Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tw74RSket_-SVEx3n8PkG4LIOAs.roa
File: tw74RSket_-SVEx3n8PkG4LIOAs.roa (raw, json)
Hash identifier: 1y8SSqd/fIBR0vvZof7w9FkrolPFdo+XEJsuWtE6pzE=
Subject key identifier: B7:0E:F8:45:29:1E:B7:FF:92:54:4C:77:9F:C3:E4:1B:82:C8:38:0B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 275AA794
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tw74RSket_-SVEx3n8PkG4LIOAs.roa
Signing time: Sat 01 Jan 2022 16:07:50 +0000
ROA not before: Sat 01 Jan 2022 16:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12389
IP address blocks: 95.47.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660252564 (0x275aa794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b70ef845291eb7ff92544c779fc3e41b82c8380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:cb:df:ac:0e:e1:af:56:2a:c2:d9:b1:81:
36:f6:2c:5d:46:c5:cc:7f:7b:24:e8:3b:51:e4:2c:
3f:d4:b9:de:be:0b:72:4b:9f:58:8a:bb:80:21:81:
0c:73:b8:23:e6:70:cf:02:d9:94:71:04:d9:dc:db:
32:6e:ee:7a:34:3f:20:14:53:48:b6:d0:fa:4a:fc:
42:9a:ac:bc:33:2f:bf:39:bf:4f:ba:da:cb:2d:2e:
b9:f8:b2:7e:e5:12:0d:dc:df:63:57:72:0f:43:63:
d1:f0:b6:1f:18:e0:8e:20:d5:85:7a:93:85:d2:4f:
ef:f6:ff:70:52:3e:b1:61:9f:4d:51:06:44:ae:50:
c6:bd:a5:ff:e6:db:fe:de:1e:a1:84:1e:71:9e:50:
96:3d:5e:83:e5:8e:d2:1c:88:b9:c5:36:ba:be:0c:
c5:46:b2:13:0e:ff:96:ca:3d:46:e9:f8:7b:99:79:
a5:d4:41:8e:79:eb:fe:c4:4e:e2:84:a8:46:99:04:
c9:6c:8c:f6:05:99:3f:2d:5a:6a:13:8b:18:f4:27:
4f:70:fa:51:93:3b:60:bb:eb:0e:3a:42:7b:bf:33:
cd:f0:fc:42:43:32:b0:1a:e8:0a:ae:c2:9b:ca:84:
52:47:0a:0f:8a:d5:6d:6c:43:5e:60:19:6e:c4:49:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0E:F8:45:29:1E:B7:FF:92:54:4C:77:9F:C3:E4:1B:82:C8:38:0B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tw74RSket_-SVEx3n8PkG4LIOAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bc:45:8f:bf:36:37:d6:77:2a:ad:e7:30:f3:27:3c:91:39:
ef:11:e4:88:26:25:55:4a:63:9f:ea:4e:d0:b8:a4:53:13:0c:
e1:c1:a4:de:0b:78:10:d4:0f:c9:e7:c3:09:b8:27:e5:e6:d1:
24:a0:a1:2c:83:02:c6:e8:d9:16:ae:ff:87:85:0b:9a:fc:a5:
67:15:d7:ab:b7:61:5b:6e:84:21:e7:64:85:2d:e9:1c:eb:34:
97:3f:28:20:d9:e6:e9:28:76:63:f1:74:29:19:0d:69:88:4e:
48:cb:d3:f2:3e:14:d0:de:cd:a6:b3:6b:f3:4d:6d:68:b7:9d:
b3:93:30:c3:3f:16:f2:9c:17:fd:59:9c:43:f2:ff:da:f3:e1:
69:9b:24:13:52:f6:e3:d0:b1:00:2d:6c:a5:94:b6:18:44:44:
67:81:68:d6:b1:88:34:87:4c:96:f1:0d:c8:c6:e0:c2:1b:fe:
56:ab:7f:c0:41:c5:03:c7:cd:32:08:90:a7:5c:e1:56:3c:a6:
d4:48:ba:16:06:6f:05:61:ff:33:10:31:fc:52:9c:b4:7c:cf:
7d:ca:75:b4:e5:d6:31:65:3b:a7:05:29:14:23:f7:0b:39:98:
f2:43:9c:23:1a:4d:e5:9b:a7:36:4c:0a:45:fb:c7:6f:54:16:
b8:20:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:52 2024 by rpki-client on console-ams.rpki-client.org