Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/4cmk3fsoabrcPCCCvNXR2mBW--Y.roa
File: 4cmk3fsoabrcPCCCvNXR2mBW--Y.roa (raw, json)
Hash identifier: vSpphP6NJYXc9ouEqsa1++YO3Hq7Mmls5tRF+ZMQ+xc=
Subject key identifier: E1:C9:A4:DD:FB:28:69:BA:DC:3C:20:82:BC:D5:D1:DA:60:56:FB:E6
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 03B8458F
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/4cmk3fsoabrcPCCCvNXR2mBW--Y.roa
Signing time: Sat 01 Jan 2022 11:00:32 +0000
ROA not before: Sat 01 Jan 2022 11:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50556
IP address blocks: 95.66.232.0/22 maxlen: 22
95.66.236.0/24 maxlen: 24
95.66.175.0/24 maxlen: 24
95.66.178.0/24 maxlen: 24
95.66.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62408079 (0x3b8458f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Jan 1 11:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1c9a4ddfb2869badc3c2082bcd5d1da6056fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:b5:5a:66:05:1a:cb:3e:fb:14:4c:7a:6b:
73:bf:5c:02:7d:91:c2:97:57:e0:af:b5:f7:d6:8f:
6d:b8:94:48:d4:47:83:0f:62:23:ec:6d:b4:25:39:
a9:6e:ad:e8:f3:24:a0:3c:ce:6c:21:02:0e:e7:b3:
f2:6e:a6:fe:a2:10:e4:0b:6e:8e:d8:ba:bb:1c:6e:
53:e4:7a:4a:2f:d6:0f:7a:54:28:5b:81:80:9f:f2:
6a:31:6d:d7:38:56:ed:d8:e0:23:ea:a9:39:c3:62:
e8:26:db:cb:b3:c0:35:31:76:11:86:4e:cd:4a:ce:
95:fc:10:33:f4:a0:98:a4:6e:bf:09:a4:78:97:9c:
56:7c:84:f0:ad:00:ec:09:b9:e5:e5:e3:75:d7:51:
2c:dd:12:d2:d3:77:7d:d9:d2:74:2a:a3:45:a2:ad:
71:e8:94:41:06:6b:3a:c8:6b:a5:c0:b2:77:1b:72:
3e:6f:ce:2f:b6:3b:1d:8b:47:a3:bc:fb:65:3b:5e:
69:ea:89:2d:fb:9d:3f:45:f0:92:1d:bd:78:29:f3:
41:6b:d2:76:71:25:96:1a:2b:9a:58:a0:b7:1c:fc:
e1:6a:dc:95:ad:22:5b:5f:bf:0e:bd:e3:e5:90:93:
23:c5:94:73:d9:a9:a2:93:d8:11:a9:b3:f7:4d:56:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C9:A4:DD:FB:28:69:BA:DC:3C:20:82:BC:D5:D1:DA:60:56:FB:E6
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/4cmk3fsoabrcPCCCvNXR2mBW--Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.175.0/24
95.66.178.0/23
95.66.232.0-95.66.236.255
Signature Algorithm: sha256WithRSAEncryption
37:41:ab:8c:3c:73:ca:65:c0:88:ce:dd:40:52:9f:6f:cb:b2:
c1:b8:3e:68:a5:4b:ea:3d:f5:39:07:b1:4d:d1:c5:d1:2f:0f:
5e:79:d2:ec:49:bf:57:4c:1e:b5:e6:d5:3a:71:73:2a:92:a9:
7a:b2:a6:39:5a:11:e3:e9:f5:b5:af:d7:c0:25:d6:0e:0d:bc:
aa:0e:aa:6e:14:a6:a7:19:aa:23:50:ad:2a:40:0f:98:5f:2d:
86:bb:a2:e6:e6:65:5c:b5:da:52:bf:b5:67:15:a0:9f:9b:f4:
5c:a0:a8:67:5c:b5:74:b2:88:0a:8d:b5:a5:bb:0d:b2:ee:3a:
62:25:5b:2f:4d:84:0c:13:74:14:1e:99:b6:be:2b:f6:e4:64:
64:a4:dc:f9:19:55:f2:0a:41:52:37:e7:3c:79:03:6b:f6:9e:
b1:f2:c4:a9:7f:13:ab:10:16:9c:af:d1:a2:d8:f2:6f:77:6d:
13:d3:4f:60:33:9a:eb:b4:61:85:fe:4a:1d:97:4c:30:f1:bf:
28:1c:c0:ed:ec:7c:4f:b4:36:a5:0e:45:bb:ab:a2:b8:40:ea:
85:27:49:30:2a:5a:ff:06:01:60:fc:74:e4:fe:ba:b3:9b:81:
ad:00:bf:7b:f6:8f:64:d0:99:5c:03:f5:e3:ff:d4:bd:33:51:
22:da:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org