Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/OfZz46CA8O6349M_hYZ6i6xQc0w.roa
File: OfZz46CA8O6349M_hYZ6i6xQc0w.roa (raw, json)
Hash identifier: ttK6nwPdNX2efk1nExQ0oaC4KsugXDcMoWQi2HEXVnY=
Subject key identifier: 39:F6:73:E3:A0:80:F0:EE:B7:E3:D3:3F:85:86:7A:8B:AC:50:73:4C
Certificate issuer: /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial: 79CB2C
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/OfZz46CA8O6349M_hYZ6i6xQc0w.roa
Signing time: Sat 01 Jan 2022 03:52:34 +0000
ROA not before: Sat 01 Jan 2022 03:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211572
IP address blocks: 188.95.88.0/24 maxlen: 24
2a10:c140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7981868 (0x79cb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Validity
Not Before: Jan 1 03:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39f673e3a080f0eeb7e3d33f85867a8bac50734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:97:3e:1b:67:7a:bd:6b:f3:b3:cb:ca:db:
6f:52:e9:21:6c:7d:49:a2:2b:f0:42:64:06:0d:2e:
eb:db:b0:b3:0d:25:c5:3b:96:e7:d6:b4:f1:dc:0e:
8a:61:fa:4e:80:cb:f0:88:f8:ab:18:81:da:c6:26:
79:11:b9:ba:74:35:7e:5e:65:d0:f8:1e:fe:e4:1a:
82:ed:43:02:96:f1:5c:25:d6:14:bf:2b:aa:40:75:
7d:16:1c:2e:0f:00:6e:80:e0:be:3a:06:50:88:b6:
7a:5e:44:62:d3:d8:51:0e:93:94:17:1d:76:9c:bf:
42:a8:dc:5c:25:56:77:90:6c:2d:a9:80:66:44:ad:
cf:79:fb:0f:08:73:b6:fd:c9:10:94:8c:bf:06:d4:
66:d4:39:b5:71:9d:db:22:66:e5:66:43:4f:12:19:
19:5f:e6:21:fa:9e:b9:f0:25:a7:fc:71:43:ce:5e:
27:6b:1a:2d:df:ae:eb:2a:01:fc:41:a6:91:89:84:
4f:f3:1d:60:1c:ce:5f:0b:43:f9:09:58:c9:02:ab:
a9:c4:56:7b:e9:74:6b:d2:be:70:b8:e7:e0:cf:b2:
28:85:7d:b9:c3:75:d5:21:98:ac:49:b4:cc:bd:fb:
ce:c9:15:a7:70:18:49:69:c3:cb:48:08:bd:0f:22:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:73:E3:A0:80:F0:EE:B7:E3:D3:3F:85:86:7A:8B:AC:50:73:4C
X509v3 Authority Key Identifier:
keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/OfZz46CA8O6349M_hYZ6i6xQc0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.88.0/24
IPv6:
2a10:c140::/29
Signature Algorithm: sha256WithRSAEncryption
1b:c9:da:ee:3d:10:72:16:ce:13:66:f1:87:cd:c2:ac:81:fc:
10:75:45:69:e0:f9:1e:55:ce:77:4b:e4:ac:7c:56:cd:d7:3d:
ec:da:1d:90:d9:dc:1f:63:2c:04:6a:e6:68:17:18:bf:d1:9f:
9f:95:22:08:5d:87:90:55:49:bb:e4:80:0c:7e:09:1b:4d:de:
2b:12:b2:1b:9e:6d:86:7c:60:6d:b9:85:35:4a:6d:9b:89:ff:
56:51:8d:6c:f7:e4:f0:12:8a:1a:fe:88:c0:8b:0a:35:8e:f6:
6c:05:10:6c:d6:88:1e:82:fc:33:d2:65:dd:27:04:44:15:cc:
c2:8b:ab:47:6b:91:b5:a4:18:d8:5d:b6:2c:a8:de:cf:0c:a0:
b3:6e:6e:ea:42:84:5c:1c:18:4b:eb:ce:61:cf:5d:15:4e:9b:
ca:ef:bc:ea:0c:2b:d6:bd:76:78:70:a6:b3:85:19:fd:99:26:
bc:13:2e:0e:0b:ce:c2:dc:cc:c5:bf:31:37:fb:84:1d:38:a4:
8d:96:d0:11:5e:15:73:cc:6e:02:6d:67:3d:04:25:c4:62:41:
a8:5c:50:03:70:38:4e:91:e0:cd:61:27:3d:df:d5:bf:aa:ec:
d7:4c:f7:72:0e:72:bf:a4:ab:5f:7c:ed:9a:9c:28:f9:be:24:
1e:a4:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:38 2024 by rpki-client on console-fra.rpki-client.org