Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/X83R5IIw76XELcNUWW_Cnv02drE.roa
File: X83R5IIw76XELcNUWW_Cnv02drE.roa (raw, json)
Hash identifier: Pt6Sx3OfmimiF8JhUZA7ZsZCRaSvS5Om7J+Iu63vGdw=
Subject key identifier: 5F:CD:D1:E4:82:30:EF:A5:C4:2D:C3:54:59:6F:C2:9E:FD:36:76:B1
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01856DC1B84327F1BB62F99109F8777A7C12
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/X83R5IIw76XELcNUWW_Cnv02drE.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 95.81.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b8:43:27:f1:bb:62:f9:91:09:f8:77:7a:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fcdd1e48230efa5c42dc354596fc29efd3676b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:2c:a8:27:db:d7:50:da:cb:61:c2:89:57:
5c:12:73:12:75:ce:e3:6c:37:9a:16:38:ba:88:6d:
10:e8:df:b5:d1:81:f1:4a:38:2f:0f:76:5f:b5:5d:
a4:94:b0:8a:3a:eb:09:8a:dd:b9:b1:cf:08:e8:70:
7e:2b:c8:c7:57:66:8f:a8:00:7b:d4:65:6c:81:bf:
8c:1f:55:d3:51:74:20:69:4e:ad:ff:ac:16:77:42:
09:73:5c:b4:43:14:2f:58:0a:f8:f0:31:5e:85:4d:
19:fe:b8:7f:41:3f:bb:22:fb:64:1f:e6:db:97:d4:
85:19:cc:92:e4:d9:b2:79:f0:9b:c6:35:45:a1:5d:
65:a0:1e:c9:84:72:11:b9:b5:f7:12:8a:53:0f:f0:
98:f9:e6:1d:3f:5b:a3:68:39:4f:3f:25:7a:77:7b:
4f:a2:ab:b9:0c:88:24:d9:af:8a:72:2a:cc:c0:92:
bd:84:f2:a9:f5:33:69:75:9c:8f:fa:46:29:6c:4a:
b6:7a:bf:b7:a8:d8:b3:fd:5f:4a:0e:63:5d:4a:e6:
28:f3:35:b2:65:01:0d:e6:2c:7c:31:a1:75:fb:53:
aa:da:37:ea:bb:c4:a1:d9:17:a8:b7:ee:aa:92:23:
d6:8a:c4:21:7c:ce:60:9d:d8:78:61:34:3e:f6:cd:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:D1:E4:82:30:EF:A5:C4:2D:C3:54:59:6F:C2:9E:FD:36:76:B1
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/X83R5IIw76XELcNUWW_Cnv02drE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.87.0/24
Signature Algorithm: sha256WithRSAEncryption
18:37:68:cb:58:f3:a2:ca:d4:88:5d:af:b0:3e:bb:45:ec:65:
3c:bc:83:62:9f:29:a4:d8:b7:ea:88:25:d9:e8:10:a5:3c:62:
e9:cf:c1:18:2c:e5:ac:73:4b:8e:6f:c6:4b:43:0d:70:36:b0:
9d:fc:0b:4c:f1:a2:b3:9e:6b:1a:af:86:83:ef:53:89:36:22:
49:a3:65:5f:41:e0:9f:f3:93:a9:fb:61:d9:bd:f5:34:c8:d0:
61:39:6f:dc:b0:13:35:86:ac:38:df:a2:05:6a:8a:46:9b:c1:
b1:b5:98:41:84:05:30:9d:7a:3f:36:bb:71:64:d6:60:31:da:
7f:9c:ac:55:d7:30:79:f3:e7:2e:41:f7:9d:e3:a8:9f:c3:c0:
52:2d:38:a8:c0:bc:c2:86:dd:cc:9f:0a:f9:11:b4:8c:20:56:
b2:b8:61:a5:86:62:a7:1d:bc:75:73:bc:52:ff:32:a5:dd:05:
de:04:82:42:80:64:b6:94:f3:d1:c3:a0:e2:45:4e:39:cd:e1:
73:ff:fe:9d:50:d8:54:95:3d:86:b3:a5:1e:8a:25:12:30:59:
e9:e0:0e:9f:46:9b:4f:dc:fa:af:8e:ab:45:70:cb:03:cd:b8:
09:e2:54:82:8e:32:89:3f:8d:f8:e4:7f:a0:3a:18:4e:bf:30:
8f:44:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:13 2025 by rpki-client