Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/IyitxaZtbKuL8g5XmdXSy3xqF_0.roa
File: IyitxaZtbKuL8g5XmdXSy3xqF_0.roa (raw, json)
Hash identifier: TewaKZQshmK3RKzsrC5Um4ZzlvHjn/Byr1NNPkcqi+E=
Subject key identifier: 23:28:AD:C5:A6:6D:6C:AB:8B:F2:0E:57:99:D5:D2:CB:7C:6A:17:FD
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 8CA766
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/IyitxaZtbKuL8g5XmdXSy3xqF_0.roa
Signing time: Tue 04 Jan 2022 23:24:03 +0000
ROA not before: Tue 04 Jan 2022 23:24:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42689
IP address blocks: 195.96.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9217894 (0x8ca766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jan 4 23:24:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2328adc5a66d6cab8bf20e5799d5d2cb7c6a17fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:2d:d6:d2:2d:3b:42:d1:e5:8d:8e:f4:5f:
75:b9:b2:7c:8e:36:dd:f7:1a:88:14:7b:db:19:e3:
50:32:b3:e4:a4:b4:4b:ed:f6:f0:cb:f3:f1:b2:ad:
4f:9d:49:00:3f:20:46:f7:c2:5e:e2:36:c6:6e:40:
62:28:15:fb:77:b9:1a:15:9d:0d:f2:88:c7:dd:70:
68:a5:aa:e6:78:45:e7:d3:25:76:7e:a8:09:0f:50:
dd:b0:ce:4b:31:97:08:3e:3b:98:99:a3:65:2d:b5:
ec:27:41:3a:9a:d3:f9:97:ce:2b:09:65:e5:0b:34:
9c:ec:6b:08:e3:d0:d9:43:29:90:b1:25:e7:20:03:
cc:e9:92:03:d4:4a:65:2a:2a:8b:4e:ed:ae:0f:af:
bf:de:dd:30:e7:99:cb:c0:21:79:50:fb:d4:ea:14:
34:be:b1:92:c7:32:11:40:f9:9e:a1:e9:b1:85:6d:
1f:0d:34:45:0d:98:8c:1a:fc:a0:e8:9b:e9:41:36:
3c:71:54:9f:04:17:06:e9:2e:c6:77:3c:49:74:48:
85:ca:f5:1e:13:b3:91:86:0f:13:e2:fb:fd:22:80:
40:46:d7:dc:f5:85:2c:58:54:72:2f:df:96:8c:44:
56:49:a8:54:e0:97:ac:49:46:6b:74:b7:68:7d:72:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:AD:C5:A6:6D:6C:AB:8B:F2:0E:57:99:D5:D2:CB:7C:6A:17:FD
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/IyitxaZtbKuL8g5XmdXSy3xqF_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:03:51:de:2f:05:81:1b:f8:99:67:a1:0e:7e:ce:ba:ad:2c:
22:94:eb:83:63:bc:08:b6:59:34:83:59:ad:34:4c:e3:9b:02:
ae:ef:c1:27:e2:e0:6e:f8:78:bc:b7:35:29:45:40:89:9c:00:
a0:c6:f9:ba:63:6d:14:c4:d8:0a:4f:e3:fc:dd:10:73:1d:1b:
b2:3e:a3:ef:d3:d0:09:3c:0e:0a:a3:10:1f:95:86:a9:74:9a:
3e:13:d4:63:c7:ae:65:e1:fb:9a:4c:ca:7d:60:da:bd:57:ac:
53:bc:0a:9d:b3:d3:ee:94:84:77:37:5e:37:6d:86:47:de:a4:
ff:b3:e3:03:cc:94:28:33:0a:e8:18:48:ef:61:ce:78:cb:fa:
84:4d:e5:ca:74:76:19:94:7e:3b:b3:4f:3f:95:86:e3:a6:82:
e7:61:7f:3b:ab:a0:c9:6a:b9:4d:bb:6d:a3:26:8f:be:52:b1:
30:95:2c:e1:94:8a:b9:f6:93:48:be:92:d8:59:12:9e:74:e9:
d9:85:fa:e9:b3:4e:4c:00:60:f0:63:09:2f:4f:d8:4e:87:30:
b9:85:66:c2:f4:0f:ee:b2:b2:33:12:2c:d7:68:fc:4f:1e:c9:
98:15:17:23:da:2c:2f:45:15:bc:cf:68:aa:e2:f0:a3:91:ad:
49:21:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:00 2024 by rpki-client on console-ams.rpki-client.org