Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/63Y_nYG6rTGiXbmBF3yvLHIo738.roa
File: 63Y_nYG6rTGiXbmBF3yvLHIo738.roa (raw, json)
Hash identifier: y0BytxHdfeMEipI2EemJAWfdyj04GeI1CVMQqFZZ7wU=
Subject key identifier: EB:76:3F:9D:81:BA:AD:31:A2:5D:B9:81:17:7C:AF:2C:72:28:EF:7F
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 448FF472
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/63Y_nYG6rTGiXbmBF3yvLHIo738.roa
Signing time: Thu 12 May 2022 09:26:02 +0000
ROA not before: Thu 12 May 2022 09:26:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8849
IP address blocks: 95.174.68.0/24 maxlen: 24
95.174.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150284914 (0x448ff472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: May 12 09:26:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb763f9d81baad31a25db981177caf2c7228ef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:26:52:9e:83:bd:d0:81:05:35:4d:ea:d7:
03:19:c9:c7:78:8c:04:df:32:f2:14:cf:b4:63:8e:
29:9f:b0:1b:69:03:90:b3:e0:8d:f0:ed:7e:91:f8:
ed:ca:7e:bd:9b:5a:c9:66:9a:e3:64:32:5e:44:36:
4f:f2:7c:c4:87:7e:88:08:5b:a8:a2:64:1c:15:4d:
73:40:e5:ed:06:c1:fa:71:b1:22:a2:71:96:a1:9e:
b4:c0:d5:7c:21:68:93:33:89:47:c5:51:80:49:b3:
2d:31:ab:f5:25:22:52:61:96:cd:af:ab:60:51:80:
d2:79:c0:2f:09:17:d7:b6:75:7e:eb:bf:1f:41:e5:
6d:91:a9:95:37:d6:3a:94:ce:2c:02:86:08:8b:95:
ba:0f:5f:20:49:18:3d:6a:20:1c:0b:02:f4:5f:b4:
62:64:b4:21:2a:6a:df:1e:1b:ed:94:52:9c:26:b9:
18:c0:ed:73:28:2a:9b:63:20:5c:b3:95:75:75:c8:
68:08:0a:5c:21:44:9c:bf:28:0f:96:2b:da:cc:78:
b6:2b:57:5a:30:f8:c7:66:ea:45:90:a2:be:df:ed:
da:5a:d8:aa:86:4e:55:73:2a:bf:8e:18:36:8b:2a:
ad:1c:ea:9a:f5:d8:34:d4:d1:e6:fa:bf:4f:a9:71:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:76:3F:9D:81:BA:AD:31:A2:5D:B9:81:17:7C:AF:2C:72:28:EF:7F
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/63Y_nYG6rTGiXbmBF3yvLHIo738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.68.0/23
Signature Algorithm: sha256WithRSAEncryption
15:da:32:5a:4a:81:e0:b5:a7:b3:09:43:eb:89:ac:e3:44:a1:
68:68:bd:9c:6f:f8:15:65:11:a2:0d:db:5a:a3:99:a1:84:9c:
3d:cb:4e:27:51:b2:03:18:d1:e2:1b:f7:f5:a0:c7:14:17:94:
5c:1b:a2:db:29:e7:09:87:ca:0b:31:0a:1a:e3:65:3f:12:64:
c1:b3:fb:36:ed:1e:53:26:d5:6d:88:15:7f:be:a9:d6:48:e5:
3f:a1:f8:d0:c0:10:df:85:d7:53:9c:f1:a2:af:c2:ce:a2:9a:
ca:17:5d:96:39:31:05:07:0d:7d:1c:9b:7e:f5:10:98:e3:bf:
67:d7:43:ea:0f:61:6d:3c:e0:5c:ba:7c:19:49:bb:f7:05:b4:
db:52:c3:00:e8:a9:81:75:74:87:77:ab:95:bd:2b:52:67:c8:
45:dc:21:92:a7:38:47:75:f1:48:11:7a:21:d6:b8:8c:ee:5b:
64:8b:58:fd:3d:eb:60:36:9b:dc:89:ed:1c:87:b6:17:fc:aa:
8f:00:77:43:5d:c1:5d:99:9d:85:43:ee:58:8a:6c:ec:85:66:
a8:b1:4e:6f:44:b0:73:9c:9d:2d:0c:4b:1b:28:a2:0e:4a:d0:
3e:d0:1d:e1:9e:f2:32:04:69:cf:15:89:47:54:63:5f:40:7c:
db:43:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org