c9:bc:e1:52:6c:90:a6:f5:58:bb:a1:81:90:4a:f7:26:bf:
e9:2d:66:ee:46:2d:c3:dd:b7:23:7f:0d:bc:a9:43:72:cf:c2:
c3:06:aa:9d:fe:ca:ac:a6:be:82:76:68:4d:93:e0:c2:eb:34:
0a:bb:f9:2e:70:38:13:00:5d:19:33:4f:c9:85:51:9e:a6:0c:
bb:92:af:3e:4f:e6:34:6c:23:03:38:68:69:ff:0c:52:c1:62:
24:66:9b:ea:e9:70:2c:30:f5:9a:6f:cf:b9:d2:b6:be:21:23:
8b:72:18:e1:23:04:cf:33:61:fa:14:2b:4f:be:ee:d8:1d:5d:
e3:ff:f9:fe:d8:5d:d4:89:27:34:35:4b:6a:16:01:73:42:8a:
a0:30:a7:2c:24:8a:dd:ad:14:fa:6a:72:d2:ac:21:d4:e8:c0:
1b:af:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org