Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Gw24KRfxAzpOFQ7jLpabEgdYdzQ.roa
File: Gw24KRfxAzpOFQ7jLpabEgdYdzQ.roa (raw, json)
Hash identifier: EAHwcJdBkooWvXnJ4tnZpUmcLvzSyVjlN0NyGO+rL54=
Subject key identifier: 1B:0D:B8:29:17:F1:03:3A:4E:15:0E:E3:2E:96:9B:12:07:58:77:34
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018462272725C4CC91FCDEE5AFE661BDDAF0
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Gw24KRfxAzpOFQ7jLpabEgdYdzQ.roa
Signing time: Thu 10 Nov 2022 15:27:23 +0000
ROA not before: Thu 10 Nov 2022 15:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 95.164.0.0/21 maxlen: 24
95.164.24.0/21 maxlen: 24
95.164.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:27:27:25:c4:cc:91:fc:de:e5:af:e6:61:bd:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Nov 10 15:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b0db82917f1033a4e150ee32e969b1207587734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:35:36:cb:f0:35:65:47:f8:17:28:40:8e:
61:d8:8e:37:42:e2:b4:09:b7:87:d9:7c:ac:08:d7:
18:28:bf:7f:d4:b3:85:a9:b3:ac:b3:d6:06:4c:fe:
59:1a:93:2f:91:b2:07:f0:3c:c1:b4:27:05:76:96:
f8:b3:ec:17:27:d8:91:93:07:ea:94:a9:fb:cd:46:
79:c9:fd:4a:41:0c:0b:f8:f9:17:fd:4a:1a:0f:87:
08:70:85:53:85:f1:1d:69:05:d9:ae:e0:41:81:18:
0e:de:33:f3:cf:6d:e6:57:e6:d5:e9:9e:a8:24:19:
52:b8:54:b8:00:60:cd:73:17:87:9f:f6:a5:dd:a5:
4a:b9:06:ff:c7:76:7e:bb:91:7a:58:05:ce:09:06:
fb:40:63:d5:61:15:44:db:e8:72:01:c3:b0:8a:f2:
10:72:e2:ce:49:ef:3a:cf:07:2a:28:6f:72:24:6b:
34:fa:a3:7d:74:65:ca:b3:d5:59:85:a0:97:e8:ca:
5f:4f:e9:b4:9c:8f:c9:a2:18:9e:90:c5:c7:fe:60:
df:4a:d6:ad:0c:55:1a:1c:40:fc:32:de:72:67:9d:
bd:bc:38:9f:4f:2c:f4:f4:c7:06:50:c9:93:e7:79:
9e:32:18:2f:d8:72:b2:b9:43:eb:80:43:f4:b6:38:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0D:B8:29:17:F1:03:3A:4E:15:0E:E3:2E:96:9B:12:07:58:77:34
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Gw24KRfxAzpOFQ7jLpabEgdYdzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.0.0/21
95.164.24.0/21
95.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
97:86:cf:a4:98:98:ed:77:83:7c:5c:8c:2d:84:5a:1e:bc:f9:
ca:d1:4e:a8:0c:3a:16:48:a2:b4:41:33:af:3f:bc:e1:5f:be:
11:8a:5f:f9:b0:9c:3c:16:40:23:55:72:0d:b0:83:90:96:51:
6c:99:01:c4:0e:4d:2c:a8:2d:23:c5:a8:12:e3:cd:b6:3d:00:
7a:ea:45:2a:b1:62:60:8d:b0:a8:20:4a:5f:3a:35:ae:d6:c0:
7f:65:81:19:f0:61:87:97:84:46:b7:93:28:ff:a4:3a:6a:ad:
e1:eb:2d:3f:e3:ca:0b:4b:0f:b2:67:46:4c:bb:e1:c8:f0:20:
24:7f:8f:1b:24:5e:28:72:90:dd:91:f4:0c:82:5a:6f:e9:36:
35:bd:73:c9:25:7f:a0:55:27:9c:97:3b:8d:70:a0:2e:1b:d1:
6e:98:69:16:57:d5:09:e8:f5:dc:9c:4b:53:d4:d3:a1:7a:c1:
ed:e7:4e:78:49:70:07:4a:e2:12:10:62:15:57:83:3a:bf:e6:
f7:f4:62:b5:dc:b7:4b:79:3c:17:c9:86:de:db:47:20:c4:42:
7f:39:2c:b7:bc:82:b4:3f:4a:15:30:31:7b:ca:08:4c:9d:1b:
0e:a5:09:18:db:b8:4c:2e:98:6b:99:e9:22:74:02:57:19:cd:
41:ef:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org