Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oWlYtVdEX-T9irwTTJdhVGp7ODE.roa
File: oWlYtVdEX-T9irwTTJdhVGp7ODE.roa (raw, json)
Hash identifier: ys84OqF4Bh94A5UWMr/iAdMaJ4AY1qy4/f0/S/wqje0=
Subject key identifier: A1:69:58:B5:57:44:5F:E4:FD:8A:BC:13:4C:97:61:54:6A:7B:38:31
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 29B3DC6F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oWlYtVdEX-T9irwTTJdhVGp7ODE.roa
Signing time: Mon 02 May 2022 11:11:56 +0000
ROA not before: Mon 02 May 2022 11:11:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210390
IP address blocks: 95.46.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699653231 (0x29b3dc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 2 11:11:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a16958b557445fe4fd8abc134c9761546a7b3831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:18:54:a0:f4:2f:05:30:23:01:40:5a:c4:
75:73:79:33:81:37:d4:9d:43:72:10:75:55:77:46:
74:d9:30:4e:da:4c:6e:63:fc:75:88:da:a7:d5:c6:
03:0c:c2:52:1e:97:c5:33:41:18:7d:fc:65:89:2c:
d5:cb:ed:1a:48:e7:02:19:b1:4a:d6:d3:ef:e9:21:
27:77:bd:c8:6e:df:88:0a:04:79:3a:c7:8c:96:b9:
cb:48:5d:59:61:b9:e7:f4:19:f1:bc:95:7e:c2:a9:
64:df:0a:79:7b:ac:ba:05:f0:14:1f:18:cc:3f:99:
ef:56:e5:9e:07:62:51:90:75:e8:04:67:41:6a:eb:
12:41:d6:37:d2:2a:2c:c3:c2:9d:62:91:0b:ff:70:
0b:c5:f5:76:64:c1:cd:ab:cd:d9:fb:72:75:2e:3e:
3b:89:eb:f9:db:cd:86:5c:f0:26:3b:a7:16:68:04:
62:fe:3f:23:c7:c5:48:45:cf:38:73:5e:24:3f:7f:
4a:6f:d7:4f:ce:bf:fe:20:61:1c:2a:2d:f8:d2:8f:
27:ee:fd:a9:65:95:8e:f0:8e:c0:e9:d7:e3:e6:ce:
85:91:28:af:70:0a:62:71:b0:26:f9:2a:99:8f:1d:
a6:5d:cf:8d:19:89:94:50:11:f4:10:be:4f:f3:a1:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:58:B5:57:44:5F:E4:FD:8A:BC:13:4C:97:61:54:6A:7B:38:31
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oWlYtVdEX-T9irwTTJdhVGp7ODE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:50:e1:fa:bd:7d:bf:d6:fc:da:1a:9d:de:03:82:51:9f:9d:
87:67:35:2c:5f:4a:c7:89:91:b7:89:f9:b2:8e:d2:67:9e:30:
a1:4d:d1:9b:2c:e9:86:e2:7c:8c:39:2b:84:17:e7:04:b4:89:
79:d6:0b:d3:96:ac:a7:4e:a8:9f:a3:d1:bd:98:8d:f6:b3:32:
71:6b:97:15:89:0d:08:e9:47:4a:fa:3f:30:b3:09:71:59:e4:
21:0b:6c:75:71:58:d7:c3:98:37:1a:9a:fa:08:08:f5:b3:9f:
74:79:3c:a5:4e:ea:0b:d8:3b:99:f5:7a:30:19:e6:24:1c:7a:
a7:46:70:72:c3:22:ee:8a:e2:84:dd:ad:c6:79:f7:f7:ce:30:
9f:2d:09:13:4e:16:52:94:10:3d:13:dd:aa:01:34:46:5b:2f:
ee:ff:99:4f:0e:3a:b1:05:aa:4f:29:0e:1e:e5:14:4d:8c:7b:
d2:1b:ba:27:b7:f2:6d:83:f2:ab:7e:6c:f1:cc:fe:16:01:50:
b9:08:de:94:21:82:15:fe:f1:b0:92:14:c7:29:aa:da:55:59:
8e:00:50:2d:98:b2:55:2d:77:97:ec:41:5f:98:a6:5e:11:b3:
63:93:a9:76:bd:43:d3:9d:10:81:26:35:68:ce:49:b0:86:2c:
64:e8:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:25 2023 by rpki-client on console-ams.rpki-client.org