Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/fpUhgJAmtW3Qr_cpekgOUQGOFc4.roa
File: fpUhgJAmtW3Qr_cpekgOUQGOFc4.roa (raw, json)
Hash identifier: ZzNhG7QpHOaHf2VMgoUrbGQ6I4Ek4sF4+ih7GHh10LM=
Subject key identifier: 7E:95:21:80:90:26:B5:6D:D0:AF:F7:29:7A:48:0E:51:01:8E:15:CE
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 09F5F0AB
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/fpUhgJAmtW3Qr_cpekgOUQGOFc4.roa
Signing time: Sat 01 Jan 2022 15:57:21 +0000
ROA not before: Sat 01 Jan 2022 15:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 95.142.116.0/24 maxlen: 24
95.142.113.0/24 maxlen: 24
95.142.119.0/24 maxlen: 24
95.142.123.0/24 maxlen: 24
95.142.122.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167112875 (0x9f5f0ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 1 15:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e9521809026b56dd0aff7297a480e51018e15ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:4a:b5:f9:cb:00:dc:5e:db:77:0d:03:7c:
f0:28:78:2d:27:14:21:07:2f:35:d4:0a:df:40:ce:
1d:24:f9:30:b2:65:fc:8b:49:de:57:21:e1:f6:f3:
01:11:a7:a7:a6:2b:95:93:5f:18:d8:5f:51:97:d5:
f9:04:3d:87:3a:97:6e:14:53:5b:0a:96:42:b8:2a:
7b:42:6c:c5:b2:32:5e:cf:ef:ea:db:57:57:72:6c:
18:21:b7:ed:01:42:be:1b:c0:1a:b2:d4:b0:36:33:
42:a0:ab:19:4a:eb:e9:a6:6c:8c:c4:45:04:6b:34:
10:8c:af:51:4b:3e:c2:16:d0:86:fa:3c:29:58:de:
dc:6e:64:12:83:94:95:0d:07:1b:e7:9c:73:d0:c0:
59:0b:55:3f:92:e2:06:15:ee:2c:b3:60:d4:f2:d3:
76:e1:be:81:97:a7:8e:6d:ff:51:19:72:37:9e:8a:
3a:c6:81:42:bc:dd:fb:03:56:07:75:8c:2d:8c:e5:
ce:b3:5b:d6:a8:c8:92:70:78:9b:ec:23:37:e1:46:
a2:d4:69:4b:a1:53:5f:ef:3b:57:43:4a:b2:70:b0:
94:c9:46:4f:66:25:8d:82:cb:ee:ed:97:7b:39:4f:
aa:c7:3a:8f:83:4c:af:44:06:8c:75:a3:79:fd:66:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:21:80:90:26:B5:6D:D0:AF:F7:29:7A:48:0E:51:01:8E:15:CE
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/fpUhgJAmtW3Qr_cpekgOUQGOFc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.113.0/24
95.142.116.0/24
95.142.119.0/24
95.142.122.0/23
185.54.230.0/24
Signature Algorithm: sha256WithRSAEncryption
27:70:9f:4c:79:94:d7:b2:a1:25:ba:33:eb:3e:d5:29:a4:a9:
5f:c0:05:62:0b:7a:fd:72:84:0a:9a:9e:8e:9f:90:d0:d3:94:
5c:bd:ba:26:df:ab:12:60:d7:7d:c3:45:e0:50:98:76:a7:37:
7e:14:bd:91:95:32:b9:ed:e0:72:ed:6b:aa:7d:70:1f:b1:15:
52:a0:75:cc:6b:ac:2e:05:55:f4:9e:e6:c5:0e:f0:ee:c0:e5:
a2:54:a5:c9:e1:af:2e:f7:1d:ee:de:ea:e7:99:c6:e3:cd:54:
d4:01:20:5c:ab:55:bf:74:ab:0b:7e:47:ae:f4:d3:e7:c9:74:
a8:c3:27:38:4d:fb:a9:e0:55:fb:fd:9a:f7:82:61:44:10:ef:
63:3f:97:0c:c7:67:3c:c9:98:f2:6c:7b:56:8e:0a:52:8c:49:
d2:4e:20:e7:0c:67:f7:93:30:21:e6:89:a7:e1:b3:43:b8:86:
a2:bb:2f:07:b3:b2:47:85:16:2a:2c:6f:bb:57:f8:8d:db:8c:
30:da:c2:93:43:53:df:cd:d3:bb:ec:b5:e1:43:00:aa:40:7f:
8c:7a:db:48:a4:81:5d:3d:50:53:74:ca:25:37:23:71:10:b8:
77:2c:b0:44:ab:3e:4b:26:e9:35:a8:32:d3:c4:20:ca:65:ac:
f1:e0:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org