Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/DBVnLuR1MJmErGcKt9pxPnYebHU.roa
File: DBVnLuR1MJmErGcKt9pxPnYebHU.roa (raw, json)
Hash identifier: w6D+s5XdgTN21ZsmVUvqOiB4iGwFMKK9/SBJsivxvqw=
Subject key identifier: 0C:15:67:2E:E4:75:30:99:84:AC:67:0A:B7:DA:71:3E:76:1E:6C:75
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 018819B98ADD78D60B93EE1AC9E5448E215C
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/DBVnLuR1MJmErGcKt9pxPnYebHU.roa
Signing time: Sun 14 May 2023 10:06:10 +0000
ROA not before: Sun 14 May 2023 10:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 95.81.83.0/24 maxlen: 24
95.81.89.0/24 maxlen: 24
95.81.87.0/24 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:b9:8a:dd:78:d6:0b:93:ee:1a:c9:e5:44:8e:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: May 14 10:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c15672ee475309984ac670ab7da713e761e6c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:fe:57:d6:96:72:e8:b8:34:f3:3f:98:0e:
7e:b8:c0:a4:6c:de:3f:80:e7:cd:da:e3:67:bd:ef:
a4:8c:aa:40:6f:b8:e9:96:5a:cf:c6:3d:46:10:95:
25:8b:c5:19:b3:a9:c8:92:88:46:b5:b6:03:44:a2:
3c:e8:de:9e:89:58:1b:fc:44:02:30:4a:d9:67:bf:
f6:d0:96:bd:87:da:39:28:2a:ae:b5:ca:b7:01:35:
f0:62:dc:81:64:7f:d4:e6:30:03:04:f6:82:b0:8e:
83:17:e8:15:59:b5:1c:71:44:f6:8a:d1:ec:e9:34:
fe:2b:8c:55:cd:3e:d9:42:a2:1a:0c:08:f9:ab:30:
6b:d9:5f:19:f8:0a:88:12:0b:5b:3e:23:70:38:4c:
6e:f7:a1:9c:30:66:09:42:94:71:8e:34:b1:68:12:
a5:1f:1c:bd:13:fb:01:d1:b8:af:54:c1:b4:cf:89:
d7:68:26:3d:f3:34:20:1d:51:38:37:ee:95:5f:30:
af:f0:94:99:03:9d:10:64:71:c5:ea:0e:73:b6:1b:
7a:3d:5e:46:e2:1b:54:d9:ff:eb:b1:c2:0a:e0:bc:
c0:7e:81:70:ae:5a:42:89:53:e4:26:3d:45:74:a4:
e7:8e:0b:fc:91:c3:4f:05:8b:07:a9:59:d3:0d:24:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:67:2E:E4:75:30:99:84:AC:67:0A:B7:DA:71:3E:76:1E:6C:75
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/DBVnLuR1MJmErGcKt9pxPnYebHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.83.0/24
95.81.86.0/23
95.81.89.0/24
95.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7e:93:57:5d:68:13:eb:e2:0d:ae:a5:5e:d3:68:22:d5:9e:
c0:a5:66:81:7d:8b:a1:dc:db:bf:e3:15:ed:69:5e:ab:c9:8a:
62:8a:5c:c6:15:74:d7:ba:a5:06:5f:e9:c1:fe:66:1e:5f:af:
0c:51:3c:47:18:3e:26:c1:30:d5:89:97:bc:b8:e7:7b:2b:ca:
cd:02:23:a5:74:0f:5d:a6:74:33:59:89:92:30:29:af:7d:27:
1d:09:ec:d8:a6:06:af:93:ec:93:3c:1a:6f:41:58:ba:1f:01:
71:f2:20:dd:3b:ba:37:7d:22:0a:0b:7d:34:80:09:87:a1:cc:
67:bf:6a:71:cc:15:08:c1:29:6e:a5:68:7e:eb:66:3d:e3:87:
62:4f:c2:97:76:9f:eb:4c:4e:93:92:e0:42:c1:95:9d:e0:a9:
57:bd:30:64:ae:43:fa:a9:11:7c:02:f2:a4:db:1f:7e:d6:bf:
b3:2c:ee:a1:16:4d:3b:85:81:7e:0d:3a:10:27:34:0b:8b:e2:
76:6c:0b:9c:4a:b9:fa:34:e0:ea:11:38:1a:14:de:21:08:94:
e2:91:2d:7c:b0:57:5b:91:9d:e1:5a:54:60:96:b0:21:6c:aa:
2c:66:0a:40:36:c5:7d:7a:50:40:6d:69:82:dd:e6:17:26:ea:
3a:81:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:19 2025 by rpki-client