Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/xDm9LpQq4S8b5Ftvrb1TfTqKKww.roa
File: xDm9LpQq4S8b5Ftvrb1TfTqKKww.roa (raw, json)
Hash identifier: U9tgp/TKhIS6ZfU1lP1jjBN/p/4q8wMDqhyX8lG0iHM=
Subject key identifier: C4:39:BD:2E:94:2A:E1:2F:1B:E4:5B:6F:AD:BD:53:7D:3A:8A:2B:0C
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 076584
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/xDm9LpQq4S8b5Ftvrb1TfTqKKww.roa
Signing time: Mon 30 May 2022 09:53:13 +0000
ROA not before: Mon 30 May 2022 09:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44909
IP address blocks: 195.66.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484740 (0x76584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: May 30 09:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c439bd2e942ae12f1be45b6fadbd537d3a8a2b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:94:cb:db:bf:03:5c:f8:24:30:75:79:7e:
84:a4:55:4b:ff:5a:9e:85:f0:63:29:02:dd:0e:0f:
c9:97:2a:1a:b5:df:60:c0:25:48:63:99:79:b9:45:
ae:aa:fb:73:75:71:a7:f8:6a:32:28:dd:29:b4:b3:
fe:e2:6c:07:c6:ee:ba:56:73:03:86:5e:b4:d5:7c:
60:3c:05:0e:1f:9d:0e:9a:b8:f4:a7:6e:0d:21:b1:
a9:dc:a5:ff:a1:4d:14:16:02:af:74:7f:ed:aa:07:
e6:05:6b:61:85:46:5c:68:bb:fc:d8:2a:12:fd:3a:
b7:84:23:a6:ab:22:d2:da:65:0e:85:f9:c8:3a:80:
c9:dc:1b:f8:7b:9a:3c:06:ac:29:60:ce:23:d8:2f:
c5:09:4a:c9:d2:4e:5f:c8:f7:8c:18:0f:69:4f:5f:
95:3a:cc:7d:9f:95:ab:4c:85:ea:b3:dc:89:72:c3:
27:b4:36:8c:50:5d:c3:08:14:09:19:72:0e:6f:96:
c6:a3:25:d5:17:c9:65:1c:eb:ca:de:94:af:4a:cd:
e6:d5:39:54:9d:08:0f:bf:18:ea:57:c9:20:17:cf:
66:4a:1a:8c:48:b5:e2:0c:c3:db:ae:a2:8c:b0:da:
55:e8:49:f8:1c:ce:fa:f5:7d:72:a8:8d:32:75:eb:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:39:BD:2E:94:2A:E1:2F:1B:E4:5B:6F:AD:BD:53:7D:3A:8A:2B:0C
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/xDm9LpQq4S8b5Ftvrb1TfTqKKww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.124.0/24
Signature Algorithm: sha256WithRSAEncryption
39:71:89:eb:df:95:3b:d7:be:5a:2e:11:0e:35:19:94:e9:1a:
f2:a2:dd:1d:fd:0e:eb:dd:9f:78:0e:20:f0:bc:0a:1e:83:b2:
8d:a2:d2:f5:f6:72:76:d8:29:be:2b:a9:b6:dd:e4:bd:1e:63:
de:08:5d:38:a3:dd:34:b9:5f:ce:a4:9f:be:d6:42:90:ec:cb:
4a:8a:65:06:f4:5a:7d:71:62:c9:09:cb:e9:eb:fb:32:cc:af:
81:48:1c:69:4b:b2:e9:52:ee:d7:9e:10:19:a4:77:20:e2:93:
eb:33:60:3a:14:cd:d7:28:1b:9b:39:65:3d:e7:f3:e4:57:a5:
a3:ce:25:03:f5:1b:bd:77:da:46:80:af:25:ac:b1:93:44:7e:
06:6d:db:12:f6:e7:cb:d9:25:b1:75:ad:1c:67:54:22:e2:fd:
6d:0e:f4:78:a8:63:68:da:da:a5:ba:5b:30:63:0d:9c:26:3e:
49:f5:93:f0:ad:35:46:8e:d3:0b:03:4f:1e:7b:34:3f:84:f8:
08:df:3d:93:cf:92:b0:bd:4f:20:d9:8c:2c:22:66:50:02:27:
d6:09:1d:3d:7d:fd:eb:f5:bc:1b:b7:93:85:a8:70:72:c5:67:
d4:4d:6b:03:b5:78:8c:e9:a1:8b:fe:5a:40:07:40:1a:d6:b0:
3e:8c:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:45 2024 by rpki-client on console-ams.rpki-client.org