Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/9YgFUI1tyEcA8GCiEhZc0kIrM2Y.roa
File: 9YgFUI1tyEcA8GCiEhZc0kIrM2Y.roa (raw, json)
Hash identifier: GWHNtT1hdxzwXl9jYz1zKRTJaxx+gCqj0oL3fdbPek0=
Subject key identifier: F5:88:05:50:8D:6D:C8:47:00:F0:60:A2:12:16:5C:D2:42:2B:33:66
Certificate issuer: /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial: 4509EC60
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/9YgFUI1tyEcA8GCiEhZc0kIrM2Y.roa
Signing time: Sat 12 Feb 2022 00:04:06 +0000
ROA not before: Sat 12 Feb 2022 00:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29314
IP address blocks: 158.255.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158278240 (0x4509ec60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
Validity
Not Before: Feb 12 00:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f58805508d6dc84700f060a212165cd2422b3366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:18:3a:8e:fb:df:c1:2d:6e:58:53:0d:0d:
79:1a:53:44:89:01:59:5e:68:15:54:f9:08:f1:98:
e6:0e:df:29:81:29:f0:88:e8:a7:eb:a5:e0:80:63:
ae:d3:2d:e6:85:a9:90:51:cd:b6:9f:89:84:29:f3:
d8:20:bc:25:2d:48:80:f0:90:a9:59:31:1a:d1:40:
cd:21:65:19:2d:dc:58:cf:40:0c:30:7d:a0:a2:8d:
8f:83:60:cc:b0:ca:41:2f:97:23:5f:b0:01:81:f3:
0d:ff:25:02:b7:91:26:ab:cd:08:37:96:6f:43:38:
38:c7:87:b8:1f:77:4f:91:0e:cb:ac:e4:d8:af:ec:
05:dd:8b:10:00:f2:67:22:61:b6:17:51:ab:0d:a7:
58:c0:fa:65:bb:5e:e6:11:36:e9:26:a4:26:2f:32:
68:db:fd:79:1c:e4:a0:0e:6b:d4:d7:5d:81:55:42:
bc:13:70:e8:74:b8:7a:77:81:dc:6b:a2:f8:ca:69:
9b:53:69:37:a7:a7:81:6a:89:92:ee:06:ed:1d:81:
a6:6e:d5:0d:6e:0d:3d:d5:6a:cf:0d:c1:72:2c:a5:
01:83:68:71:46:ad:64:08:df:91:a4:96:4e:83:4e:
6b:99:5a:35:0a:2d:26:a9:75:02:b1:84:b9:8d:1b:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:05:50:8D:6D:C8:47:00:F0:60:A2:12:16:5C:D2:42:2B:33:66
X509v3 Authority Key Identifier:
keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/9YgFUI1tyEcA8GCiEhZc0kIrM2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:43:56:73:19:e9:06:69:fb:10:1d:0c:33:f7:f0:60:3c:f6:
27:aa:99:90:e1:e5:a0:4d:04:c0:f8:a8:d5:b6:8e:62:c7:2b:
52:50:d0:34:2a:91:d9:08:f3:d3:95:5f:00:e9:1f:37:da:22:
11:3a:91:13:d8:e1:13:3a:53:ba:56:9f:7c:4a:9b:e9:39:cc:
5f:45:d2:7e:3d:90:7f:b5:85:d1:d2:5c:10:74:15:bc:97:ac:
5f:c2:51:6e:2b:ab:99:c0:5e:59:ac:57:74:bf:2c:19:0a:c3:
50:d6:75:9d:36:2d:9a:86:10:ad:82:77:4e:d3:62:fa:ac:54:
33:0f:b4:a3:1c:16:e0:d5:cb:10:43:fb:d4:49:15:65:93:fe:
f8:34:37:b8:dc:dc:3c:e3:1b:94:e1:db:39:41:10:9b:ba:71:
a8:75:18:b6:3a:40:01:77:88:6a:04:ae:be:42:62:b7:87:af:
03:91:71:a6:1f:cf:a8:30:c1:61:fc:ce:f4:4d:dc:b1:98:67:
8e:ef:aa:8a:91:5b:44:66:c8:99:e1:f0:23:16:7a:90:90:c2:
c9:8b:f9:a2:82:21:60:17:3e:11:fa:dd:67:58:d5:a0:82:8a:
4a:6a:9f:ed:fd:0f:9a:1a:66:f7:25:91:8b:5a:74:89:05:df:
34:2a:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:26 2024 by rpki-client on console-fra.rpki-client.org