Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/hK5zrkc2z54zYj0RVlONS0wfE34.roa
File: hK5zrkc2z54zYj0RVlONS0wfE34.roa (raw, json)
Hash identifier: 484Fusf/9CgjkdljZdxo033lxR3YKr8oYRfQ2IR+OXs=
Subject key identifier: 84:AE:73:AE:47:36:CF:9E:33:62:3D:11:56:53:8D:4B:4C:1F:13:7E
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 06BC301F
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/hK5zrkc2z54zYj0RVlONS0wfE34.roa
Signing time: Sat 01 Jan 2022 09:04:22 +0000
ROA not before: Sat 01 Jan 2022 09:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 95.170.12.0/22 maxlen: 22
95.170.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112996383 (0x6bc301f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jan 1 09:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84ae73ae4736cf9e33623d1156538d4b4c1f137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:9d:31:3e:58:ec:b7:c9:71:27:d6:17:6b:
85:e9:e0:5b:b4:14:9e:94:14:b1:5e:ea:c2:56:69:
f7:42:f5:1b:c1:3d:9b:a6:0f:ab:b6:9f:ea:ac:5c:
74:44:9e:87:bc:27:7b:12:65:b6:88:f0:1d:85:f1:
23:5b:6d:02:5c:ee:e8:36:3c:f7:3b:38:84:23:ac:
31:20:38:3e:b2:12:4d:76:e1:da:4b:de:f0:0b:42:
46:a6:73:97:b8:6c:6f:91:54:be:f2:fa:13:63:94:
cb:d1:95:60:64:03:b1:c0:5b:6f:a4:29:16:e0:c5:
5a:64:19:bb:a7:3d:eb:b5:62:97:94:f1:13:67:b6:
1f:d8:d5:82:82:dd:50:51:04:1b:b1:ea:97:5a:b7:
06:a9:5c:f0:5f:e2:7b:05:18:47:ea:48:e6:4b:be:
d3:35:3a:1e:00:02:6e:06:e2:05:35:ea:79:fb:4d:
d0:4e:2b:68:4e:f6:11:70:1b:07:ff:be:25:0c:76:
d1:ee:00:c4:a4:e9:74:ec:1e:5b:72:b3:26:d6:c0:
7b:a1:b9:f7:bf:c2:8e:29:b8:08:90:c8:eb:2e:9e:
26:af:53:9a:f8:32:a2:c1:4a:77:aa:a5:c2:32:7e:
0e:02:45:09:b9:c1:29:a5:81:3d:aa:dd:9c:e3:f0:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:73:AE:47:36:CF:9E:33:62:3D:11:56:53:8D:4B:4C:1F:13:7E
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/hK5zrkc2z54zYj0RVlONS0wfE34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0-95.170.31.255
Signature Algorithm: sha256WithRSAEncryption
09:82:55:53:dc:34:bf:d1:89:a1:f9:a2:cd:68:18:75:e6:76:
d6:28:47:6d:bd:02:13:1c:fc:e4:59:4d:fd:cf:91:f2:04:85:
f6:55:32:33:76:0c:9c:75:e8:ba:53:c8:91:a3:8b:e2:d2:a3:
22:43:6d:ee:a7:8f:8d:39:ec:ac:10:62:6c:f1:22:95:e5:b2:
1c:a0:87:da:d2:14:4c:50:ac:d5:95:2c:fa:8e:82:6d:1b:de:
47:d1:19:43:13:7e:41:10:95:c3:53:79:0e:9e:17:24:e6:3d:
5e:a6:2e:c3:30:88:47:62:09:9e:43:06:83:e5:23:1c:f4:27:
ea:6a:05:7c:26:75:0d:d3:01:55:f5:29:9d:98:07:f4:c7:75:
cd:f4:01:49:97:d8:50:7c:91:37:83:72:35:fa:51:dc:28:a7:
17:e1:ed:64:ea:e2:dd:22:be:30:7a:d4:8d:d6:7e:83:02:11:
bd:b6:53:97:6c:b0:42:a2:74:02:24:e5:12:94:e3:86:8c:bc:
6b:3a:c8:11:5b:d1:3d:5a:2b:7f:60:c1:6f:ec:c9:c2:5b:50:
38:10:98:5b:76:1a:70:a7:2f:df:c6:9d:fc:c1:cf:56:16:22:
62:91:fe:3d:5b:68:6c:15:7c:40:27:1f:31:78:df:d9:39:f6:
0d:3b:84:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:47 2023 by rpki-client on console-ams.rpki-client.org