Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/Cpr0ZPjx3ROcM9MupIusczIJeF8.roa
File: Cpr0ZPjx3ROcM9MupIusczIJeF8.roa (raw, json)
Hash identifier: qxOvvHj3ZQu+KmWPeoXDM4pPLgPVrJfHytZNYN2Puv0=
Subject key identifier: 0A:9A:F4:64:F8:F1:DD:13:9C:33:D3:2E:A4:8B:AC:73:32:09:78:5F
Certificate issuer: /CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Certificate serial: 0A4B58C7
Authority key identifier: C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/Cpr0ZPjx3ROcM9MupIusczIJeF8.roa
Signing time: Sat 01 Jan 2022 05:57:57 +0000
ROA not before: Sat 01 Jan 2022 05:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 188.95.141.0/24 maxlen: 24
188.95.140.0/24 maxlen: 24
188.95.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172710087 (0xa4b58c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Validity
Not Before: Jan 1 05:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a9af464f8f1dd139c33d32ea48bac733209785f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:9c:42:85:58:93:8e:fb:7d:a5:a2:63:25:
b9:46:ba:43:57:c2:7d:7f:a4:f2:82:80:1c:59:c1:
a4:ca:7d:d3:5f:53:12:2c:62:ae:6d:14:a8:37:4d:
f5:b8:70:6e:75:d5:88:00:e5:9c:e5:83:f7:ba:00:
fd:ca:0d:5b:26:37:a6:05:32:d1:b8:02:91:95:90:
67:31:b8:aa:f8:8e:f4:86:80:70:a1:5a:c5:6d:58:
20:b9:44:16:c8:b7:3c:f6:d6:78:8f:58:30:81:cb:
6c:c5:fd:20:f8:c1:b0:5a:16:68:51:87:ee:80:76:
b6:60:8f:6a:0b:c0:0b:59:e1:f8:58:cc:0a:f4:79:
b0:ac:da:c4:e9:72:12:2b:05:1b:c9:ac:8e:53:83:
f1:7c:ac:ed:65:28:14:ab:2d:37:c9:13:4f:6c:3c:
69:59:aa:81:31:d8:f8:e2:ce:a5:00:9b:f9:81:86:
d0:01:6f:de:20:f0:45:4b:65:6e:e3:a7:64:47:c3:
02:f0:e9:f8:82:e7:63:34:2e:51:ec:91:4a:80:f0:
63:2b:9a:d8:2e:4d:51:c2:19:20:cc:5d:10:10:ba:
90:7d:79:63:b2:bb:a1:44:62:2a:5d:42:91:54:13:
bd:0c:58:26:02:7e:32:01:a0:8f:7b:05:a9:69:8c:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9A:F4:64:F8:F1:DD:13:9C:33:D3:2E:A4:8B:AC:73:32:09:78:5F
X509v3 Authority Key Identifier:
keyid:C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/Cpr0ZPjx3ROcM9MupIusczIJeF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.140.0-188.95.142.255
Signature Algorithm: sha256WithRSAEncryption
49:c0:68:a1:6e:4d:ba:0a:d9:dc:67:3c:c0:0b:e9:91:ec:aa:
b5:67:44:c7:8a:b6:99:61:17:46:80:61:f8:de:a0:9f:08:66:
5a:46:3b:d9:14:3a:71:85:ad:cc:cc:fa:06:84:d8:8d:ad:40:
8c:28:2f:ec:6d:21:fd:6b:dc:9d:38:5f:b7:59:2c:7a:ad:04:
80:38:dc:8e:d0:a8:ff:48:5e:63:47:51:de:57:21:a1:f6:0f:
a9:be:0d:d5:41:39:30:f4:cb:0b:91:c8:72:ef:6c:da:c8:44:
98:9c:3e:a8:e0:12:97:2b:15:6b:c6:4e:22:9c:f2:74:92:35:
e5:5a:49:62:88:bb:ee:5c:1e:59:2c:b0:f3:b5:46:15:8b:95:
ca:d8:55:7a:ef:6a:b3:11:4c:a8:ce:bf:05:b5:4a:d5:f8:63:
be:08:7a:fd:29:e9:15:0a:2c:6a:0e:9e:13:fc:2e:32:dc:fc:
a6:e4:9f:6f:69:93:7e:6f:d6:78:a8:4d:cc:b5:5e:fd:cc:15:
25:d4:a5:45:85:9d:f2:87:9c:58:bf:1b:df:3d:a1:c0:04:78:
63:af:7f:fb:3f:22:14:5c:0c:d7:b7:df:5b:8b:62:77:00:a5:
36:b7:42:bf:17:e7:8a:8c:06:35:16:9d:a2:f2:ce:f4:a0:a9:
9a:ef:85:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:16 2023 by rpki-client on console-ams.rpki-client.org