Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1QBgJwYbZ9xZnv9qZqrYTWvsisg.roa
File: 1QBgJwYbZ9xZnv9qZqrYTWvsisg.roa (raw, json)
Hash identifier: ZAepRhkozPob4k5FYzX7gJubV8jCO3myqWF7BHKpD7w=
Subject key identifier: D5:00:60:27:06:1B:67:DC:59:9E:FF:6A:66:AA:D8:4D:6B:EC:8A:C8
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 389BAA03
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1QBgJwYbZ9xZnv9qZqrYTWvsisg.roa
Signing time: Tue 17 May 2022 05:21:31 +0000
ROA not before: Tue 17 May 2022 05:21:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41313
IP address blocks: 195.24.54.0/24 maxlen: 24
212.95.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949725699 (0x389baa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:21:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5006027061b67dc599eff6a66aad84d6bec8ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:56:8f:22:d9:3e:96:c4:00:f3:38:5f:ec:
6f:2a:bd:5e:36:82:4c:4e:72:a3:50:94:dc:06:89:
82:51:d5:81:98:0e:f1:42:82:d5:93:1e:4e:a6:1a:
d5:55:59:77:cc:a6:f3:04:4f:f8:bd:5f:f3:0c:ad:
a0:08:64:9b:2e:fe:99:af:6e:f2:30:b7:83:4c:e2:
de:1d:69:15:28:77:49:2e:40:58:3f:4b:2b:e7:34:
88:0e:be:b3:c5:ec:95:6c:78:7f:db:dc:65:d9:72:
5e:0a:a6:f3:23:8e:b0:e0:f9:28:e4:42:e4:15:bc:
a3:32:17:58:88:1a:a2:f6:a7:03:56:9b:ff:03:3f:
dc:56:d3:fb:f5:c5:57:ba:d7:8a:c0:da:8c:de:14:
79:36:85:13:3c:90:10:c1:a6:c8:d8:30:25:2d:62:
84:52:af:59:52:67:32:f3:f6:d6:cd:b8:f0:0c:92:
2c:33:de:37:0a:19:a6:a1:56:9c:1f:1e:1e:dd:00:
89:28:ca:43:70:d6:f4:9a:42:1d:82:6f:76:ee:ed:
e4:8d:86:e3:6e:26:2f:de:e4:d5:a7:17:2e:e4:f2:
bc:b2:2b:18:f2:aa:8f:c8:05:87:7b:69:ba:88:1e:
65:82:6a:ef:59:85:cc:44:f5:b1:7e:27:c9:73:5d:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:60:27:06:1B:67:DC:59:9E:FF:6A:66:AA:D8:4D:6B:EC:8A:C8
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1QBgJwYbZ9xZnv9qZqrYTWvsisg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.54.0/24
212.95.162.0/24
Signature Algorithm: sha256WithRSAEncryption
66:63:3b:6f:3a:b8:7f:e0:bd:81:df:8f:46:c1:4e:55:0c:4b:
a7:94:ca:06:21:9c:eb:38:06:25:c0:12:51:41:de:35:73:2e:
e8:ba:79:c8:84:00:27:c7:d2:38:e3:eb:a7:d6:2b:65:ec:dd:
0f:0a:bf:fc:5b:37:ea:3a:1f:5e:fb:9f:17:fe:c3:b8:6f:86:
4b:e0:3c:27:75:ea:a4:f1:c3:72:57:ca:a8:35:b7:93:4d:4b:
ae:6c:f9:47:ac:4b:f3:90:96:b9:74:1d:5a:e7:a9:16:46:70:
db:e3:20:db:4a:f9:fb:72:a8:a9:6f:dc:35:5e:83:c9:b4:17:
1a:35:6a:12:bb:55:b2:dd:7c:b4:cf:1a:28:86:7c:6a:65:c8:
e9:6b:f8:01:16:b5:d4:7a:ff:ec:06:02:aa:fa:52:8a:a5:a0:
6e:d0:8f:5f:b3:e5:20:20:f1:a5:a2:d4:c1:6c:28:f7:53:42:
46:c6:de:fd:54:ee:96:ca:24:df:56:f2:09:ca:b9:93:10:46:
2d:14:0e:52:52:a3:8a:9b:d0:cb:12:45:b9:0e:f1:7a:99:71:
4b:70:29:1a:6e:d8:73:5e:8e:ac:86:da:36:cc:9a:dc:30:8c:
2a:75:e8:db:10:73:5b:f5:02:55:bf:cf:fe:b5:a4:13:b6:46:
a1:e3:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-ams.rpki-client.org