Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/crTRGq4pLGXu2Q4nAnqL_Rdzu88.roa
File: crTRGq4pLGXu2Q4nAnqL_Rdzu88.roa (raw, json)
Hash identifier: CK4nEoyxfB0uqTvuc9EEU3DpfjGlI8DE4CQgHeL8qq0=
Subject key identifier: 72:B4:D1:1A:AE:29:2C:65:EE:D9:0E:27:02:7A:8B:FD:17:73:BB:CF
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018AF15D34E7D72A3CD44CCFFAF5A9827DFB
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/crTRGq4pLGXu2Q4nAnqL_Rdzu88.roa
Signing time: Mon 02 Oct 2023 17:08:51 +0000
ROA not before: Mon 02 Oct 2023 17:08:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 266827
IP address blocks: 95.164.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:5d:34:e7:d7:2a:3c:d4:4c:cf:fa:f5:a9:82:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 2 17:08:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72b4d11aae292c65eed90e27027a8bfd1773bbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:2c:8a:22:76:f7:6b:3b:4e:c4:dd:26:13:
5b:45:b6:87:01:e5:29:8b:78:69:6f:3f:1b:45:5b:
dc:6e:02:5a:19:be:c6:44:d7:c5:7d:26:4a:ab:c7:
47:2e:ed:ff:5a:fb:1a:f0:cc:09:f4:a6:70:68:86:
11:c9:5b:35:bb:26:51:05:85:b5:3f:77:f5:b0:4e:
a1:28:a6:01:95:48:b9:f6:8c:26:ea:c4:ff:c7:d8:
cf:a9:b5:75:34:f2:59:b2:b7:80:93:2f:d7:be:48:
46:6b:a2:71:25:5f:98:a3:3e:78:04:5b:da:8b:9e:
69:fd:23:d6:c5:62:16:ae:5a:17:9e:c1:9d:b9:41:
1d:2d:0f:2b:dc:a8:f1:0d:0e:88:e2:3e:25:eb:a8:
73:2e:4b:01:36:f3:a5:03:ef:a5:6a:87:12:37:7d:
af:e1:42:00:a9:26:a7:77:c4:0a:82:30:f2:bd:89:
df:1b:40:c4:a5:7c:c9:59:18:da:b6:54:b7:0b:c1:
06:67:19:78:ed:d7:20:f6:e1:24:74:a3:90:e8:80:
24:a9:54:1a:e3:c5:c3:7d:63:42:a8:f5:10:46:d6:
28:70:a4:2a:f9:0a:0c:06:f2:4f:50:b4:5e:c5:68:
1c:23:7c:21:5d:ab:0f:de:ec:1f:1d:05:66:f6:04:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:D1:1A:AE:29:2C:65:EE:D9:0E:27:02:7A:8B:FD:17:73:BB:CF
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/crTRGq4pLGXu2Q4nAnqL_Rdzu88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:09:ad:3a:66:54:3c:4b:36:50:bf:7e:38:2f:28:9a:ad:b2:
ee:29:b9:c2:e4:98:3a:d2:66:56:82:d0:6b:1e:01:c8:6a:f4:
86:ce:27:65:09:ec:08:a5:0f:dd:5b:5e:2a:57:32:ca:90:82:
29:db:f6:6c:59:c9:e1:62:17:28:22:7a:ee:5a:d2:57:47:62:
6e:b5:7f:b8:83:59:a2:86:d3:e2:d3:69:b7:07:fa:93:27:a7:
79:eb:4c:9e:34:a5:e5:5a:7c:d3:23:b6:f6:7d:6d:5f:bf:78:
12:37:24:fe:28:6a:d9:75:cc:a6:4e:fc:0f:03:60:92:33:35:
3b:d0:f8:db:c1:0f:5f:b7:b8:2a:12:5a:20:eb:98:59:7c:a9:
a3:4c:3c:a9:1d:0f:4d:06:c9:3d:3d:2a:32:8c:36:fa:ae:14:
bf:7c:5e:dc:6f:07:69:76:ff:b0:7e:d9:cf:cf:54:a6:c5:77:
1a:91:02:44:0d:72:7f:c1:56:ca:95:c2:8d:00:82:d2:f2:40:
c0:b2:54:b0:fd:99:e5:c1:d1:e4:32:38:8a:14:3c:43:d6:41:
51:58:33:b7:84:62:6f:fe:a1:12:82:11:bc:ae:a2:46:a2:bf:
97:94:41:24:a2:1b:c2:02:58:a0:22:3f:65:cc:18:b1:51:bd:
c3:6f:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:22 2025 by rpki-client