Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RW-AZFkhuiHYVLw_QnLv6pEdslc.roa
File: RW-AZFkhuiHYVLw_QnLv6pEdslc.roa (raw, json)
Hash identifier: xjpXPUlPOZY41MXxj2DnNN16/1IaCS3hjL228TvIt7g=
Subject key identifier: 45:6F:80:64:59:21:BA:21:D8:54:BC:3F:42:72:EF:EA:91:1D:B2:57
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0184D2A9EA5D53534233E81B3AF56A534E4C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RW-AZFkhuiHYVLw_QnLv6pEdslc.roa
Signing time: Fri 02 Dec 2022 11:47:41 +0000
ROA not before: Fri 02 Dec 2022 11:47:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3229
IP address blocks: 95.47.252.0/24 maxlen: 24
93.170.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:a9:ea:5d:53:53:42:33:e8:1b:3a:f5:6a:53:4e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 2 11:47:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=456f80645921ba21d854bc3f4272efea911db257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:8f:9c:78:0e:ad:e0:b6:fd:66:37:1d:00:
9b:e9:93:97:89:35:ec:f0:e0:e0:36:13:28:27:2a:
bd:1b:af:ff:ef:c1:db:00:62:c5:85:48:ea:26:f5:
27:2b:99:20:77:fe:0b:34:19:18:1c:86:96:c1:59:
dc:15:2c:da:80:ba:1e:43:e0:80:76:fc:f7:73:42:
46:70:f5:90:57:87:78:46:f8:53:bb:05:2b:00:2b:
82:1f:c2:62:6b:eb:11:f8:14:28:25:6d:66:c5:df:
cd:e1:bd:5e:17:93:9e:fa:ca:e2:26:b4:c6:c5:42:
e2:be:2a:e3:a8:d7:c9:e9:d0:d0:55:e5:91:c2:e8:
6e:31:9c:d0:12:91:81:cc:68:d2:87:7d:2e:ee:28:
fd:02:4b:c0:24:0b:2a:64:08:73:92:eb:42:e5:ea:
94:84:64:0b:83:db:b8:f4:93:c6:79:23:ce:cb:78:
c0:4a:23:e6:a5:81:a3:35:7a:47:69:a7:4a:07:3d:
ea:83:fc:c2:6b:4d:2b:df:12:1c:1f:eb:7e:fc:63:
d8:c7:12:fb:d1:12:83:48:22:1b:c8:9a:c1:51:ec:
94:fc:ca:03:cd:1e:da:ee:f6:f4:b7:e0:51:90:9d:
7c:7d:76:64:59:86:45:fc:9e:19:99:c5:2d:07:b0:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6F:80:64:59:21:BA:21:D8:54:BC:3F:42:72:EF:EA:91:1D:B2:57
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RW-AZFkhuiHYVLw_QnLv6pEdslc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.27.0/24
95.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:cd:d4:dd:e9:53:d3:06:78:6b:cb:5b:8a:47:ec:30:be:77:
d0:17:42:3e:26:04:69:4c:1a:0b:95:14:28:7f:95:60:61:d4:
08:cf:74:fb:52:16:36:ca:a8:47:82:e7:d1:d9:d7:79:41:1c:
96:bf:50:7b:83:b1:a8:6c:ed:cf:d7:3a:ac:b7:50:a4:94:34:
76:23:42:ac:e7:9a:47:c3:30:48:0a:5f:68:14:2e:78:69:45:
42:17:a3:c0:2c:3b:b9:2c:d7:de:61:fd:45:39:76:fe:36:b8:
41:46:24:d3:fa:59:d4:63:17:c1:83:d5:1f:40:a4:16:70:f3:
51:2b:3e:14:3a:3b:21:89:67:3f:03:58:6d:c5:4d:69:85:d4:
c0:6d:ad:a5:f4:ca:fe:7f:2d:ff:0d:4c:25:0d:7b:79:9f:70:
c8:7b:3b:48:b8:08:1f:55:66:1e:e0:09:b5:e6:68:d1:10:e6:
37:0f:6b:29:e7:ad:a9:df:8e:1b:08:d4:75:6a:aa:3f:08:88:
31:62:0d:15:56:8f:6e:7e:b6:00:e6:1f:79:e5:e6:3d:60:12:
4a:ea:b9:9a:c5:ff:28:96:09:76:2c:6a:fa:d4:8c:fe:66:c1:
3b:ad:7f:8e:3a:e2:d7:d7:a5:a6:36:0c:1a:9c:da:e9:44:7c:
93:85:a9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org