Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/b7REUgqhAsR3XfzXnefjWhlMktA.roa
File: b7REUgqhAsR3XfzXnefjWhlMktA.roa (raw, json)
Hash identifier: NcfcG+cMGdzYPOVZRNo6KdJvsIPpdoRGmb8KCe8lAXw=
Subject key identifier: 6F:B4:44:52:0A:A1:02:C4:77:5D:FC:D7:9D:E7:E3:5A:19:4C:92:D0
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0244C9E5
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/b7REUgqhAsR3XfzXnefjWhlMktA.roa
Signing time: Sat 01 Jan 2022 05:56:47 +0000
ROA not before: Sat 01 Jan 2022 05:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399150
IP address blocks: 95.164.224.0/22 maxlen: 24
95.164.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38062565 (0x244c9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 05:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fb444520aa102c4775dfcd79de7e35a194c92d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:fd:3c:5c:c7:59:1b:03:39:06:58:79:ee:
37:66:3a:74:6d:22:1f:6b:3f:35:89:57:d9:c0:d0:
43:d1:e5:c1:65:72:ea:07:99:30:11:48:97:52:ae:
8d:0c:3d:f9:b8:e9:a4:2a:0f:c3:31:a8:db:50:b0:
2b:4d:91:58:82:f4:f4:73:d0:b5:fc:85:8c:bb:e6:
79:b2:87:ef:d1:c1:c0:b4:6d:d0:0e:d1:23:d8:5b:
9e:dc:98:5a:71:f1:3d:ca:56:3e:40:d6:a0:c7:68:
75:cf:1e:1c:be:36:59:f7:05:bd:b4:7a:55:ec:e2:
31:5b:58:66:a2:c2:4b:42:b2:7c:3b:fd:d9:dc:05:
56:c6:45:ec:e2:97:0e:b6:a6:2d:d8:67:45:d2:37:
49:20:4b:50:60:65:10:e8:0b:88:ca:e5:53:f7:63:
ee:d9:36:cf:dd:d7:64:25:9f:6a:37:a2:80:a0:6a:
70:6c:3e:b2:14:42:4e:d2:a4:50:cf:28:cf:50:c8:
35:cb:ee:6e:0f:77:22:dd:6c:f6:cf:65:b7:2a:e9:
6d:56:f7:d7:d3:cf:da:06:bd:e3:04:aa:b5:3f:69:
4a:35:32:21:73:90:84:91:d3:20:12:9b:72:11:62:
bc:cf:ca:8f:03:be:69:5e:d5:4a:f7:2f:7f:64:7b:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B4:44:52:0A:A1:02:C4:77:5D:FC:D7:9D:E7:E3:5A:19:4C:92:D0
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/b7REUgqhAsR3XfzXnefjWhlMktA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.224.0/22
95.164.236.0/22
Signature Algorithm: sha256WithRSAEncryption
21:67:88:58:91:cc:11:44:70:c6:b7:3f:6f:d8:4e:96:59:f7:
b4:d1:56:01:21:fc:e1:7c:47:c6:fe:a0:c1:13:04:39:f5:e6:
3c:07:c5:4d:89:cf:55:2b:37:02:e2:87:4c:d0:a7:66:05:c8:
db:3e:4c:26:48:c7:31:bc:75:9f:1d:d2:fc:ad:0f:48:01:38:
92:2f:91:23:3f:51:7e:d0:99:b6:6d:cb:3c:9a:8a:c9:dd:0e:
ea:79:9f:83:45:cd:98:33:d3:e0:1b:b4:ef:05:30:23:88:3e:
fc:b8:1d:16:06:72:42:35:54:b4:a2:f0:b0:1c:77:6d:68:8a:
c8:14:80:b6:5e:32:48:ae:76:bf:a6:e0:c8:b1:eb:94:80:2b:
d2:90:51:49:8f:e3:db:dc:59:f8:46:1d:dc:35:d4:91:57:9d:
96:a4:47:bc:5b:e6:0f:45:70:ee:20:fd:43:29:cb:d9:08:4e:
48:25:5a:68:07:d1:1e:f9:a6:57:ff:53:5f:1f:a7:10:1a:34:
cf:09:6d:23:4b:d4:5b:de:28:4b:44:2b:e5:71:27:a6:30:0d:
da:06:8f:83:ab:86:61:e2:8b:38:eb:cb:9b:6b:cf:51:ce:e9:
d5:47:5d:2b:6e:0b:9b:7f:c8:5d:c0:ed:56:f6:9a:d0:07:eb:
ab:78:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-fra.rpki-client.org