Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/iHpUNeaw-050o0JiN5hyq5JDNQw.roa
File: iHpUNeaw-050o0JiN5hyq5JDNQw.roa (raw, json)
Hash identifier: VrBdaLYiRzLFFC99BMZTEpBySHNHd6xgzcv/Zko+1jI=
Subject key identifier: 88:7A:54:35:E6:B0:FB:4E:74:A3:42:62:37:98:72:AB:92:43:35:0C
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 0380A7DE
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/iHpUNeaw-050o0JiN5hyq5JDNQw.roa
Signing time: Fri 11 Feb 2022 20:40:28 +0000
ROA not before: Fri 11 Feb 2022 20:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210993
IP address blocks: 95.181.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58763230 (0x380a7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Feb 11 20:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=887a5435e6b0fb4e74a34262379872ab9243350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:fb:94:49:c6:c2:69:e1:cd:43:3b:ec:b7:
dd:6f:21:89:cf:b8:1a:04:da:22:4f:b7:3e:00:41:
64:75:25:6e:ca:ed:87:b6:48:6b:ef:8c:53:ec:c1:
f3:c1:cc:4c:0a:ac:05:cc:82:90:d1:fb:21:78:31:
6b:ad:2c:2d:84:cb:a4:33:9b:c1:36:d3:2a:7e:53:
62:6a:81:09:03:f4:25:2e:08:41:da:ac:aa:83:ef:
0d:c5:5c:1c:16:a2:85:03:7a:a5:ab:8a:40:69:15:
77:d0:2d:35:3c:b0:3e:af:b8:86:ad:19:06:c8:87:
41:d4:11:61:59:7b:75:85:06:a5:7a:65:bd:ab:2a:
97:ca:33:82:21:f4:35:d3:9d:24:0c:2a:87:42:ea:
98:43:43:57:bc:6c:c9:9b:a9:fa:41:0a:fb:d0:0c:
85:eb:e4:e1:5e:42:6b:44:15:ac:bb:47:a1:d0:6c:
a9:dc:64:e3:08:ea:bd:6a:d2:30:97:33:82:8e:72:
78:18:5e:3f:a0:be:fb:36:84:e8:ad:23:d5:d4:8d:
28:b7:4e:bc:d2:34:6b:37:66:49:c5:b9:cb:4e:20:
94:fb:dc:87:be:bd:58:9e:e7:10:84:91:97:7c:d5:
ae:d1:ec:b0:44:ab:ab:f0:1c:e9:64:04:5e:85:12:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:54:35:E6:B0:FB:4E:74:A3:42:62:37:98:72:AB:92:43:35:0C
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/iHpUNeaw-050o0JiN5hyq5JDNQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.158.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e2:51:22:70:84:f2:c3:0d:2d:e8:32:0f:cd:22:fc:67:81:
c2:15:5f:eb:87:a1:8b:7c:68:f1:8c:fd:93:5b:80:bf:5d:43:
5b:a8:42:cb:0e:59:14:43:9e:ec:d8:d0:95:2f:a5:4e:b4:68:
4e:fb:24:22:71:fe:16:54:8f:39:f2:3c:87:ce:9f:e4:7a:e1:
fb:5c:03:f8:36:1d:29:75:a5:1d:fa:ad:b8:27:22:e5:ce:c3:
cd:38:ab:9f:16:05:67:a5:70:6b:cc:21:55:95:b8:8d:76:79:
57:02:1a:a4:82:f5:e6:1c:13:59:d0:fd:47:2f:df:38:ad:67:
0c:ba:c9:2a:2f:b9:e9:63:f2:42:5e:6a:de:8a:25:81:52:58:
86:ee:d3:b5:73:c9:28:36:74:e8:50:19:b4:5d:c2:a3:89:04:
c0:be:de:ca:8a:5b:d1:91:12:49:ef:19:ef:57:97:06:4b:bb:
85:5a:e6:cf:92:36:98:55:d5:8b:ab:31:17:e1:7b:d3:cc:3a:
51:0c:fb:11:3b:73:5f:df:3e:f6:a0:27:8b:03:4c:91:ba:10:
d1:c5:f6:35:76:b6:5e:90:32:80:1c:75:0c:17:f8:9c:10:00:
2d:ac:3d:58:36:80:dd:b4:cc:cb:a5:b3:50:26:33:66:b3:b4:
68:5f:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:34 2024 by rpki-client on console-fra.rpki-client.org