Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa
File: mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa (raw, json)
Hash identifier: sJY/lXNwRrAez6QAaALfXzI8iyYNACczQc+eLhaufsM=
Subject key identifier: 98:52:E3:9E:F3:10:9C:41:88:C9:8B:A3:54:C0:22:34:CF:4E:F0:BA
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 0168FB
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa
Signing time: Tue 24 May 2022 10:07:13 +0000
ROA not before: Tue 24 May 2022 10:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39930
IP address blocks: 195.95.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92411 (0x168fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: May 24 10:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9852e39ef3109c4188c98ba354c02234cf4ef0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:65:c1:9e:86:fe:07:73:ab:a9:d4:db:44:
bc:cd:48:29:b5:fa:eb:14:77:0e:09:bd:f1:b8:17:
5d:73:06:36:dc:26:0d:c7:e6:bb:30:2c:c3:74:a5:
de:26:91:77:2d:e5:17:42:39:50:ef:f9:dc:00:ce:
79:32:69:2b:e4:1f:3f:9a:95:82:46:bc:cf:ae:62:
be:09:43:4e:a3:45:2c:42:6c:7a:11:0a:78:7f:92:
0c:a1:bf:40:04:4e:81:92:1e:11:66:4d:13:36:4e:
86:2f:e0:d6:56:0a:71:55:c8:e6:3c:1c:9d:14:25:
5b:93:45:66:e2:98:e8:2a:51:63:d9:71:e9:8b:52:
d1:6a:22:b2:48:53:c6:99:2e:b1:41:c8:6d:e7:73:
e2:c5:ab:af:0c:df:43:72:ee:c1:cb:1e:b3:44:ae:
ab:2a:4e:59:20:34:b9:0a:fc:ba:40:09:79:ec:c2:
9f:98:35:29:5e:a4:e7:1c:7c:b8:4f:49:72:6a:3d:
03:a7:d4:a3:93:0b:8e:55:2b:80:7a:1d:5a:11:d7:
cf:5e:5b:25:8e:25:cf:1a:71:6b:62:a4:3f:19:2a:
cf:14:f2:a9:6e:63:fc:5e:c3:15:ba:44:50:7c:bf:
79:90:74:da:e5:48:b8:81:db:3c:ab:c0:1e:dd:b1:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:E3:9E:F3:10:9C:41:88:C9:8B:A3:54:C0:22:34:CF:4E:F0:BA
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.145.0/24
Signature Algorithm: sha256WithRSAEncryption
20:40:6d:3b:9f:f4:ea:e3:bb:ab:90:a8:ca:6b:4a:94:bd:a4:
69:d8:b2:ee:e9:b1:0d:47:02:04:45:f4:e1:f4:a5:67:90:e9:
47:af:05:e4:a6:71:21:61:8b:bc:60:b9:8a:95:b0:67:96:8f:
b4:0f:25:61:f4:9e:a9:7c:f2:8d:ca:40:81:b7:03:a5:c8:ce:
14:7e:20:bb:03:e6:22:ec:7b:01:17:1f:15:a6:96:03:7b:4a:
8c:22:66:fa:b3:8e:72:8f:c7:4c:f1:e5:d5:7e:45:61:85:d4:
b6:2a:fd:b6:21:e6:01:ef:b5:68:37:cc:5c:e8:48:34:1a:5e:
b8:08:67:46:24:8c:48:12:ca:74:73:52:bb:b0:cc:ee:93:4d:
d2:51:71:c6:b0:07:22:ae:c6:3a:81:c2:9e:dd:10:ed:a8:cf:
f3:47:9f:87:67:57:68:be:6b:12:3c:a9:ff:f9:d9:5e:32:aa:
80:75:21:5d:27:30:65:05:c9:25:b7:b7:75:a8:42:b0:9a:f3:
eb:32:ad:95:21:82:9c:73:40:41:f6:de:a5:28:61:aa:6d:9f:
6f:09:99:5f:63:7e:c7:c4:a1:dd:9d:95:c7:37:49:9d:8d:b3:
53:70:4d:1d:d7:1a:6a:47:22:c1:ea:9c:a5:e5:e1:0b:13:92:
b0:ca:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:53 2023 by rpki-client on console-fra.rpki-client.org