Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/P_lJTIqMZDnhdNHLO0palD8ppfw.roa
File: P_lJTIqMZDnhdNHLO0palD8ppfw.roa (raw, json)
Hash identifier: GddrD+LKHR9GK1iwyBTsSH37OFZVV9LjmflYlxBE3Hc=
Subject key identifier: 3F:F9:49:4C:8A:8C:64:39:E1:74:D1:CB:3B:4A:5A:94:3F:29:A5:FC
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0369B385
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/P_lJTIqMZDnhdNHLO0palD8ppfw.roa
Signing time: Sat 01 Jan 2022 11:54:07 +0000
ROA not before: Sat 01 Jan 2022 11:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205715
IP address blocks: 188.95.148.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57258885 (0x369b385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 1 11:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ff9494c8a8c6439e174d1cb3b4a5a943f29a5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:a3:b1:72:94:ac:f7:7e:04:67:52:4d:db:
4b:f0:f6:ab:33:66:b4:19:d1:78:5e:b8:64:15:48:
99:57:89:c8:ce:4d:b2:31:d6:e5:f1:45:b0:05:d4:
d6:d8:b1:92:93:98:e8:8e:54:8a:be:ec:31:70:eb:
58:90:cb:d2:99:38:31:ee:76:45:23:c5:f1:79:c6:
a4:5a:13:82:40:80:0a:0d:35:5d:a7:a9:76:0e:67:
e3:a5:da:24:52:ac:71:a9:ad:68:c3:e5:10:dc:61:
25:13:a2:53:23:8b:4b:20:3d:0d:de:44:13:81:ee:
a3:d6:55:04:ef:d3:0e:7c:60:cc:54:f9:51:c1:10:
9f:58:ff:d1:aa:95:00:6a:ee:94:35:0e:91:6e:ea:
2d:3b:13:3d:87:13:b0:37:e3:02:73:af:6f:51:ce:
29:36:3c:f6:58:f1:85:af:42:46:1a:48:87:c7:1a:
a0:cb:5b:81:3b:c4:01:27:66:e9:89:9a:ba:77:34:
0f:95:5a:be:8b:79:80:64:eb:ea:3c:7c:de:4f:f0:
4d:e5:5f:54:4f:df:cd:00:ec:9c:fc:81:c2:47:17:
80:d4:48:78:0c:9b:5f:1e:ef:c3:2e:2c:0d:93:f7:
58:b6:2f:63:97:31:d8:1d:88:01:9d:d3:f6:39:28:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:49:4C:8A:8C:64:39:E1:74:D1:CB:3B:4A:5A:94:3F:29:A5:FC
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/P_lJTIqMZDnhdNHLO0palD8ppfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:11:bc:19:64:ca:72:ac:8e:a4:07:63:aa:df:b1:48:d4:30:
4e:3f:f7:bd:7a:6c:17:6a:1d:1d:7f:3c:47:02:8e:40:43:76:
22:26:25:1f:d5:a5:ae:c5:7a:32:89:1c:78:e4:bf:a4:26:02:
7f:e0:c7:d4:b2:96:42:9e:e0:88:93:ae:37:10:76:84:61:9c:
1d:16:be:f9:4e:f7:36:fb:cb:1a:b1:db:12:19:cd:96:05:c6:
3c:e4:4c:75:67:70:70:ce:13:c3:ca:91:f7:20:68:4a:24:ae:
69:15:ea:57:15:52:37:ae:6d:07:2b:41:a9:9d:67:c7:dd:d6:
6c:d7:07:11:60:19:bd:ec:b8:d6:5b:28:32:77:b5:17:db:dd:
28:78:a5:cc:26:c1:97:9a:2d:ec:ee:ef:15:e4:6b:00:98:bf:
d5:30:39:ef:20:9a:5e:b3:59:6a:ad:55:a5:f5:66:29:2d:a5:
df:1f:35:7c:ad:81:57:50:c9:9c:27:04:df:a0:43:40:aa:41:
2c:8e:fc:f4:94:26:71:11:9a:ae:52:1d:64:69:e6:7f:28:38:
43:92:0e:2e:e1:f5:51:21:bc:39:8d:6c:84:25:3b:ea:72:68:
67:76:91:5d:12:18:0c:5e:f8:3e:0c:4f:76:17:3d:7d:0e:e8:
d6:c1:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org