Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/axuU6hr-xE6VZbu5lppQ2MJDxzU.roa
File: axuU6hr-xE6VZbu5lppQ2MJDxzU.roa (raw, json)
Hash identifier: vThzhz0t3NALB3rf1oP/SKKS2aZefRDAfH0i1a21Fcw=
Subject key identifier: 6B:1B:94:EA:1A:FE:C4:4E:95:65:BB:B9:96:9A:50:D8:C2:43:C7:35
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 023DEE34
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/axuU6hr-xE6VZbu5lppQ2MJDxzU.roa
Signing time: Sat 01 Jan 2022 05:56:44 +0000
ROA not before: Sat 01 Jan 2022 05:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39762
IP address blocks: 95.164.64.0/22 maxlen: 24
95.164.64.0/24 maxlen: 24
95.164.65.0/24 maxlen: 24
95.164.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37613108 (0x23dee34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 05:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b1b94ea1afec44e9565bbb9969a50d8c243c735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:ed:3f:bf:05:3a:d8:0e:62:8b:ca:1d:0e:
0c:53:ae:fb:02:f8:64:a0:aa:f1:73:d1:7a:cf:18:
10:e6:a8:b0:3c:fd:ea:9a:d0:62:32:38:b8:7c:fc:
53:9c:71:c5:10:c5:53:36:16:26:c6:84:99:19:ba:
a2:7e:fe:55:c8:3d:d0:e5:b7:96:92:1d:3b:86:45:
6c:c8:1b:1d:dc:92:23:6a:1d:1b:a8:3e:dc:fa:f3:
c4:2f:75:db:57:46:ac:8a:78:f4:25:2e:25:40:d2:
8c:f3:89:c7:eb:83:fc:fa:f0:61:a3:96:d6:d3:d6:
b1:c3:27:c7:a7:79:0f:07:26:5c:a1:1c:59:33:10:
35:3e:33:6e:67:81:63:73:2f:22:81:a9:d1:ec:4f:
e4:3b:29:da:bb:61:76:57:59:44:f9:88:6c:61:a3:
ef:ae:85:dc:7b:2e:1e:a3:9e:24:a2:f7:d5:4d:0c:
6d:4b:48:88:ff:df:1a:bf:f2:9e:f0:04:db:50:60:
ff:d0:23:74:c8:9b:7f:5c:dd:7e:c9:10:6f:a8:ff:
91:ef:9d:82:dd:da:8a:61:71:4b:2d:84:06:5a:7e:
e9:0c:88:59:57:6f:1a:0f:52:d9:d3:68:0a:dd:be:
51:7a:8d:70:25:74:db:c0:7c:a5:21:89:60:5f:d8:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1B:94:EA:1A:FE:C4:4E:95:65:BB:B9:96:9A:50:D8:C2:43:C7:35
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/axuU6hr-xE6VZbu5lppQ2MJDxzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.64.0/22
Signature Algorithm: sha256WithRSAEncryption
30:39:b7:85:d4:f4:c6:46:b2:fe:29:f9:26:16:e4:21:f3:93:
51:c3:85:29:80:47:96:5e:47:e5:7b:11:b8:07:9a:91:a1:a4:
f2:c8:bd:8d:90:4e:51:00:6e:cb:54:c5:3a:94:86:be:62:e1:
48:ee:45:aa:c8:e6:2d:26:cc:b0:d8:c2:db:2b:87:45:37:32:
b4:e3:bb:6a:cd:57:5b:b4:2b:aa:cf:04:a2:da:de:58:2b:f8:
a6:3b:ef:22:52:4c:89:18:80:47:d8:fa:d7:63:8e:ab:8a:17:
ab:bd:0f:00:c1:42:96:bf:e4:6e:e7:e4:b2:27:a2:2f:28:9a:
aa:d7:fa:fa:ae:e6:77:35:11:c3:34:48:9b:e9:0d:4d:be:77:
8e:48:2c:ae:b1:44:59:dc:f0:95:a3:c2:e0:ce:80:ae:1d:fc:
5d:1f:fe:f2:0f:85:98:20:a5:8a:64:dd:66:da:0a:7c:27:10:
43:ea:ab:c7:c0:64:b6:35:b6:4a:1f:e7:2f:38:03:99:d4:12:
65:54:32:1d:f8:37:f7:75:a5:a9:17:a4:b3:7f:75:02:1f:f3:
c5:4a:92:40:a0:ac:0f:a3:ad:1a:4e:c4:9b:b5:88:bf:b2:ab:
87:08:07:11:ac:ad:1e:5c:24:c5:70:86:ac:35:5b:01:fd:20:
17:46:a5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org