Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CudbfNKk1OkQNKDKQuPW3kH8W-w.roa
File: CudbfNKk1OkQNKDKQuPW3kH8W-w.roa (raw, json)
Hash identifier: zYGtu47zEGGz+NFzAoWQkYG8PEd4QEI9Jv4j2lF/ciA=
Subject key identifier: 0A:E7:5B:7C:D2:A4:D4:E9:10:34:A0:CA:42:E3:D6:DE:41:FC:5B:EC
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42B250AA6CC5683858DB6329051BC5
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CudbfNKk1OkQNKDKQuPW3kH8W-w.roa
Signing time: Sun 01 Jan 2023 21:35:20 +0000
ROA not before: Sun 01 Jan 2023 21:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397044
IP address blocks: 95.164.228.0/22 maxlen: 24
95.164.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b2:50:aa:6c:c5:68:38:58:db:63:29:05:1b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ae75b7cd2a4d4e91034a0ca42e3d6de41fc5bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:9d:91:a0:bb:4d:2d:b0:e1:2b:8c:19:24:
ec:fe:02:53:04:75:b2:df:a9:ca:b8:53:c7:fb:1a:
ed:ea:2a:8e:2b:ab:e1:47:d1:10:5d:63:61:c9:47:
f7:51:00:a4:a9:5d:da:3d:4c:5f:31:af:3e:58:ba:
65:6d:8b:d6:f5:bc:d6:a6:79:ce:1f:35:6e:59:16:
7d:b0:1b:46:b6:e0:d1:de:68:a7:d0:f3:16:df:af:
82:17:e4:1e:0f:28:0a:50:fa:b4:49:63:f2:f0:45:
b2:c2:48:01:0c:21:76:ed:2e:af:50:38:ff:43:f8:
a8:52:7e:a1:6d:c4:bb:64:16:f6:33:a6:d8:b6:3d:
11:d0:83:f9:ab:1f:7a:3f:82:0a:8e:b5:e4:9e:5e:
4f:39:9f:23:cd:93:33:6f:1e:1f:4d:86:6e:0e:c0:
6b:51:15:8b:27:10:29:52:92:40:33:00:34:dd:f2:
52:03:86:da:f4:58:77:0b:36:6d:33:62:32:31:13:
c5:dc:c0:dc:58:45:04:e4:87:88:77:2e:45:d3:54:
0d:d2:f7:38:9c:7a:b7:90:6f:59:80:97:f7:59:b4:
d2:d6:52:28:bd:4b:66:b7:1d:30:9b:df:de:94:2e:
35:a7:9d:6c:19:f6:0a:21:0d:76:5e:02:1f:81:68:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:5B:7C:D2:A4:D4:E9:10:34:A0:CA:42:E3:D6:DE:41:FC:5B:EC
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CudbfNKk1OkQNKDKQuPW3kH8W-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.228.0-95.164.235.255
Signature Algorithm: sha256WithRSAEncryption
16:06:07:4a:e7:4a:13:05:db:58:30:59:fe:51:12:b0:48:41:
ff:5c:e1:7a:eb:4c:c9:c5:0e:f5:38:72:a7:84:6e:56:67:3d:
ab:a6:83:1c:12:9f:b0:a1:1a:62:86:d8:be:3e:ad:96:60:ad:
c2:5e:64:14:d9:23:47:2b:93:39:2c:04:70:1e:4e:24:1b:40:
a3:b5:41:d5:48:2f:11:6c:3e:80:da:a4:b3:30:a4:7a:1f:ff:
30:9d:e7:16:7b:8c:c1:6d:44:b1:96:ff:cd:1e:2f:34:a9:03:
8a:36:37:64:c7:e6:e4:75:90:e7:06:e2:2f:4b:21:fc:2f:02:
db:cd:19:f2:a1:5a:ef:05:9e:46:53:30:6a:b8:8d:f4:22:02:
60:f3:89:0e:c9:d0:00:09:f6:2c:f9:22:52:40:f0:23:6d:e2:
cb:26:88:f8:bd:b9:3b:ca:3e:e2:84:cd:8a:27:bc:21:f0:1f:
c0:8d:03:11:c1:e3:a2:05:41:6f:e8:fa:bc:43:55:eb:59:6e:
cf:51:06:45:61:9b:15:9a:e5:2f:11:8e:23:e5:5f:ee:2d:37:
fa:63:41:d3:19:ce:89:e7:8b:c9:cd:4b:31:88:11:44:b8:8a:
0e:41:a9:c3:ee:cc:86:a6:0a:7e:79:04:82:e4:d2:d7:43:43:
15:38:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:31 2025 by rpki-client