Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Mydf2BeStAk0CdVZWS-46paunj0.roa
File: Mydf2BeStAk0CdVZWS-46paunj0.roa (raw, json)
Hash identifier: L6BJ6bQqCHBjnNbt/9rjpScKARD+tShQbefjZgS+914=
Subject key identifier: 33:27:5F:D8:17:92:B4:09:34:09:D5:59:59:2F:B8:EA:96:AE:9E:3D
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 1AE76D17
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Mydf2BeStAk0CdVZWS-46paunj0.roa
Signing time: Sat 01 Jan 2022 07:54:29 +0000
ROA not before: Sat 01 Jan 2022 07:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203273
IP address blocks: 185.95.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451374359 (0x1ae76d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 1 07:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33275fd81792b4093409d559592fb8ea96ae9e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:4e:52:dd:59:00:da:0f:a0:ee:b8:e8:b5:
2b:b9:ac:35:07:16:ee:34:a9:19:9d:f1:ac:39:a4:
c2:6f:7e:77:7a:28:ba:81:49:ee:8b:9a:27:6d:3a:
f2:42:3c:47:21:ff:0c:b7:0b:e8:17:65:18:2b:0f:
b7:21:17:96:00:b9:6a:5c:ab:32:5e:5e:a6:1e:41:
55:da:e5:78:9f:12:6f:40:a5:3f:c4:e2:5a:16:9c:
81:6b:f6:fd:74:74:bd:2f:f5:b7:96:2c:67:43:2f:
e6:7d:0b:6d:db:c7:53:2c:e5:01:50:f1:0b:af:d3:
24:19:a2:13:3e:b4:de:96:0b:4c:ed:89:f5:e7:f9:
f7:ce:f7:98:03:73:c6:78:86:15:a0:97:1a:dc:53:
7e:b3:e6:f2:57:85:b0:40:2e:5c:7b:3d:5b:34:54:
b2:e2:83:fc:a1:e7:ee:3c:12:18:98:a5:3b:13:45:
96:50:ad:f8:7a:aa:b6:6a:60:47:3e:f6:3f:a8:dc:
b7:05:99:e9:9c:7b:07:59:aa:9e:2b:5a:14:25:ad:
34:73:1e:1a:5b:de:b3:5d:ce:05:0b:9e:22:59:0c:
3b:85:50:59:19:9a:84:73:22:d8:d0:f4:c0:8e:92:
b1:54:d3:50:16:ca:15:d8:9e:29:cf:73:1d:38:4a:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:5F:D8:17:92:B4:09:34:09:D5:59:59:2F:B8:EA:96:AE:9E:3D
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Mydf2BeStAk0CdVZWS-46paunj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.4.0/24
Signature Algorithm: sha256WithRSAEncryption
88:17:55:4d:9a:19:9c:28:9b:07:27:5b:be:3c:12:63:bb:97:
a3:4f:24:6e:ca:98:10:1c:8b:ad:87:06:31:f2:66:d9:b1:f2:
12:65:76:58:8c:a4:96:71:a5:2c:bb:cf:70:08:85:89:35:44:
1a:bc:0f:7c:07:14:30:03:0c:6a:4f:cf:cf:f3:94:f3:09:09:
f5:7b:ff:7f:51:aa:e7:ad:dc:e1:5b:2e:29:8e:94:04:e3:33:
7e:7c:cb:53:37:47:80:3b:28:36:f1:de:99:0f:20:56:ba:43:
51:d2:52:3f:e7:a2:0e:13:ff:d4:ce:64:fe:49:85:e0:5d:24:
38:f8:d5:ae:3a:39:79:2a:1e:00:1e:57:06:35:a0:49:67:04:
21:8b:8b:a3:b9:9d:eb:42:09:bc:87:21:58:1c:24:c8:1e:8e:
60:7e:eb:de:94:2b:ce:2a:9e:6d:6e:b1:07:ca:73:78:26:98:
d3:d8:a5:34:e2:c8:3e:b1:40:6e:c0:06:28:dd:b0:09:d7:34:
f5:65:07:c1:2b:a6:55:32:75:85:a4:d4:b9:53:a6:ca:b1:df:
e5:13:58:ed:c8:0d:ae:f3:a8:cd:ba:b0:c5:07:41:db:0d:22:
d2:0d:77:7f:0b:af:e2:54:04:f7:cb:cc:86:01:f5:03:14:0a:
a3:20:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:46 2023 by rpki-client on console-fra.rpki-client.org