Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/RBxMJWqTG7lFtkG4RLl0uJFMRMs.roa
File: RBxMJWqTG7lFtkG4RLl0uJFMRMs.roa (raw, json)
Hash identifier: Lob+2x3lXvUuc9pFYrunG47WBAVnxcCkRJVDp6PKemU=
Subject key identifier: 44:1C:4C:25:6A:93:1B:B9:45:B6:41:B8:44:B9:74:B8:91:4C:44:CB
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 35130C29
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/RBxMJWqTG7lFtkG4RLl0uJFMRMs.roa
Signing time: Sat 01 Jan 2022 07:55:01 +0000
ROA not before: Sat 01 Jan 2022 07:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201723
IP address blocks: 185.54.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890440745 (0x35130c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 1 07:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=441c4c256a931bb945b641b844b974b8914c44cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:de:45:0e:76:89:65:5d:7c:f9:08:0e:dc:
7a:5f:9b:bb:01:f1:65:3a:58:56:f0:8c:2b:cb:ec:
a2:c3:61:61:db:f4:5c:d1:d6:f9:a0:07:01:79:c3:
e5:ca:fa:fc:9f:88:af:fd:3e:cd:35:a4:03:a4:4c:
8e:50:a8:2f:ed:5a:d2:f2:99:2a:c8:17:63:67:47:
a6:36:8b:fe:88:6d:46:99:04:7e:31:d9:cb:b4:08:
a3:c7:00:b0:9a:01:04:08:c4:a9:f3:fb:81:1e:f5:
af:8d:9c:c1:42:fb:13:d0:3f:ff:2c:73:23:25:52:
d3:f4:49:ad:2d:1e:08:6f:a9:43:ca:cc:ed:3f:9b:
7c:85:f3:9b:95:df:4b:e7:27:3d:aa:92:22:18:e9:
8d:fd:12:2b:6c:37:59:7c:8c:ca:92:4f:90:4c:00:
b1:75:d5:7b:e5:ec:2f:c2:10:00:58:45:1c:33:7a:
c3:19:fa:ee:20:e6:43:61:c3:df:4e:fd:85:27:22:
36:9c:6c:c3:39:23:48:e0:db:3c:6d:fc:89:a0:24:
bd:67:ae:96:85:73:b8:00:fd:5d:27:90:2a:04:2b:
0a:0a:c4:46:6c:af:40:95:7b:82:b5:83:91:9f:78:
d0:0b:be:c5:5a:83:c4:f9:ae:fb:9b:44:63:89:59:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1C:4C:25:6A:93:1B:B9:45:B6:41:B8:44:B9:74:B8:91:4C:44:CB
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/RBxMJWqTG7lFtkG4RLl0uJFMRMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.95.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e4:8b:29:af:27:03:bc:c7:e4:1e:78:f9:3e:ea:63:13:83:
b7:6a:61:12:b9:b1:af:d9:fc:4a:a6:8f:f9:eb:df:7d:36:5a:
c7:3e:42:92:00:15:1e:ce:23:7c:4f:76:63:92:ce:af:0a:5d:
df:2f:26:c6:6d:a9:24:ff:12:e7:31:01:3c:94:3f:67:1c:8a:
cd:84:e1:55:48:3e:05:2e:aa:44:3a:dc:80:2a:72:6f:12:ad:
d9:8f:29:06:0b:1b:37:90:1f:cf:07:50:09:d4:cd:a1:f4:00:
aa:d3:92:6c:02:b6:ec:c9:38:f2:79:51:69:a0:fe:eb:6f:33:
f8:d7:b6:30:b2:e3:53:e7:3c:c8:da:7f:6a:9f:11:4e:ff:23:
e2:8d:21:f7:ea:d7:6b:95:39:9a:02:f5:46:15:a9:a9:c4:e9:
7a:09:76:36:3a:a9:dc:ee:2b:9a:61:c2:43:91:6c:d7:6e:89:
04:d6:67:41:39:49:41:e6:87:79:8b:2d:bf:91:a2:51:51:af:
e1:16:e9:67:d2:7c:ec:18:8a:4f:62:b1:b9:61:d8:9c:69:fc:
20:54:0a:7e:35:ce:f2:cc:7d:57:20:1f:d5:d7:af:c7:1b:39:
76:0d:d1:5b:2d:a5:b6:3a:01:c4:c7:b4:54:19:a3:6b:69:55:
6c:cb:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:24 2024 by rpki-client on console-ams.rpki-client.org