Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/oRRLgyiMVN6FFCI-bxxMeM8eWqA.roa
File: oRRLgyiMVN6FFCI-bxxMeM8eWqA.roa (raw, json)
Hash identifier: MQ+Qy7xqYUZ8UX3ijV2rln6H2nPe/1nJ2WCfQsUVWVg=
Subject key identifier: A1:14:4B:83:28:8C:54:DE:85:14:22:3E:6F:1C:4C:78:CF:1E:5A:A0
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 051E0FAF
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/oRRLgyiMVN6FFCI-bxxMeM8eWqA.roa
Signing time: Sat 01 Jan 2022 04:04:16 +0000
ROA not before: Sat 01 Jan 2022 04:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39308
IP address blocks: 95.81.72.0/22 maxlen: 24
95.81.76.0/22 maxlen: 24
95.81.96.0/22 maxlen: 22
95.81.96.0/20 maxlen: 21
95.81.96.0/19 maxlen: 21
95.81.100.0/22 maxlen: 22
95.81.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85856175 (0x51e0faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 04:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1144b83288c54de8514223e6f1c4c78cf1e5aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:e8:c5:b4:4e:98:0c:b6:da:6d:c4:5d:6b:
7f:06:47:04:c5:0a:fd:c1:03:c0:f9:ab:dd:8c:ec:
da:4b:25:7d:3e:b2:bc:b0:90:dc:52:22:70:c8:95:
33:6d:01:1e:18:8a:58:6e:d4:70:2f:85:e6:c2:78:
b1:80:6f:1b:da:29:f0:f1:11:5d:05:da:41:fb:29:
29:75:3c:4e:c0:6c:cb:c7:52:d4:6d:1c:5f:a0:18:
08:d3:85:f5:a9:2a:b5:1b:a7:49:3c:60:68:13:e6:
49:62:b8:ea:2b:f7:92:c6:31:10:d5:d2:98:12:85:
b0:9e:c9:99:5d:99:e8:cd:67:49:d5:8c:84:c0:50:
dd:68:34:2a:1b:db:21:17:1f:59:35:93:12:e5:c5:
d1:a1:f2:8c:90:ca:7d:22:f4:1c:1d:c0:16:bf:ca:
3d:27:a7:28:5c:bb:8e:47:16:18:c9:64:dc:54:14:
85:00:95:c8:32:25:be:ab:ee:4a:6b:66:96:70:fd:
ef:27:b0:d8:02:f1:25:9b:f9:b8:10:41:9b:2c:5a:
14:15:cf:0e:32:0c:3a:1c:d4:bd:3e:48:b8:6e:4b:
9e:7a:37:77:88:42:f4:31:51:1d:94:a6:b1:70:c2:
b7:ca:6a:44:e7:aa:45:17:c8:52:ae:dc:52:53:1c:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:4B:83:28:8C:54:DE:85:14:22:3E:6F:1C:4C:78:CF:1E:5A:A0
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/oRRLgyiMVN6FFCI-bxxMeM8eWqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.72.0/21
95.81.96.0/19
Signature Algorithm: sha256WithRSAEncryption
89:9d:51:e2:6f:43:8c:72:3d:47:29:1b:07:b9:39:2f:c5:dc:
80:ee:5a:b8:f6:e7:05:56:74:11:e9:e4:03:00:8f:be:10:b0:
95:1a:95:70:ba:63:55:29:cd:f7:24:cf:6d:36:f6:fa:8e:68:
13:12:22:e9:54:9d:d5:9b:6b:4e:1e:b8:3e:46:67:a3:b1:17:
6f:29:ab:d8:5f:23:6d:20:25:8f:ab:cb:be:3f:b9:52:85:26:
bf:58:b0:69:78:f2:84:76:0b:d7:bf:f7:f2:ff:ed:73:97:3c:
ae:a7:05:ed:15:46:64:a5:73:eb:37:a6:c7:b3:bd:77:52:bb:
1f:49:8b:5a:1b:15:f9:10:18:da:65:17:ad:07:fc:fa:30:a5:
aa:7a:59:6e:ac:37:b3:d6:4f:fd:0d:f0:af:22:4c:94:44:ff:
4f:46:3e:37:05:cf:9f:29:bf:aa:de:d7:be:cd:03:77:9a:d0:
56:bd:ae:c2:9a:9a:4d:9d:79:94:35:c4:1f:28:bc:63:18:a7:
17:38:70:dd:ee:2a:6e:03:0b:5f:c5:80:d4:40:a1:66:06:b9:
cd:64:4f:a9:d4:a6:99:33:89:89:2e:9c:5f:91:17:16:5e:82:
63:ae:29:27:ea:cc:af:4e:c6:c7:aa:ec:60:ee:49:4b:97:a5:
b6:5c:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org