Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/_ZjoPhtmoFfETMeFwspJPI7IknI.roa
File: _ZjoPhtmoFfETMeFwspJPI7IknI.roa (raw, json)
Hash identifier: rc+LujBaHAC5tbk+/Iyg2x3xD5ay/XNnrBVHIGZI5jU=
Subject key identifier: FD:98:E8:3E:1B:66:A0:57:C4:4C:C7:85:C2:CA:49:3C:8E:C8:92:72
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 0182AF875898C21811CC4DF20EA2FABFBA4F
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/_ZjoPhtmoFfETMeFwspJPI7IknI.roa
Signing time: Thu 18 Aug 2022 05:57:39 +0000
ROA not before: Thu 18 Aug 2022 05:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59643
IP address blocks: 188.95.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:87:58:98:c2:18:11:cc:4d:f2:0e:a2:fa:bf:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Aug 18 05:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd98e83e1b66a057c44cc785c2ca493c8ec89272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:60:5f:5e:0c:66:1c:30:b1:bb:92:a9:c5:
a1:df:60:5c:19:73:2a:fe:56:cd:94:0c:2c:6a:b2:
79:f7:db:1c:4a:f4:14:8a:fc:42:90:8a:15:9f:5c:
7a:88:b6:75:56:0e:b5:b0:27:99:f8:12:2f:19:89:
18:73:68:a0:98:ae:a8:61:ad:a1:3d:9e:63:23:ef:
ee:1c:f2:8e:e2:42:9d:8f:5d:8d:17:d8:a4:b3:a3:
26:ff:00:95:1f:6f:cf:79:ac:31:50:e8:51:fc:95:
e2:25:1d:c3:81:ea:0f:30:38:20:a3:68:5b:ec:ca:
a3:41:f8:f5:84:fd:70:e0:55:77:e9:79:61:42:0e:
21:00:4b:10:c3:71:14:c1:6e:be:ac:9f:f9:60:32:
89:73:75:b2:91:59:aa:1c:14:0a:37:5f:aa:aa:6f:
63:aa:34:28:bf:3e:5b:ad:08:a3:df:e8:74:49:fe:
a0:18:10:2f:ad:c9:c6:70:8f:df:25:cd:b5:e5:be:
5f:30:82:71:01:55:ec:e2:bd:65:3d:18:f0:00:88:
d9:45:97:68:7b:9e:fc:17:af:10:8f:5d:f7:c1:10:
d1:63:ef:33:3b:a8:20:68:c0:b5:be:2d:47:46:a8:
4a:86:7b:5f:2a:d9:96:05:ae:f3:4a:64:67:f8:2f:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:E8:3E:1B:66:A0:57:C4:4C:C7:85:C2:CA:49:3C:8E:C8:92:72
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/_ZjoPhtmoFfETMeFwspJPI7IknI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.89.0/24
Signature Algorithm: sha256WithRSAEncryption
82:aa:98:7b:66:22:a1:39:7f:15:86:8d:0b:d0:b3:8e:af:4b:
32:8b:a0:78:e7:eb:ee:80:63:41:ae:cb:25:b0:49:2a:70:ff:
1f:7b:f3:ac:4b:fa:96:04:26:0d:ae:67:5e:d0:92:3c:5d:69:
98:7a:ab:c0:de:dc:cf:f5:4b:ec:2c:88:02:7c:26:10:8f:93:
b5:9f:0a:e8:c9:28:d7:de:48:12:a8:3f:b2:53:e2:7c:a5:de:
74:d5:f7:9b:7d:c2:6a:ce:86:7f:c7:e8:6e:d5:3d:e0:48:f2:
c7:34:a9:ec:ff:0b:29:3a:74:cf:61:ce:7c:91:c9:cf:47:32:
73:dc:a4:00:4f:7e:ba:ff:ec:39:48:75:8e:7b:00:be:72:a9:
66:81:23:d2:fd:21:38:22:e1:88:0e:6f:26:56:a5:ec:cc:f7:
72:f6:5f:52:b2:dc:5e:54:62:37:dc:7d:d0:57:03:e2:07:46:
4b:11:1c:05:41:82:68:5f:3b:cb:a9:7c:40:39:54:fd:d2:ca:
c5:e9:5d:5f:ef:6a:40:1a:df:6a:dd:c5:52:f5:82:ab:91:45:
d4:9c:89:56:49:41:0a:62:e2:93:48:83:d7:cf:17:cf:91:79:
f9:be:81:a2:9d:87:71:0c:7b:3c:ed:9e:43:f8:e9:70:ba:61:
84:15:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-fra.rpki-client.org