Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/SVwUOFRziWuPrUap0Bos7TTltIA.roa
File: SVwUOFRziWuPrUap0Bos7TTltIA.roa (raw, json)
Hash identifier: PtdZW1YAjOA9aXyqOk6v/5BIuSJ6SDmSD0miy2u6fsY=
Subject key identifier: 49:5C:14:38:54:73:89:6B:8F:AD:46:A9:D0:1A:2C:ED:34:E5:B4:80
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 08658A72
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/SVwUOFRziWuPrUap0Bos7TTltIA.roa
Signing time: Sat 01 Jan 2022 10:54:23 +0000
ROA not before: Sat 01 Jan 2022 10:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197289
IP address blocks: 95.215.132.0/22 maxlen: 22
185.18.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140872306 (0x8658a72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Jan 1 10:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=495c14385473896b8fad46a9d01a2ced34e5b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:22:de:b9:74:00:50:61:95:65:38:90:42:
79:60:79:01:bc:e2:a8:12:12:9f:d4:f3:68:f3:1a:
ab:be:8f:ce:53:d0:3a:dc:56:02:4d:d6:be:bf:87:
87:4e:b6:0b:ba:d2:46:36:91:0b:c5:5b:bc:8b:d6:
76:30:5b:ee:35:61:42:23:25:13:ad:54:74:1c:df:
35:40:c0:71:76:91:3d:99:47:bc:3b:eb:4d:82:ea:
ab:0b:72:e7:38:b7:ea:de:df:ec:9f:33:77:c7:37:
99:31:2a:81:17:a9:69:3f:58:e7:f3:10:81:a9:10:
c7:de:66:8d:bc:08:e5:4d:e7:a6:70:77:d1:c0:b7:
1d:a4:5d:f4:fc:db:38:20:04:7f:8d:97:cd:5a:47:
7b:19:cb:27:85:b7:b6:11:66:d4:2c:34:51:7d:89:
2e:ab:a1:55:4a:66:36:c6:96:28:dd:82:33:f7:51:
11:a7:58:87:c5:59:22:e8:e5:1c:b4:f5:e7:fe:36:
72:1e:c4:a4:ce:79:1a:7d:c0:8b:70:b9:8d:4e:39:
99:92:cc:6b:7f:2c:51:fd:77:ac:e6:57:8d:5d:26:
d1:25:1f:0f:89:07:9d:64:3b:05:7e:b2:75:20:af:
57:11:ec:50:cb:d4:b5:e1:82:6f:40:c1:c9:f8:b3:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:14:38:54:73:89:6B:8F:AD:46:A9:D0:1A:2C:ED:34:E5:B4:80
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/SVwUOFRziWuPrUap0Bos7TTltIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.132.0/22
185.18.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:d2:f8:e8:36:ab:9e:26:14:01:90:79:b1:95:8f:11:b1:f6:
80:df:01:b2:b8:cc:0c:9b:06:e3:c1:9b:1b:30:f0:fc:c8:28:
1b:89:bb:c1:63:b5:91:68:62:bf:62:52:76:e5:be:23:8c:fc:
22:8c:ca:fc:5f:ef:02:ca:14:42:9f:e3:fb:f7:db:a4:23:d3:
d2:4a:07:93:30:e7:0d:e3:6b:1c:df:cc:0b:74:f7:db:8b:c6:
8b:e1:b5:27:54:d9:75:37:15:ba:c9:fc:64:07:d0:62:64:75:
b7:9d:22:16:56:34:0a:19:0b:87:d9:46:b2:c4:94:c0:8b:7f:
9e:da:df:fa:72:2c:d6:f5:69:33:e2:e6:6c:78:a6:ea:8a:4e:
d3:9f:06:e8:46:39:d1:45:f8:f0:a6:66:0b:80:2a:20:37:76:
02:35:33:00:75:f5:a1:51:41:7d:fb:c8:9d:8f:95:78:be:40:
62:a6:b1:32:a7:7b:51:0e:74:7d:e7:9c:fd:a4:1e:5d:6c:4c:
09:e3:fd:ed:0e:af:eb:ea:63:7e:31:a5:ed:46:59:c1:7e:8d:
55:a4:8f:f5:2f:28:d6:bd:02:1d:be:c6:7b:5f:63:b3:ab:fe:
e6:d9:ab:11:1f:af:34:44:a7:6d:b0:17:06:cf:76:8c:af:04:
d6:91:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org