Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/3obwzFKlvuziMlN7QDBxxky7qdk.roa
File: 3obwzFKlvuziMlN7QDBxxky7qdk.roa (raw, json)
Hash identifier: gYsPRBYmkrkXHWvtya52C2QNsKaBWSKUgNlmDF2/C0k=
Subject key identifier: DE:86:F0:CC:52:A5:BE:EC:E2:32:53:7B:40:30:71:C6:4C:BB:A9:D9
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 0559A993
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/3obwzFKlvuziMlN7QDBxxky7qdk.roa
Signing time: Sat 01 Jan 2022 09:59:49 +0000
ROA not before: Sat 01 Jan 2022 09:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28953
IP address blocks: 195.39.236.0/24 maxlen: 24
195.39.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89762195 (0x559a993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Jan 1 09:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de86f0cc52a5beece232537b403071c64cbba9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:95:37:03:22:7c:02:8e:fa:f0:e8:45:1d:
9a:f3:76:55:cd:e8:2f:64:9a:17:b3:18:3c:75:a1:
77:ae:94:d3:22:1e:86:c2:67:f3:9d:27:34:0e:c9:
d3:96:3b:ef:cd:26:36:3d:0a:73:4b:be:df:4e:ab:
da:7e:f4:d8:21:b6:80:87:2c:cb:21:0a:31:ca:54:
de:b2:c6:bf:47:2f:ec:af:4f:43:a9:21:82:1a:79:
df:cd:29:3e:39:bb:d5:3f:f7:c5:2a:8e:5d:c7:ab:
47:7f:d0:72:d4:7b:75:ed:f4:5d:c0:16:bf:6f:f8:
a8:5c:e0:50:4e:8f:d0:50:50:a3:b4:88:95:4b:d8:
31:43:91:e7:b5:c6:c0:41:70:11:1e:9d:dc:73:91:
70:62:fe:cb:d7:2e:1c:2d:08:f7:fe:16:19:22:88:
00:c2:53:ab:5c:17:dd:9f:f1:c6:32:e4:7b:90:be:
f4:b2:de:4e:a7:00:53:ff:fb:b6:97:fb:a9:56:d3:
e0:6e:ac:fd:72:f5:c1:f9:6c:4b:5a:ac:5b:5f:58:
39:9e:9a:a1:76:95:38:ac:07:c8:8c:57:d6:8d:01:
a3:dc:26:51:fe:63:45:49:0f:d6:92:d2:05:45:cf:
cd:bd:00:aa:03:9a:4f:10:03:a0:f8:1f:bf:21:de:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:86:F0:CC:52:A5:BE:EC:E2:32:53:7B:40:30:71:C6:4C:BB:A9:D9
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/3obwzFKlvuziMlN7QDBxxky7qdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.236.0/23
Signature Algorithm: sha256WithRSAEncryption
05:db:2e:3b:c4:b0:e9:bd:32:af:d6:ec:b3:ed:59:89:68:3d:
6d:cd:ac:c3:85:71:3f:33:e1:c0:ea:5a:2c:2e:15:91:11:5f:
fc:db:ab:2e:ad:5a:06:fd:62:2e:37:cc:16:6f:17:64:df:66:
fc:f3:b0:03:f4:81:25:6a:fe:e8:5f:61:94:d9:de:87:c7:c5:
e8:e4:35:8f:7f:be:32:51:6c:fa:4b:ed:35:6f:2d:a8:80:6e:
6b:b2:7c:8d:78:c8:7f:9a:de:64:96:2d:cf:21:ed:02:93:72:
c5:52:16:39:b5:43:ff:53:87:f8:5e:97:2c:04:da:cf:ad:4c:
a1:5b:fd:1d:5f:c4:b9:b9:1a:58:49:a1:fc:83:a8:ae:53:6a:
3e:8c:43:57:c3:a5:18:9e:a4:d9:f4:08:1c:0a:e6:d6:e1:9c:
95:66:15:17:30:28:64:fd:d7:93:7e:fd:d8:7b:2a:8b:0b:91:
ea:0d:8b:30:94:92:2f:11:7a:1b:cd:f9:23:1c:d2:ca:66:89:
2a:bc:a1:88:08:ee:d6:56:cb:16:61:dc:76:5b:75:e8:f6:aa:
9e:f8:ca:70:8b:a1:3e:75:16:71:5f:70:20:89:6d:b8:b7:ab:
c5:be:cf:67:37:4c:04:5c:4d:74:a1:cc:8a:62:df:63:94:18:
16:7e:b0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:01 2024 by rpki-client on console-ams.rpki-client.org