Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/mxUZ64m89QkYoFVHe6nUAeiniAo.roa
File: mxUZ64m89QkYoFVHe6nUAeiniAo.roa (raw, json)
Hash identifier: aChLCeuIY2j9Isfv6JwR1VMY0Z8lXH8yvBEmBWbl+q8=
Subject key identifier: 9B:15:19:EB:89:BC:F5:09:18:A0:55:47:7B:A9:D4:01:E8:A7:88:0A
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 097B1F69
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/mxUZ64m89QkYoFVHe6nUAeiniAo.roa
Signing time: Sat 01 Jan 2022 15:01:53 +0000
ROA not before: Sat 01 Jan 2022 15:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35258
IP address blocks: 95.214.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159063913 (0x97b1f69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Jan 1 15:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b1519eb89bcf50918a055477ba9d401e8a7880a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:7b:b2:cd:b7:0d:bb:25:82:1d:d5:69:0b:
6d:93:61:a6:96:80:33:7c:60:34:2c:7d:06:c5:e4:
4a:b9:ac:54:cb:60:0b:4c:7a:8a:71:80:99:1d:b8:
27:28:d6:0e:05:8f:2c:32:a6:1e:7c:c8:aa:1a:62:
90:dd:41:08:d0:95:5f:5a:df:e2:b2:56:4e:92:d4:
a5:c3:a1:dd:a5:e8:8e:8f:eb:94:f7:f8:bc:8d:a4:
2c:c9:07:97:d3:20:25:3a:95:0b:2c:99:96:5e:93:
66:10:91:06:47:d3:e5:48:da:b9:9d:37:e0:93:f4:
17:14:e4:47:89:19:f9:8e:22:cb:22:bb:f2:05:d7:
ef:57:b4:24:33:e5:a7:3d:17:22:df:5f:04:b1:59:
cb:cf:3f:ef:7d:31:d4:c8:67:87:22:f2:a2:dc:46:
e8:b4:4e:8f:14:48:3c:43:6b:6f:12:00:bf:1c:f2:
3b:c0:92:fd:84:82:72:83:b0:99:c9:af:7f:b2:8e:
f7:76:42:a5:03:e9:1e:fe:61:62:b2:39:da:df:dc:
60:b8:cc:23:8e:e5:05:88:0a:0f:30:a5:85:1c:d2:
7c:b1:6e:60:cc:08:b5:b1:07:0a:71:42:9b:e9:20:
72:80:35:ef:ff:c3:81:ac:9b:0f:9a:f3:d4:92:c3:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:19:EB:89:BC:F5:09:18:A0:55:47:7B:A9:D4:01:E8:A7:88:0A
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/mxUZ64m89QkYoFVHe6nUAeiniAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.220.0/22
Signature Algorithm: sha256WithRSAEncryption
68:72:34:ec:a6:6c:e8:fa:c8:7a:9c:53:1e:2f:2a:df:bf:c5:
5a:56:ba:2a:23:93:d6:4e:45:5a:8c:b6:64:c0:0e:9e:79:8f:
d6:df:5e:24:d3:17:8e:af:5b:1d:e6:63:39:83:c8:71:c4:7a:
97:4c:25:cc:c4:90:fa:b0:bc:8c:df:99:98:8e:7b:70:c6:85:
76:14:b7:b5:09:39:fe:0a:3d:78:f4:32:3c:2a:fe:0a:c6:26:
0b:27:84:3c:ba:c8:f2:fd:db:37:92:cb:da:5c:f0:3b:78:5b:
d6:2d:4d:81:6f:7c:82:e1:f4:14:b7:5c:1b:3e:0a:1c:a8:7c:
98:26:9a:ab:3f:cd:b4:66:17:65:28:21:9b:fb:75:dd:fb:a4:
67:7f:ab:9e:bc:f5:be:89:20:f9:40:22:9d:0f:f3:84:89:d4:
68:61:02:b0:50:a3:1f:d7:b5:ee:d4:61:75:cc:b0:1f:18:14:
b5:bb:d2:10:52:f1:ce:7b:27:d1:93:ae:7c:35:92:4f:3a:8f:
54:b9:2d:a7:08:36:af:6d:89:50:f6:29:13:36:1a:ba:1d:e5:
f5:42:85:b8:cf:46:3a:92:f1:39:9e:0d:47:48:39:1e:94:32:
2c:40:e5:dd:5f:78:5a:8c:cb:ce:6c:fc:7a:12:10:08:b9:ca:
3d:e0:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:18 2024 by rpki-client on console-ams.rpki-client.org