Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JSOYfZUkMAkl6k1O_HJh0ZnX24Y.roa
File: JSOYfZUkMAkl6k1O_HJh0ZnX24Y.roa (raw, json)
Hash identifier: 4YBjPKvmEIycWRllPbbdR3OCp5WpZJKJv3OZx/ku7QA=
Subject key identifier: 25:23:98:7D:95:24:30:09:25:EA:4D:4E:FC:72:61:D1:99:D7:DB:86
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 065CEF2C
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JSOYfZUkMAkl6k1O_HJh0ZnX24Y.roa
Signing time: Tue 19 Apr 2022 14:08:58 +0000
ROA not before: Tue 19 Apr 2022 14:08:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61264
IP address blocks: 95.181.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106753836 (0x65cef2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:08:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2523987d9524300925ea4d4efc7261d199d7db86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:25:da:65:93:fd:22:7e:a4:93:d1:a7:5f:
62:fd:ce:ee:20:4c:fa:6a:26:05:f5:63:01:40:94:
7f:7a:73:60:eb:59:82:38:90:43:bf:3d:09:23:01:
f8:00:79:b5:c2:3b:b9:02:c1:ad:65:00:13:4e:95:
f3:55:3d:2a:33:4c:f6:c9:47:78:81:4a:39:f8:7a:
6c:97:c1:2f:29:5c:1e:c7:6e:6f:cc:07:02:27:90:
0f:66:ca:81:29:35:85:81:d9:d5:84:81:3d:8f:86:
0a:ed:d0:e8:52:7c:72:39:5d:99:92:c1:91:08:9d:
0e:c8:46:fe:1c:06:b7:cd:31:b1:8a:dc:0f:e8:f0:
f8:8f:6d:b8:50:f1:cb:9e:ec:e9:e5:32:cc:5b:bf:
d2:2e:10:dd:d3:4d:f3:d7:a4:cd:d3:93:17:d2:32:
26:b8:de:96:27:80:db:90:69:25:e3:cd:3e:45:0e:
15:5b:c6:54:31:a0:49:4a:d5:ee:e3:c5:3a:de:03:
43:a1:c6:a1:16:6f:87:0b:f3:8b:ba:b2:6b:fd:60:
47:3a:2d:eb:08:a4:b4:c0:84:01:e5:21:81:0e:c7:
e4:2b:02:66:a0:5e:55:d7:10:3f:92:46:2e:3b:b6:
15:c8:0a:28:fa:62:20:99:2f:2d:fe:88:75:d9:79:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:98:7D:95:24:30:09:25:EA:4D:4E:FC:72:61:D1:99:D7:DB:86
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JSOYfZUkMAkl6k1O_HJh0ZnX24Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:09:d2:14:b6:e7:f7:6b:13:d6:25:01:36:11:ef:cf:bf:58:
27:93:fc:ed:fe:f8:e4:0b:9b:cc:f6:6e:af:98:77:c8:62:d8:
8e:4f:28:4f:73:85:25:b8:e1:d8:64:8e:37:d0:a4:12:9b:d6:
79:01:a7:d2:1e:2d:39:fd:9d:2e:d8:18:26:ff:0b:b0:d0:fb:
80:2b:0b:d4:3a:46:10:8e:06:09:b8:ff:ff:8d:b0:b3:7c:e2:
f9:38:83:9b:c2:f1:c4:da:6b:26:39:5c:8c:4c:6b:a7:f5:20:
06:fd:33:c0:e6:c0:ad:b7:ff:4c:e6:fe:f1:44:eb:89:f8:88:
85:15:84:23:b1:6d:84:fd:79:86:39:02:b0:4c:9b:b5:ea:1e:
4b:08:4f:4e:3d:99:9e:2a:26:cc:64:f5:81:21:55:0d:81:aa:
bb:cd:e2:dd:1e:2f:d4:dc:87:07:5b:0e:02:1c:05:80:d1:1b:
e3:c7:e4:07:f2:40:3b:c3:9a:97:c4:92:e9:74:5a:3d:5a:5a:
e1:84:cb:a4:ea:fc:0c:59:3c:e1:0a:11:9d:41:5a:46:81:18:
ce:76:43:a0:6b:4a:3b:95:8f:62:b7:dc:ca:65:b7:27:60:68:
eb:56:9d:97:68:b5:f3:ea:7f:1d:e9:cb:73:30:cc:a6:1c:e4:
62:56:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-fra.rpki-client.org