Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/gZ4pqZTE5_eWr5VqttZq4weArig.roa
File: gZ4pqZTE5_eWr5VqttZq4weArig.roa (raw, json)
Hash identifier: A2beP/bHPiQk8ZtBc7a596xbs24iD9zRr3s2ou3vL9A=
Subject key identifier: 81:9E:29:A9:94:C4:E7:F7:96:AF:95:6A:B6:D6:6A:E3:07:80:AE:28
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 020ADF64
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/gZ4pqZTE5_eWr5VqttZq4weArig.roa
Signing time: Mon 31 Jan 2022 09:08:05 +0000
ROA not before: Mon 31 Jan 2022 09:08:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209279
IP address blocks: 188.95.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34266980 (0x20adf64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 31 09:08:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=819e29a994c4e7f796af956ab6d66ae30780ae28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:28:27:52:f0:91:4e:02:65:c8:57:5a:c5:
e5:cb:0a:89:99:87:bc:c8:c7:c7:77:02:be:25:39:
7c:01:d2:73:1c:53:51:64:c4:aa:1c:87:65:1f:20:
dc:5e:af:5f:16:52:82:58:55:45:a2:30:ca:af:66:
16:df:1f:bc:41:d2:ea:7d:f6:52:6b:68:74:c3:f6:
47:21:7d:ad:aa:ef:e1:1f:55:7e:88:d8:05:27:6e:
5f:15:a5:f6:cc:30:6b:fd:96:73:5f:50:5c:5b:45:
3a:37:ae:af:4c:c2:45:a7:56:0e:8c:8d:65:59:62:
d4:da:b2:8a:1c:f5:ab:8a:81:66:58:ef:59:86:d7:
0f:84:d3:1e:c0:e4:44:05:f5:4a:10:d2:3a:84:79:
9c:cd:b1:98:6f:d4:0f:88:7f:83:01:bc:96:18:68:
68:c8:2f:8d:eb:65:2b:63:c2:97:e5:33:cc:c1:c5:
4c:9e:a6:00:04:e2:4a:06:1c:a9:67:b8:40:eb:69:
f1:3e:02:bd:f1:c0:7d:cf:71:fa:2c:58:f3:23:02:
ea:e7:a3:b9:7d:91:05:8e:48:50:fa:6f:ec:ac:08:
0a:92:82:11:64:72:ed:00:1c:f7:4e:b3:26:e9:e0:
c9:fc:88:b1:8e:2e:08:0a:24:fb:75:83:dd:08:be:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9E:29:A9:94:C4:E7:F7:96:AF:95:6A:B6:D6:6A:E3:07:80:AE:28
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/gZ4pqZTE5_eWr5VqttZq4weArig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:84:d2:d7:5f:fe:13:93:d6:9a:37:94:89:17:72:f5:f3:38:
86:95:b5:04:a9:12:3b:77:b2:f4:1e:12:61:1b:78:c6:14:40:
28:de:a2:98:1c:46:d1:29:02:f0:9b:3f:4e:a4:10:66:33:ea:
6e:f1:1c:4f:a7:3b:04:ac:6f:9d:1e:1f:37:6b:fd:e0:53:54:
d6:c4:2f:2d:f1:6a:44:56:d9:f6:4f:1a:a3:e8:21:83:f8:65:
c6:cd:b1:28:6f:2e:d6:37:99:f5:e5:92:4b:8a:d6:66:21:d9:
d2:cc:f2:ac:3c:e9:c9:1d:bd:03:4b:15:f9:aa:c3:cc:b4:8d:
c1:ea:06:d2:27:22:1f:84:28:3f:fb:d6:c5:ce:87:63:f7:cc:
30:d2:6e:ed:52:06:bc:5f:0d:c6:4c:8b:cd:59:ed:71:56:8a:
66:69:bb:ee:3f:12:3f:fe:d0:be:1b:5a:f0:7a:32:c0:74:92:
cc:a3:3b:0a:2e:66:b4:d4:85:5e:28:cd:40:e7:07:09:59:02:
39:ae:31:3d:20:f7:d5:d5:b4:cd:bd:6c:d3:dc:4e:39:fe:46:
b8:67:12:9a:f8:bc:e7:0b:e9:21:4d:f9:af:69:41:a5:12:bc:
af:d3:42:f4:0c:9e:66:0b:5a:26:b0:5a:4d:20:1e:9a:5d:b2:
28:07:25:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:47 2023 by rpki-client on console-ams.rpki-client.org