Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/tWwwbwVMuj-9-P8x52PqJA4RrwY.roa
File: tWwwbwVMuj-9-P8x52PqJA4RrwY.roa (raw, json)
Hash identifier: REqNE9GzSEDfUHLPAXSmTiUSdOhije8OnY3GUc6tZGQ=
Subject key identifier: B5:6C:30:6F:05:4C:BA:3F:BD:F8:FF:31:E7:63:EA:24:0E:11:AF:06
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 3D7E82
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/tWwwbwVMuj-9-P8x52PqJA4RrwY.roa
Signing time: Sat 01 Jan 2022 00:56:06 +0000
ROA not before: Sat 01 Jan 2022 00:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 95.214.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4030082 (0x3d7e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 00:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b56c306f054cba3fbdf8ff31e763ea240e11af06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:8a:18:1b:20:14:90:15:a0:24:ef:e3:88:
93:f0:cb:5b:21:a2:ea:e6:99:2b:5d:77:b5:0f:cf:
6e:23:2a:a1:a5:34:be:91:90:bd:b8:74:ba:47:e9:
ba:f2:83:b3:e1:75:35:2d:f8:ea:e8:47:86:d2:23:
74:af:60:b4:7a:66:d0:ab:51:c2:2e:8c:f2:b7:b5:
59:00:3a:39:c1:92:95:b8:1e:8c:0a:41:d3:3c:d2:
c4:1f:6d:31:65:4d:13:36:43:09:a2:a2:54:61:e7:
6e:e7:6e:e9:e2:3f:0a:ee:b7:a8:0c:90:80:d7:01:
8c:98:5b:98:36:ac:19:2d:80:0c:99:79:9c:51:b1:
4a:1d:35:11:5b:7e:bb:47:1a:f1:4b:aa:f5:0e:f6:
92:c1:4f:cc:f0:ad:2d:16:7a:8a:81:8d:27:8b:e3:
51:86:33:64:2a:b0:39:c0:ce:3a:4c:9a:b4:e5:56:
42:48:06:26:7f:32:40:e2:36:c5:d7:ea:10:bc:1d:
e1:de:75:14:34:5d:ef:47:43:cc:b3:71:80:14:f3:
95:4a:d7:79:8b:ef:ef:01:12:f4:23:00:20:11:31:
b6:c7:13:d0:5f:c3:47:90:a2:f9:9a:d3:0f:2c:f6:
7e:70:b1:7d:14:51:ab:6e:b5:17:de:9d:c8:ae:b7:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6C:30:6F:05:4C:BA:3F:BD:F8:FF:31:E7:63:EA:24:0E:11:AF:06
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/tWwwbwVMuj-9-P8x52PqJA4RrwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:9b:6b:fa:c0:ea:bc:d9:60:3e:7b:12:1d:de:ed:ca:86:0a:
8d:d3:48:7d:9f:4d:82:c0:70:be:20:c6:a4:6e:f7:c0:06:13:
8f:bb:05:d4:8f:c1:9a:11:c6:aa:fd:99:83:3b:e8:6a:a2:bb:
28:82:f8:ea:59:46:af:d5:bb:84:a4:fe:d4:07:61:82:7b:97:
82:8f:99:7d:45:4e:87:b0:a3:9e:6e:a0:b4:05:b3:26:1f:9e:
5b:5e:4e:e4:dd:f6:f9:cd:ed:73:d1:c4:21:18:12:d4:09:0b:
dd:35:35:f5:91:bd:37:a8:e9:b2:de:f9:38:cd:62:ad:30:a5:
6b:d6:30:78:9a:0e:02:0d:47:1f:00:b8:41:bc:9d:98:2b:80:
08:5d:13:1d:4e:2a:a3:df:23:28:a4:34:02:ab:2f:02:25:43:
eb:11:0c:5e:61:fe:0c:e6:94:eb:88:4c:0b:28:00:9c:76:02:
e1:a0:1d:8b:61:3c:fe:98:e4:27:05:f4:10:f8:50:50:9e:50:
2e:18:34:83:4f:25:59:cb:0d:93:1d:b6:ac:b5:bf:87:28:6c:
bf:91:ee:47:25:7b:94:c5:74:eb:d5:ad:8c:f2:07:0a:39:bd:
70:f6:16:4a:fe:d4:9d:b2:84:9e:81:45:02:b6:b4:c5:7d:86:
e0:75:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org