Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_HcwRxjHtkhvlKEX4WFg0gnlGd8.roa
File: _HcwRxjHtkhvlKEX4WFg0gnlGd8.roa (raw, json)
Hash identifier: s9uXjvEEpfEIJ5BagYwZxiSbi5nSjaKXH5XhtDfdIhU=
Subject key identifier: FC:77:30:47:18:C7:B6:48:6F:94:A1:17:E1:61:60:D2:09:E5:19:DF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27CD0E48
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_HcwRxjHtkhvlKEX4WFg0gnlGd8.roa
Signing time: Sat 01 Jan 2022 16:08:53 +0000
ROA not before: Sat 01 Jan 2022 16:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56639
IP address blocks: 95.46.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667749960 (0x27cd0e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc77304718c7b6486f94a117e16160d209e519df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:2b:ec:94:f2:9f:b5:77:06:e4:ac:eb:bf:
dc:df:8e:48:ef:cc:61:1f:01:ca:35:3e:9e:53:ef:
22:75:e0:fe:b8:a3:c8:8f:01:c5:1c:9d:3c:03:53:
23:f4:38:58:6f:7f:a4:7b:80:92:33:5b:2e:2c:73:
f0:a5:1b:82:e9:72:02:48:05:47:2c:c8:c7:d6:06:
d6:41:6f:73:81:9c:eb:1f:eb:3b:90:8a:9b:d9:03:
af:e9:a2:bc:bf:d2:34:6d:53:60:08:28:ec:f2:14:
6d:ff:9a:a9:f6:22:7d:4d:97:a5:2b:97:50:70:10:
8b:90:2d:b5:b7:9a:39:9c:44:cb:2e:fb:ab:f3:10:
e7:4c:f4:15:06:3b:72:c1:fa:d0:dc:99:04:08:93:
55:ca:ef:30:46:66:e5:80:20:e4:90:ae:5e:65:aa:
a7:63:da:70:83:ab:55:bd:eb:2d:a2:c6:98:07:a6:
8a:83:88:ea:61:7d:65:4e:46:a0:eb:9a:b7:e8:08:
7f:3c:89:39:d4:9e:5a:61:3f:4a:92:81:70:94:2a:
64:65:8c:12:64:d4:b8:18:fb:9e:32:33:1b:3f:36:
00:5b:91:4a:2d:38:51:60:3f:93:e5:8f:67:5c:0b:
96:31:cc:6c:18:9b:27:54:ca:58:e5:a7:98:4d:8d:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:30:47:18:C7:B6:48:6F:94:A1:17:E1:61:60:D2:09:E5:19:DF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_HcwRxjHtkhvlKEX4WFg0gnlGd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.143.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f4:74:51:01:b0:21:56:98:db:0e:6d:bd:80:7c:9d:4c:c5:
02:3c:a1:a1:d5:bc:2d:67:8c:76:36:75:8a:6f:1a:8d:34:4f:
13:f8:9f:4e:fa:b3:c6:b4:ff:ca:11:4a:5e:56:a7:da:5b:27:
b5:f9:bf:30:62:24:d2:51:a9:be:e1:3e:6b:73:a4:af:0a:fc:
be:90:b0:6e:ae:09:54:a8:c4:da:91:e5:ad:f9:78:2e:93:e2:
6e:21:f0:0c:ff:95:b0:ca:cd:a5:08:19:2c:25:a2:92:86:51:
03:e2:78:47:93:1a:11:ab:32:03:24:01:64:94:05:1f:ae:4a:
96:1c:90:a1:ef:b3:fe:68:01:c9:56:fb:7b:1f:b0:2b:c6:31:
6d:45:99:e5:8f:a0:46:b8:c2:1a:12:69:d1:6f:8e:d0:40:c1:
4d:a8:e8:65:74:23:f2:3b:9a:d2:09:3a:56:b1:aa:38:38:c7:
11:82:87:ab:41:56:cc:8e:2e:12:30:28:13:69:fe:93:0f:a9:
29:94:5f:ac:d1:68:16:cc:30:90:00:f6:c2:7f:86:84:fc:c6:
f1:2b:68:da:34:d0:94:e4:63:62:23:d8:f7:69:aa:6e:56:3f:
22:56:e4:0a:fb:0b:a8:2d:4c:cb:52:a1:06:e2:3f:14:27:e2:
b6:09:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org