Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1ZHCJk_k-2EjlRuf2wxbfsm1ayY.roa
File: 1ZHCJk_k-2EjlRuf2wxbfsm1ayY.roa (raw, json)
Hash identifier: lm6Yp3uRQpSu1FWDXMTowuS6JWPuP5j3yVBt/dSBAKI=
Subject key identifier: D5:91:C2:26:4F:E4:FB:61:23:95:1B:9F:DB:0C:5B:7E:C9:B5:6B:26
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018264A9785288BD73FBBC04B2CFE4E9CE9D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1ZHCJk_k-2EjlRuf2wxbfsm1ayY.roa
Signing time: Wed 03 Aug 2022 17:03:24 +0000
ROA not before: Wed 03 Aug 2022 17:03:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60245
IP address blocks: 95.46.148.0/24 maxlen: 24
95.46.149.0/24 maxlen: 24
93.170.92.0/23 maxlen: 24
31.148.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:a9:78:52:88:bd:73:fb:bc:04:b2:cf:e4:e9:ce:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 3 17:03:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d591c2264fe4fb6123951b9fdb0c5b7ec9b56b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:f1:16:80:f5:2b:7d:4a:bc:d9:73:66:46:
01:23:85:4f:3d:ec:a2:9b:22:81:20:dd:7e:72:aa:
6d:2b:d0:60:61:13:03:c8:ad:a2:6a:3f:84:a1:ec:
33:af:6d:df:00:1c:e5:0f:86:cc:6b:f3:0f:85:a0:
99:d7:65:a2:58:f8:15:32:5f:45:08:ea:7d:4f:8a:
79:91:7a:16:04:a2:5e:ed:69:07:d9:f0:19:4d:b8:
57:54:6a:eb:22:12:79:4e:cc:d3:7b:fa:eb:a0:99:
b5:c3:7f:fe:83:34:e9:73:fc:1a:ee:13:98:46:b1:
06:05:c1:a9:fd:8f:0a:cb:48:f5:27:62:29:0b:6d:
ec:16:38:3b:bd:3e:08:4e:18:06:fb:76:f3:a5:ad:
a3:23:eb:44:1c:b1:7b:9b:c0:d3:9e:fd:95:f7:2d:
ce:b2:8f:9c:dd:8c:e8:97:dc:2e:02:ee:96:12:1c:
6a:df:82:9b:6f:4a:64:a5:37:19:dc:1d:fa:dd:93:
6d:d7:3f:98:80:48:3c:4d:7c:d0:51:66:84:c4:40:
d2:ce:19:22:ae:6c:64:5f:04:ab:2c:32:b9:8c:07:
c2:6d:00:f0:12:18:ea:2d:83:01:7d:e0:27:57:45:
5f:82:c7:8d:9c:3a:9f:8e:54:b8:49:8f:9e:ec:76:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:C2:26:4F:E4:FB:61:23:95:1B:9F:DB:0C:5B:7E:C9:B5:6B:26
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1ZHCJk_k-2EjlRuf2wxbfsm1ayY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.172.0/23
93.170.92.0/23
95.46.148.0/23
Signature Algorithm: sha256WithRSAEncryption
89:d5:c1:07:da:05:c6:37:09:25:57:66:c7:be:88:e0:8e:06:
8b:31:55:1c:72:55:21:d8:53:26:ab:6a:e0:78:5e:9e:72:46:
f7:2f:aa:0a:55:ca:d5:dd:57:5d:90:73:af:55:55:1c:83:9c:
fc:67:d2:a1:d1:a4:38:2a:e1:05:68:ee:4f:e3:d0:f7:44:62:
87:6f:bc:1a:c0:3c:d3:29:a5:fb:de:0b:62:0a:c9:86:79:a4:
8b:2b:9b:dc:01:b4:94:b4:70:20:0e:99:b4:aa:50:9c:48:04:
d5:8b:58:90:16:9b:a8:c1:35:dc:aa:fd:86:8f:88:4a:86:31:
9a:e0:ff:13:33:72:87:53:42:1f:1d:6a:3c:7f:32:4c:c3:6a:
df:ea:aa:9d:7f:df:46:49:8a:03:fa:35:bf:c3:ed:3e:24:08:
b4:a0:7f:29:68:d2:6f:1c:c2:99:f2:a4:9c:3b:62:15:10:cd:
d4:7f:69:24:8a:bd:5d:b7:68:c7:65:13:89:7b:e5:20:ac:2c:
a1:49:7e:ca:44:bb:fe:5b:cc:9e:82:ab:54:83:d9:f4:d2:ef:
b5:cd:3e:c7:2f:46:55:d0:d9:1a:14:ea:ea:df:63:bc:81:d9:
be:62:f6:39:a2:15:16:c6:c7:d4:dd:3b:a1:2c:94:e3:9d:32:
f7:0a:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:48 2024 by rpki-client on console-ams.rpki-client.org