Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ig2M5ThoqXobk1NmnN3SHu6hrMY.roa
File: ig2M5ThoqXobk1NmnN3SHu6hrMY.roa (raw, json)
Hash identifier: 2GGFEL65W3oxp8PwZg+7Qk3etncCMfev9KTRPPkwGS4=
Subject key identifier: 8A:0D:8C:E5:38:68:A9:7A:1B:93:53:66:9C:DD:D2:1E:EE:A1:AC:C6
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 03673523
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ig2M5ThoqXobk1NmnN3SHu6hrMY.roa
Signing time: Sat 01 Jan 2022 11:54:06 +0000
ROA not before: Sat 01 Jan 2022 11:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60829
IP address blocks: 188.95.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57095459 (0x3673523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 1 11:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a0d8ce53868a97a1b9353669cddd21eeea1acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:7b:34:fb:77:7b:45:85:77:70:42:d7:ff:
33:a7:ad:f7:de:30:57:06:9b:72:12:ef:d3:b2:93:
ff:cf:3e:7f:9c:8c:15:fa:25:c9:b7:b1:d1:62:d6:
f6:ed:51:6e:33:8b:db:68:e2:e9:85:28:b5:08:17:
63:88:a7:c0:9c:c7:b9:70:c3:12:f3:c8:cb:ed:ef:
fa:93:f0:ac:de:fa:be:ca:c3:7c:fb:cf:9d:f8:57:
13:37:5d:b8:21:9c:80:db:b1:95:f4:b8:8c:f2:57:
38:68:e4:f8:09:fa:1a:39:5c:39:f6:2d:c2:85:41:
45:4d:f8:1a:a1:02:29:79:15:dc:cb:cd:12:e3:a3:
07:03:01:52:d6:02:46:38:30:27:a6:bc:b6:fc:22:
03:be:7a:c4:79:d0:95:d1:9b:42:1a:85:f5:de:2c:
9f:cb:79:0d:1a:a5:bf:dd:40:28:ea:53:bc:a0:99:
17:d3:bb:ea:ff:1c:1a:03:6b:8a:bf:55:c5:f4:70:
00:11:50:b6:30:a8:7a:57:41:73:ff:e6:be:ac:6e:
10:63:aa:d5:ce:c2:82:39:83:78:f2:9f:cd:58:8c:
8b:ae:29:ba:22:25:2b:f2:49:c7:4c:58:52:e7:34:
f9:27:f5:81:4a:b2:99:40:6a:06:83:4f:79:a2:19:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:8C:E5:38:68:A9:7A:1B:93:53:66:9C:DD:D2:1E:EE:A1:AC:C6
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ig2M5ThoqXobk1NmnN3SHu6hrMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.151.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d1:dc:51:61:f8:4d:93:ea:ed:54:28:9c:69:91:b0:3e:f5:
07:3f:15:6a:cc:1c:39:7f:84:1b:2a:5b:d1:be:66:62:dc:ca:
e6:9e:ef:a7:1d:ad:6f:b0:8d:3e:59:f2:02:37:8a:5e:8a:3e:
1e:c2:63:1e:2b:e6:93:a8:b8:34:db:e3:fd:e5:2e:56:6d:dd:
4c:81:31:2b:60:7f:cd:c4:18:d8:f8:86:89:58:9a:4f:4e:9e:
76:c2:b0:4d:c6:d1:0d:98:00:0c:b1:ce:28:a3:62:97:3b:84:
95:80:5c:f7:04:10:87:b2:7c:57:79:59:f6:60:d5:48:65:d3:
f6:46:76:e4:09:c4:57:ce:d2:f8:ae:45:e6:02:7a:ef:52:ae:
19:02:ea:cc:cb:20:44:24:10:d4:e9:30:7e:39:b7:70:7c:4d:
3b:e9:08:92:0d:87:49:4f:7d:b8:cc:31:aa:e0:1e:1b:21:ce:
b8:56:53:46:21:08:bb:eb:04:03:49:7d:09:99:74:99:a9:6b:
9d:bf:95:11:be:5d:87:2c:11:c4:27:58:6c:ae:bc:02:2b:d1:
45:4c:db:b6:8d:95:13:79:20:cf:20:04:ad:d6:ec:34:67:2b:
36:3f:00:bc:30:59:ac:84:db:ee:2c:f8:ee:36:2a:a2:da:f2:
9c:16:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:13 2024 by rpki-client on console-ams.rpki-client.org