Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/kMxrOonHjSufZ08l_cL0fU54_lw.roa
File: kMxrOonHjSufZ08l_cL0fU54_lw.roa (raw, json)
Hash identifier: yEWRc3IBixgocrW6CIDyj+WpYnqblUoP/AvzV7puHUQ=
Subject key identifier: 90:CC:6B:3A:89:C7:8D:2B:9F:67:4F:25:FD:C2:F4:7D:4E:78:FE:5C
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 018570CC0332DE0DC013BA4FFE326FDBE061
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/kMxrOonHjSufZ08l_cL0fU54_lw.roa
Signing time: Mon 02 Jan 2023 04:44:56 +0000
ROA not before: Mon 02 Jan 2023 04:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59482
IP address blocks: 95.215.228.0/24 maxlen: 24
95.215.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:03:32:de:0d:c0:13:ba:4f:fe:32:6f:db:e0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Jan 2 04:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90cc6b3a89c78d2b9f674f25fdc2f47d4e78fe5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:7a:55:e4:25:b5:37:0a:89:df:d1:ad:1a:
80:25:90:8a:60:78:4d:34:c9:74:46:66:cd:7d:49:
ce:d5:e3:66:8d:79:48:b1:bb:33:c8:c6:17:a2:ae:
e6:fc:ae:1d:56:de:1b:b1:37:43:05:dc:76:10:6a:
ca:5e:c2:f8:cd:7f:f6:05:ef:9d:c2:b7:46:e7:85:
9f:31:fd:16:d4:39:fd:e8:b7:a3:21:93:59:38:68:
11:de:dc:29:2f:23:19:f3:00:ce:e1:df:a4:ac:3d:
34:61:7d:05:4d:56:15:7b:84:e5:6f:b4:d8:13:86:
09:95:5c:d5:e8:f8:21:25:5c:93:06:3d:1f:38:eb:
6c:6a:64:2d:49:14:7f:18:9f:52:5b:dc:8c:3f:35:
82:8e:48:c4:c2:ee:d7:19:ab:0d:fe:c7:d3:82:63:
2a:58:21:cb:93:26:5c:4f:3e:aa:6a:e3:5c:61:6f:
06:0f:ef:fd:80:2d:74:49:4a:b5:f8:50:8b:8f:57:
80:bc:b3:82:42:ea:1e:07:dd:4f:35:a2:c6:cd:de:
9d:b4:c2:6b:24:dc:e1:77:4e:4f:63:c7:56:10:87:
22:c9:72:39:bc:01:7f:33:fe:f7:c6:f5:17:37:9e:
02:e3:dd:0e:31:65:1d:a8:03:75:1a:63:e9:26:78:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:6B:3A:89:C7:8D:2B:9F:67:4F:25:FD:C2:F4:7D:4E:78:FE:5C
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/kMxrOonHjSufZ08l_cL0fU54_lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.228.0/23
Signature Algorithm: sha256WithRSAEncryption
34:80:3d:57:5f:31:5a:92:5c:18:08:00:71:96:a4:55:4b:91:
30:15:8a:c5:86:c1:7f:3d:ef:48:b1:a4:0d:27:5d:15:e2:82:
40:78:b0:05:c9:32:75:cd:17:5a:c5:99:d3:b2:36:4b:ab:63:
3c:a4:3e:4e:20:25:ed:9d:06:75:04:01:2c:b9:d7:81:6a:2d:
7b:79:24:a3:d3:9d:b7:d0:b5:88:8c:bf:42:15:18:bb:23:05:
a5:99:5c:68:15:12:70:da:e5:e8:63:9e:be:1b:71:0b:af:3c:
10:f1:77:36:ef:a3:78:75:97:8c:28:e0:00:6a:de:6d:05:8c:
62:40:d2:fc:92:99:8e:8e:a0:df:02:a9:6d:01:fd:5c:01:bc:
c6:d2:dd:17:b6:da:d2:f5:c2:43:bd:6e:82:98:d5:83:2f:11:
20:52:47:98:6b:da:66:17:35:48:c1:4e:9b:7a:2e:c4:c8:74:
7a:7d:45:ce:40:ee:e9:d4:2c:a8:f1:60:e1:f8:20:b7:cc:5c:
d2:ac:a3:ab:10:4f:a0:9d:85:64:64:09:83:04:d9:aa:d8:6c:
74:f6:78:05:26:8c:aa:2e:63:5e:76:37:21:dd:5a:f4:c1:d3:
af:bf:48:78:a9:aa:73:51:0d:4c:2a:5a:bf:b6:cf:29:5b:d1:
66:9a:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:03:14 2025 by rpki-client