Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/QRWt8sMphAd22uATav_8n3McTlU.roa
File: QRWt8sMphAd22uATav_8n3McTlU.roa (raw, json)
Hash identifier: mvlFp9oVcBTdpeMU1kSVQ5snfkgHbfa5nMpgaWHHyMc=
Subject key identifier: 41:15:AD:F2:C3:29:84:07:76:DA:E0:13:6A:FF:FC:9F:73:1C:4E:55
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 1244B316
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/QRWt8sMphAd22uATav_8n3McTlU.roa
Signing time: Sat 01 Jan 2022 16:11:15 +0000
ROA not before: Sat 01 Jan 2022 16:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30734
IP address blocks: 195.95.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306492182 (0x1244b316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jan 1 16:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4115adf2c329840776dae0136afffc9f731c4e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:c9:ac:69:59:9c:fb:b9:25:fa:60:de:6f:
8c:c0:cf:cb:83:f1:8b:2d:f3:e9:59:1c:4c:8d:3a:
5c:b3:72:46:fa:6f:3f:e3:64:4b:2a:fd:06:c5:1a:
a3:cc:a0:6d:f8:b3:ef:7a:38:ce:74:b1:b4:39:47:
f5:1f:3a:78:ed:ee:a2:ac:4d:fa:52:30:89:95:0f:
6a:d2:aa:19:5e:50:e7:70:a3:e2:41:c1:78:0b:33:
df:ec:6d:19:0c:1b:34:79:03:af:0f:25:d1:fd:5d:
fd:2e:47:b3:f0:3c:06:53:95:6c:c8:d5:7d:92:85:
bd:38:eb:41:18:c8:ce:a0:55:9e:11:04:08:d8:23:
5a:8d:ca:bc:16:c3:71:6a:02:0f:fa:7a:5d:06:b6:
db:f3:5e:7a:de:dc:a9:9f:a7:de:81:d3:fb:04:87:
74:9c:e1:47:f8:c0:70:f6:86:8c:1d:11:c2:a2:a9:
52:87:e1:4e:83:6b:6f:6e:c7:7b:a5:04:b5:74:21:
8f:3e:04:64:77:5e:4e:0e:32:1e:d6:b3:f9:be:68:
1d:11:95:f5:9c:a1:de:56:25:a4:c5:f4:a5:cf:84:
c2:bd:03:32:2a:07:f1:7c:2d:df:9b:a3:34:90:53:
2f:d4:d1:cb:05:ce:d0:22:e7:e4:f3:08:cb:8c:3a:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:15:AD:F2:C3:29:84:07:76:DA:E0:13:6A:FF:FC:9F:73:1C:4E:55
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/QRWt8sMphAd22uATav_8n3McTlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.160.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e1:fa:7a:4d:7a:d9:16:16:fd:98:d1:06:84:71:0c:c1:d2:
31:eb:d0:98:8b:aa:b5:e0:2a:6e:23:73:46:70:30:f8:a9:65:
3f:d1:30:7f:2a:12:b9:e9:33:3f:2c:bf:16:a9:f1:85:8a:47:
b6:0d:29:c3:13:b0:4c:54:ee:84:84:b6:bb:d6:f5:e2:62:34:
7a:5e:69:69:e7:36:d7:bb:8f:01:96:70:35:28:fa:05:89:4c:
da:b9:f2:06:34:27:e9:31:a1:ce:80:95:04:46:b4:7e:62:b3:
0a:71:85:76:f5:46:ae:87:ec:49:6e:a3:8b:25:59:cf:c9:26:
60:e8:65:08:6d:39:53:cd:75:0b:ca:07:f0:e9:d1:fc:84:47:
54:1b:18:cd:f5:2c:97:be:38:db:4b:60:9e:9e:3d:dc:bb:bf:
7b:c5:1e:d6:ab:cc:08:a0:48:be:e1:4c:dd:99:74:91:75:52:
e7:0b:32:df:29:5c:ac:d8:9d:4e:64:92:0a:e3:07:a0:fa:b5:
6f:92:3c:24:0e:72:b4:f4:37:8d:76:fe:bc:df:fb:0d:a6:3b:
07:b4:61:6b:48:72:84:d4:c6:18:07:3c:5e:61:9d:ca:cd:ec:
76:f2:47:41:6e:e9:9e:96:96:0f:f5:3a:1d:8d:bf:a7:d1:e0:
b4:51:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org