Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/kZOr8U3eZR9YIYZ-DYlv7LxScnU.roa
File: kZOr8U3eZR9YIYZ-DYlv7LxScnU.roa (raw, json)
Hash identifier: EIS37kDNCbjWmGtGCMPKRAx0ix4Ghvqmd6XeTu5wZZE=
Subject key identifier: 91:93:AB:F1:4D:DE:65:1F:58:21:86:7E:0D:89:6F:EC:BC:52:72:75
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 180B5A74
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/kZOr8U3eZR9YIYZ-DYlv7LxScnU.roa
Signing time: Sat 01 Jan 2022 04:00:36 +0000
ROA not before: Sat 01 Jan 2022 04:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202439
IP address blocks: 95.43.236.0/24 maxlen: 24
95.43.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403397236 (0x180b5a74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9193abf14dde651f5821867e0d896fecbc527275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:70:9d:ec:dc:bf:76:34:74:94:cf:85:1d:
1f:83:9c:11:14:a5:41:ac:8d:d3:73:58:5a:0c:42:
80:1f:ee:3c:41:d8:77:d2:a8:d1:3f:5f:61:de:08:
5b:d3:37:a1:a3:f8:a2:0e:83:f3:98:46:bb:8d:2d:
c9:f5:38:b0:db:a3:bb:d8:49:91:c8:56:78:0c:01:
8c:84:f8:c0:be:79:0c:71:1e:39:7a:f7:fa:bc:43:
d5:6c:db:91:39:d6:b3:38:db:fe:d5:ff:fa:e4:ad:
eb:a4:ac:f7:44:5f:62:c2:61:de:43:5d:30:9b:58:
4c:d1:77:42:31:e4:93:6c:4b:c4:7c:4e:a8:c9:69:
b6:32:13:c8:ff:ea:63:15:8f:18:e4:2b:81:54:7a:
4d:0e:9e:24:93:e3:d4:fc:ac:02:de:16:29:e5:48:
98:2f:d9:72:45:ac:11:22:ce:36:db:bd:b0:d3:27:
29:6f:5a:3a:46:94:81:d2:5e:56:60:7b:dc:dd:0a:
65:41:6a:85:6a:4d:63:e4:0c:c1:55:75:5f:bd:7c:
95:8c:8a:9a:bc:59:4e:ae:9a:2e:ce:ea:ef:c5:7f:
f7:6d:75:f4:79:25:6c:f8:22:ea:35:70:23:21:99:
f7:66:b1:45:00:84:a0:e8:95:f3:b6:a6:8e:75:55:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:AB:F1:4D:DE:65:1F:58:21:86:7E:0D:89:6F:EC:BC:52:72:75
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/kZOr8U3eZR9YIYZ-DYlv7LxScnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.236.0/24
95.43.239.0/24
Signature Algorithm: sha256WithRSAEncryption
63:19:4a:00:c5:84:23:5e:66:a2:a4:9a:82:0f:11:6e:c6:8d:
e9:78:0f:30:7b:c5:97:ad:07:65:6b:78:56:74:c4:3b:e2:14:
9c:4d:05:84:af:81:4a:d0:95:33:a0:2c:2e:a6:11:51:b6:82:
48:ff:76:1a:f7:b7:a1:e5:28:f6:24:fa:8a:d9:5c:40:82:c5:
a0:3a:9b:c8:b8:da:d4:f8:c8:7f:b2:d8:ad:e8:46:bb:74:09:
63:ad:31:3d:09:8d:c1:ce:2c:5a:89:90:7d:dd:13:4a:b0:b3:
30:c7:9f:cf:dd:a7:f6:c1:dd:0d:b1:95:21:6a:00:62:a2:f0:
5a:44:26:38:69:7c:8a:f5:2a:3c:a4:28:7a:08:a5:27:25:f7:
c9:46:d5:a1:25:82:e5:74:91:c3:75:7f:a5:80:47:e4:3b:72:
2c:b7:b8:90:20:28:cc:a5:a6:cc:32:1d:20:87:d3:5d:12:5c:
8a:f7:8a:d4:ba:98:87:08:6c:03:20:6c:9f:ce:04:e6:67:2c:
a1:1f:8e:9b:fc:a8:de:a7:6b:3f:7e:30:a6:5a:d3:6e:13:a1:
5c:cf:5c:f1:f0:dc:b0:84:d0:86:c1:c9:e3:c9:62:fa:db:6c:
0d:1d:7f:25:b7:56:27:6a:7e:3b:6d:5b:cc:1d:90:05:9e:be:
18:8b:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org