Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XvTN1rYJgZuwnfVhpJtcNCpfN4w.roa
File: XvTN1rYJgZuwnfVhpJtcNCpfN4w.roa (raw, json)
Hash identifier: 0qikUxrm3fkJzkPy1cFdK3M6lZ87iVsYEL6RRdyn44g=
Subject key identifier: 5E:F4:CD:D6:B6:09:81:9B:B0:9D:F5:61:A4:9B:5C:34:2A:5F:37:8C
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 06616145
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XvTN1rYJgZuwnfVhpJtcNCpfN4w.roa
Signing time: Tue 19 Apr 2022 14:12:26 +0000
ROA not before: Tue 19 Apr 2022 14:12:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205754
IP address blocks: 95.85.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107045189 (0x6616145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:12:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ef4cdd6b609819bb09df561a49b5c342a5f378c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:fc:eb:6f:a5:6d:13:1a:f0:10:3d:2a:21:
64:61:74:98:b3:7b:60:08:da:f0:2b:d6:76:ba:70:
c7:c6:90:e9:69:f1:9f:86:69:32:39:d8:e7:3f:73:
2c:fc:2c:c9:91:f4:2d:4c:64:f0:d2:e5:85:c9:2e:
76:b7:b1:83:f0:92:9f:66:13:18:88:02:73:2e:0e:
0a:5e:0d:b6:d3:a4:c6:c9:a8:d7:a9:16:92:95:97:
93:78:3e:d8:60:d8:8e:d0:38:f6:ab:97:aa:35:ba:
70:0c:93:02:f9:9f:1b:77:b9:38:3d:3a:b3:b2:bf:
0d:f9:2f:3f:ad:30:3b:a3:04:66:77:e3:2d:1a:7c:
21:9e:9e:ef:d6:9f:0a:f9:b9:ff:86:ee:ee:bd:e8:
aa:f3:b1:70:00:f1:f9:e2:3e:ed:d3:09:ea:0a:ff:
6d:4c:c5:15:88:13:be:f1:92:2f:3a:6c:c0:b1:c1:
cd:18:5d:77:40:5c:e3:9b:0c:02:ba:e2:22:ec:99:
3a:f2:a9:8f:85:e6:b6:be:42:6d:5c:ab:e9:8d:cd:
b4:93:08:54:d6:41:45:66:46:b0:6f:24:4d:16:31:
fe:03:ce:bd:81:c8:0c:f5:2c:23:b1:d8:80:97:ee:
be:59:2b:0b:a3:50:0e:62:c6:da:ea:3a:33:a7:b1:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:CD:D6:B6:09:81:9B:B0:9D:F5:61:A4:9B:5C:34:2A:5F:37:8C
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XvTN1rYJgZuwnfVhpJtcNCpfN4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:46:8e:a7:0c:0d:52:05:6c:d7:66:88:45:fe:60:85:fe:2d:
69:35:04:be:c1:5c:b2:d3:0a:cf:08:24:c2:09:42:5a:49:d3:
72:09:bc:7d:75:ea:26:d2:72:4d:38:92:d3:a1:70:89:29:04:
c8:1c:f5:8f:24:bf:f0:bd:c4:64:67:e9:85:c0:63:c9:e7:17:
0f:38:ec:d5:53:df:23:15:b7:96:b8:8a:d7:c0:f3:66:dc:6b:
56:0d:4b:84:d1:e4:c1:cd:59:7f:81:99:cf:b4:fd:5a:57:5f:
fe:6e:38:a5:f5:99:d6:f5:14:8b:e2:25:7f:de:77:1d:c8:c7:
6c:4e:aa:f9:1d:a3:8e:16:87:cf:f7:d6:a3:06:f6:1d:1f:b5:
ba:a6:a5:be:b9:fa:8c:d8:06:05:c8:fb:7c:e5:b5:77:25:b6:
92:b2:3f:bc:cf:78:2a:ae:b1:5a:32:52:c2:33:81:d9:4b:9d:
7b:c1:69:83:92:8d:82:53:09:63:3d:12:59:45:d5:3e:11:57:
fa:40:d8:e3:d5:e1:d2:d3:6b:64:34:c0:ff:d6:51:03:b0:84:
ec:09:d1:3c:4c:7a:65:e7:0a:af:9e:d5:7f:4f:90:16:22:2f:
a8:27:1f:0b:6b:d6:fc:0f:3b:9a:4b:f3:34:82:c1:04:f7:d7:
07:ab:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:48 2023 by rpki-client on console-ams.rpki-client.org