Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/43df4ZUY0gJ6oDQw6yyaA5Q5mOU.roa
File: 43df4ZUY0gJ6oDQw6yyaA5Q5mOU.roa (raw, json)
Hash identifier: 0T1STIL+u1HsU8PdgEVIl7IAVuQS2t2S8ZLAnDwRbBw=
Subject key identifier: E3:77:5F:E1:95:18:D2:02:7A:A0:34:30:EB:2C:9A:03:94:39:98:E5
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 023FB933
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/43df4ZUY0gJ6oDQw6yyaA5Q5mOU.roa
Signing time: Sat 01 Jan 2022 05:56:44 +0000
ROA not before: Sat 01 Jan 2022 05:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.128.0/21 maxlen: 24
95.164.136.0/22 maxlen: 24
95.164.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37730611 (0x23fb933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 05:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3775fe19518d2027aa03430eb2c9a03943998e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:8d:5c:3e:c8:78:8a:79:f0:d1:14:55:ce:
64:54:8a:73:ec:3b:44:38:91:f6:f5:1d:eb:24:5d:
64:09:60:16:b8:da:ce:f1:c6:55:60:55:e3:ae:49:
1a:86:b9:eb:d3:ab:b2:a6:38:eb:0e:8f:d7:6d:30:
fa:63:a4:03:ea:1d:f4:4f:4f:b6:1a:41:86:d8:13:
bd:6c:7f:6a:ce:c1:43:ed:36:0f:d1:91:55:1d:c9:
99:05:9a:ad:54:22:80:e4:ca:33:23:61:55:61:73:
70:14:de:3c:7e:34:fe:1b:25:60:be:1a:9c:1c:b0:
61:90:97:53:e4:44:3a:21:70:6b:ff:bf:1c:0b:0d:
e1:1a:b4:84:16:51:e6:02:22:78:ad:21:f6:79:ec:
54:fe:64:60:6d:93:61:e0:5d:7b:4c:ca:50:fe:cf:
54:ef:bc:fd:37:d1:b1:d4:b7:e3:37:a5:90:5c:23:
6e:d3:84:3d:70:1a:fd:4c:bf:dc:9a:d6:29:a4:0c:
7f:fd:e1:75:d0:1d:64:bc:65:31:67:e8:7d:1e:d7:
0e:41:3a:a5:94:c8:e9:d6:88:98:d4:17:72:2f:d5:
8c:4e:b1:9d:94:97:ff:eb:98:e9:6b:43:7a:c3:58:
02:ab:80:02:ec:e9:07:0a:98:98:6a:f7:8b:7a:48:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:77:5F:E1:95:18:D2:02:7A:A0:34:30:EB:2C:9A:03:94:39:98:E5
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/43df4ZUY0gJ6oDQw6yyaA5Q5mOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.128.0/20
Signature Algorithm: sha256WithRSAEncryption
86:fb:79:ed:3d:4d:8e:1b:1a:2c:78:fc:8f:ac:9f:03:fd:2a:
56:f5:28:d2:3b:25:7b:de:a4:ca:77:19:58:dd:79:08:23:fa:
66:34:4b:50:a6:81:34:ad:1d:0c:53:07:d3:b4:89:3a:55:3e:
0d:d9:30:5f:7e:a5:78:6e:52:57:4f:f3:6d:3d:12:6e:32:db:
13:55:f6:3a:0f:d6:25:93:86:36:14:8a:99:14:09:5b:dc:c6:
75:0e:d9:70:d6:95:a0:ff:8b:9f:de:b6:60:cf:d5:46:13:38:
2f:17:8e:f8:81:7f:43:cf:a6:f8:8b:8d:2d:00:0c:ee:ea:12:
e0:41:2f:de:ad:b8:c4:3b:80:72:0e:1e:3e:35:27:be:57:1e:
0d:2a:30:0d:78:ee:27:8a:97:9a:40:7a:21:f8:8a:34:5e:8f:
a1:b6:4b:1a:60:9b:5f:fa:f0:88:b8:6e:5f:72:a8:42:f4:f9:
f6:86:9c:b1:60:6f:39:b0:ab:fc:31:61:ee:d1:4e:4c:0c:39:
c7:01:8d:6f:dd:0e:d7:20:fc:53:76:f5:64:c2:5a:79:28:fd:
9f:ec:f9:43:16:19:4e:8c:1e:6d:71:78:92:8f:e4:ce:b3:4b:
9b:14:06:4f:9f:bb:dd:04:24:57:a7:1c:fb:2a:91:6c:d8:06:
56:19:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:25 2025 by rpki-client