Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5JyQxlw9W6FJkBxGE_VeAEi839U.roa
File: 5JyQxlw9W6FJkBxGE_VeAEi839U.roa (raw, json)
Hash identifier: +cRo7hTxpFLCrBBukFxq5dTZAIEz5NslJE+levEruXM=
Subject key identifier: E4:9C:90:C6:5C:3D:5B:A1:49:90:1C:46:13:F5:5E:00:48:BC:DF:D5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 282EBEFE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5JyQxlw9W6FJkBxGE_VeAEi839U.roa
Signing time: Sat 01 Jan 2022 16:09:47 +0000
ROA not before: Sat 01 Jan 2022 16:09:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204485
IP address blocks: 95.47.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674152190 (0x282ebefe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e49c90c65c3d5ba149901c4613f55e0048bcdfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:d0:83:26:5f:10:83:59:0d:30:bb:23:78:
0a:ca:24:f3:e0:e7:1d:64:e2:e5:62:3a:2c:cf:d4:
20:96:47:5c:b9:43:ee:e3:e0:80:df:c8:e4:fe:5b:
06:f5:cc:da:99:bb:7b:d7:a8:bb:c5:82:9a:ff:3f:
46:32:7c:8b:ea:dc:39:74:2f:16:1b:19:e1:19:e6:
20:4e:b5:60:94:73:a6:1c:21:74:52:47:34:df:25:
fb:e8:e7:c9:31:fd:c8:29:bb:94:b0:4f:ea:c4:e3:
4b:69:0e:e6:11:8c:14:77:ec:3d:fd:c0:24:68:59:
a4:1f:5d:70:d6:e9:5b:ac:95:63:c7:98:7a:16:b7:
4d:20:fb:9d:9d:5a:12:dd:b3:92:7c:87:32:a5:21:
21:a2:5b:71:83:98:0e:54:7c:b2:6b:91:b4:a6:bb:
a7:f4:e0:7d:28:d9:20:e6:9c:d1:c9:51:71:b7:9c:
fd:22:c9:f7:64:02:77:0f:9b:8f:1e:2b:37:cf:7a:
e0:31:7e:54:38:7e:41:f7:cf:f1:09:be:35:0e:1b:
43:6a:a0:20:01:59:3e:f0:50:56:51:11:04:02:38:
3a:16:20:12:2b:2f:10:84:09:a9:07:9f:e5:91:40:
b0:1a:58:82:32:36:39:65:bd:d4:92:b3:58:95:8f:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:90:C6:5C:3D:5B:A1:49:90:1C:46:13:F5:5E:00:48:BC:DF:D5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5JyQxlw9W6FJkBxGE_VeAEi839U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.172.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f5:9d:96:d7:a6:92:8c:c8:84:c4:e3:26:2e:05:e9:ec:01:
2b:77:3a:6d:ad:13:2a:cc:27:69:dd:4c:5d:0a:0f:4c:50:60:
10:22:c7:47:0f:e6:49:b9:e8:a5:96:b9:9d:4c:2c:37:a8:d6:
cd:fd:8e:be:a9:6c:5e:75:9c:51:dd:cf:74:06:17:6e:7f:a0:
54:83:ad:9a:ce:11:ed:8a:63:eb:b9:f8:82:73:74:1b:1a:16:
d9:ee:65:4e:c5:c3:8c:60:1a:72:96:0b:fb:1c:70:8a:43:3b:
79:15:9c:d4:26:47:62:8b:20:2b:e1:0f:df:99:79:54:aa:54:
86:81:08:d0:f1:27:a1:fd:e9:d4:b8:a2:54:6c:f3:04:34:44:
00:e2:11:49:76:34:2f:be:82:fb:67:96:b4:bc:65:51:89:74:
54:6b:34:eb:33:47:78:57:84:69:53:84:1c:c1:ef:23:26:74:
2d:de:4a:c3:2c:9c:38:73:a7:f1:95:ed:0d:2a:ad:72:eb:a3:
dc:f6:78:1f:02:10:c1:be:cf:bf:d9:d7:e1:12:be:58:ac:5c:
ac:90:b5:a0:27:8a:41:62:6a:52:95:a7:c7:d1:5b:97:54:b2:
85:40:66:d4:05:fb:6b:2b:cd:30:aa:b4:cb:3d:d6:62:50:02:
50:f4:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org