Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/rRBH1OxepB-rtdOkxptqi0Z4Ae4.roa
File: rRBH1OxepB-rtdOkxptqi0Z4Ae4.roa (raw, json)
Hash identifier: Jzl7oQzcfoDoc0UfR4vgzpHjp6UBr2tbcYASO11xG2I=
Subject key identifier: AD:10:47:D4:EC:5E:A4:1F:AB:B5:D3:A4:C6:9B:6A:8B:46:78:01:EE
Certificate issuer: /CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Certificate serial: 0183F5D7763308AA6FC6C3E7E06B342EE366
Authority key identifier: EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/rRBH1OxepB-rtdOkxptqi0Z4Ae4.roa
Signing time: Thu 20 Oct 2022 14:41:21 +0000
ROA not before: Thu 20 Oct 2022 14:41:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24676
IP address blocks: 95.169.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:d7:76:33:08:aa:6f:c6:c3:e7:e0:6b:34:2e:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Validity
Not Before: Oct 20 14:41:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad1047d4ec5ea41fabb5d3a4c69b6a8b467801ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:36:c4:64:30:56:78:a3:df:23:4a:ae:0b:
a1:4b:e7:ce:7e:43:eb:a5:e1:bf:c2:7b:51:19:70:
ad:96:02:22:81:72:53:b8:c7:1a:35:79:24:39:8d:
49:3f:78:7c:8f:c9:60:64:d0:c0:66:f7:89:f8:af:
90:88:77:b3:2f:c1:86:fc:6b:39:49:94:15:cf:d2:
a9:79:7b:0b:a1:7b:4a:29:33:a8:6f:6f:4a:60:c5:
97:80:43:27:c6:8e:57:38:76:27:61:03:6b:2e:49:
f6:36:e7:4e:ff:b5:78:0b:f6:d0:7d:b9:52:17:04:
e1:06:73:d6:02:23:8b:b7:27:b5:a9:d5:2e:11:1e:
5b:9f:4e:47:57:1c:b6:a7:be:23:a2:c7:70:90:71:
4e:4e:72:bd:b8:0f:d7:30:c1:44:ac:e7:de:ca:88:
f2:f6:0d:c6:6b:0e:57:ac:14:2c:fc:56:cc:44:ba:
4d:e2:47:ac:ae:a0:34:2b:c4:65:48:5f:58:10:7e:
97:b5:fc:ca:1e:79:ce:11:52:bd:87:5d:a6:d4:4c:
a5:5a:d0:25:88:bb:cb:84:74:bc:fc:88:c7:59:41:
6d:11:de:23:4f:be:e6:cc:a0:7f:35:9b:3f:94:38:
66:37:b0:7e:44:4c:58:df:0e:75:4b:cb:38:67:6b:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:47:D4:EC:5E:A4:1F:AB:B5:D3:A4:C6:9B:6A:8B:46:78:01:EE
X509v3 Authority Key Identifier:
keyid:EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/rRBH1OxepB-rtdOkxptqi0Z4Ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:91:89:59:6e:19:d9:dd:c8:29:d7:48:26:06:78:e3:03:e4:
4d:fb:a8:e1:23:1b:aa:53:48:70:a2:46:9b:de:a8:d7:71:ae:
74:e4:55:ad:b1:eb:ff:26:89:7d:c0:12:b4:29:b1:98:64:4e:
ff:c8:81:68:32:f4:a2:e5:d2:e9:7a:47:50:1c:50:d1:2b:26:
3b:45:c3:f1:42:26:27:ba:c7:c7:6a:eb:a5:aa:81:dc:13:26:
d5:99:b6:a4:7c:7e:f0:10:8f:dd:bd:02:26:e5:eb:8d:bd:c6:
d3:a4:d3:d0:74:25:a2:98:f2:1e:fe:50:50:67:86:3b:64:ea:
a4:e6:2b:a0:d2:49:87:57:0e:28:b9:55:e3:b9:74:40:31:f3:
e5:a5:b4:0c:08:10:cb:01:18:1c:43:cb:f3:df:b5:42:26:7e:
7d:28:70:e9:7d:da:db:10:fd:14:15:48:84:3d:22:07:56:ec:
45:0b:1d:33:2a:87:80:3f:0b:68:48:4f:a3:ce:dd:2f:20:e8:
3d:c9:db:a9:2f:47:30:b0:b0:4e:52:02:91:bb:7b:b7:5a:e7:
50:a0:fe:0f:a9:16:6b:5a:da:3c:6b:57:25:ca:9a:56:2a:66:
58:28:51:22:26:c0:b0:57:ef:4f:33:c3:87:54:4d:d4:b3:fc:
7a:cc:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:12 2023 by rpki-client on console-fra.rpki-client.org