Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/IEhzRIRRwQFCogBTt5S8NIeV-9s.roa
File: IEhzRIRRwQFCogBTt5S8NIeV-9s.roa (raw, json)
Hash identifier: uvIeU1Yx6py/f/+fTU1/hc4/qdxCmJs7af9FHhAb7N4=
Subject key identifier: 20:48:73:44:84:51:C1:01:42:A2:00:53:B7:94:BC:34:87:95:FB:DB
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 031BB9CC
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/IEhzRIRRwQFCogBTt5S8NIeV-9s.roa
Signing time: Sat 01 Jan 2022 08:57:15 +0000
ROA not before: Sat 01 Jan 2022 08:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41717
IP address blocks: 95.181.154.0/24 maxlen: 24
95.181.162.0/24 maxlen: 24
95.181.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52148684 (0x31bb9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 08:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=204873448451c10142a20053b794bc348795fbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:4f:c8:fc:d6:88:ab:1e:db:3e:ca:31:1d:
ae:a7:24:43:22:be:ab:a1:28:28:07:40:7e:7d:fa:
98:8b:3f:1a:b9:37:fe:4b:91:c4:21:6d:05:8a:1c:
97:a2:98:cc:e9:b5:8f:c9:71:aa:ed:aa:10:79:d9:
52:93:2c:82:71:9f:f2:07:2f:53:8e:7f:fc:1b:1f:
fc:9c:74:d6:6f:86:a2:2c:06:d9:73:f0:ce:a5:e8:
4a:05:76:98:63:05:41:a6:e0:0c:fa:b9:33:27:dd:
f0:2e:f8:44:f1:03:c9:9e:45:93:29:9c:59:49:dd:
69:da:e7:7e:34:45:ec:89:63:a1:f9:f4:88:02:e9:
4c:9b:a7:cf:a1:c5:a4:ca:35:c7:87:6b:f3:a5:f2:
6b:38:5f:4e:93:61:b3:19:94:7e:f2:99:1d:82:16:
0c:9d:55:40:dc:a9:5d:55:86:05:b4:c2:61:55:67:
b1:23:a8:85:85:47:cb:87:5f:03:02:33:d3:f2:4e:
67:e5:5c:c2:b4:cf:c2:0e:8a:0f:41:88:71:26:aa:
39:9b:2c:a4:40:de:b4:aa:19:05:02:b8:80:17:3a:
4a:cf:8d:d2:61:1e:59:a6:d9:cd:e8:ad:01:45:70:
3d:b9:01:15:20:90:62:ba:f7:8d:16:84:90:ad:77:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:73:44:84:51:C1:01:42:A2:00:53:B7:94:BC:34:87:95:FB:DB
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/IEhzRIRRwQFCogBTt5S8NIeV-9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.154.0/24
95.181.162.0/24
95.181.167.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:43:fb:3a:c0:a4:a7:fc:fd:c4:ac:9f:80:2b:1e:d5:d6:fb:
94:c1:4e:19:41:29:c7:b0:1d:c8:b3:15:7a:b5:66:5e:f2:77:
8a:51:b3:02:05:d6:88:b7:45:08:c2:af:86:65:37:dc:11:37:
26:7b:c6:f0:01:36:fc:0a:2c:5a:78:37:b2:1a:61:65:4f:9e:
00:73:74:c5:5b:41:e0:8d:93:70:3a:4d:52:2d:65:6f:e4:90:
d8:aa:eb:75:76:f1:aa:0c:12:92:9f:9d:d0:7a:1c:1b:41:2d:
67:4a:9a:a5:f4:cf:b3:a1:6e:99:f3:9f:70:21:15:20:d1:2f:
3f:f4:51:f5:12:8e:a7:0d:eb:d8:4d:b5:06:36:37:8b:98:ef:
04:0d:de:96:5d:ad:4b:5b:e2:bd:0a:4b:a7:f9:75:ce:1f:00:
75:7b:31:56:42:28:7d:8b:13:a7:ba:e4:b3:4b:56:4c:a5:56:
b4:90:1a:ba:ae:46:60:f6:08:e9:61:22:75:4c:59:34:a0:23:
c8:d3:5b:54:6e:02:44:8d:d1:b6:25:11:2d:50:6b:91:97:7f:
b9:ec:ac:ae:2c:8b:03:42:7d:66:2b:79:d0:0f:a6:0c:69:1c:
5b:bd:0b:82:7f:e1:47:0f:b3:61:7b:95:66:4e:f7:71:04:64:
bf:47:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:35 2024 by rpki-client on console-ams.rpki-client.org