Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/v4WJNKO43mDpWUCv304-EqvxcxM.roa
File: v4WJNKO43mDpWUCv304-EqvxcxM.roa (raw, json)
Hash identifier: 5rX/uyMe/I4GoR6pxHVAVyQCbsmaaCwWopU/Yynvnnk=
Subject key identifier: BF:85:89:34:A3:B8:DE:60:E9:59:40:AF:DF:4E:3E:12:AB:F1:73:13
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 062CA668
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/v4WJNKO43mDpWUCv304-EqvxcxM.roa
Signing time: Tue 26 Apr 2022 06:36:27 +0000
ROA not before: Tue 26 Apr 2022 06:36:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.80.0/24 maxlen: 24
95.81.80.0/23 maxlen: 23
95.81.81.0/24 maxlen: 24
95.81.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103589480 (0x62ca668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Apr 26 06:36:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf858934a3b8de60e95940afdf4e3e12abf17313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:87:41:da:c6:9f:93:20:1a:0b:d7:4f:c0:
6a:c8:83:e1:5f:29:8a:a5:76:cc:02:ec:b7:83:48:
dc:80:fd:d7:79:b1:19:1f:e4:84:a8:74:4a:f6:8e:
d1:c7:a1:98:e7:24:4c:6f:f0:cf:5f:89:b0:72:8a:
d7:c6:d2:a2:0a:0f:84:b8:2d:c9:d3:e9:6d:59:2c:
bd:52:42:79:1c:b8:9c:0e:aa:0d:3f:22:da:03:82:
64:ba:e7:de:3c:a4:94:c8:47:10:97:ad:50:d5:58:
13:47:8a:80:e3:e2:00:9e:15:a4:08:cc:ce:6e:91:
0c:ab:1d:e9:c6:4f:93:c0:89:d9:f6:e5:9f:39:cf:
57:20:ca:dc:83:55:31:2c:fb:7c:2d:c2:ca:d0:5c:
96:59:5c:ef:f9:65:d7:1c:a9:c1:d6:ef:b3:d1:75:
9f:b3:d8:3d:23:c1:86:e5:75:90:26:ef:62:bc:cd:
32:be:0e:d3:f3:20:93:a7:a1:21:2f:bd:93:51:cb:
36:99:48:71:b3:68:32:bf:a8:ec:77:5d:2a:09:0a:
11:b5:c3:a7:47:45:82:8d:0c:e9:03:bf:f4:c0:9c:
34:07:69:0a:fc:8e:2b:4c:61:55:9f:f3:f5:7d:c0:
20:b6:2f:a1:d5:06:a3:ae:a9:74:bc:9c:d9:73:4f:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:89:34:A3:B8:DE:60:E9:59:40:AF:DF:4E:3E:12:AB:F1:73:13
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/v4WJNKO43mDpWUCv304-EqvxcxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.80.0/22
95.81.88.0/22
Signature Algorithm: sha256WithRSAEncryption
55:45:b2:74:38:07:40:f5:01:7c:17:91:3a:27:4b:13:d9:fd:
09:f2:b1:d0:1d:99:36:98:3d:bb:c4:dc:3d:b3:b2:ca:f2:7c:
6d:5e:04:4f:97:fa:52:3b:e9:02:2f:7f:7a:fa:c1:83:86:33:
d6:03:7b:ed:74:f6:1d:7a:d8:1f:02:25:2a:a9:b9:f3:81:45:
bf:8f:2b:d7:6c:15:84:ab:e6:04:26:46:78:e9:dc:18:73:95:
53:41:20:c1:41:92:6e:f1:7f:f6:41:11:0e:cd:71:67:11:c9:
fc:1f:76:91:b4:5e:59:d1:d2:e7:7b:67:f4:3c:40:d4:6a:4e:
07:33:7d:2d:fa:26:5a:6f:16:ee:e9:2b:3b:a8:e2:8b:89:5a:
bb:f9:55:7b:2c:ba:a6:42:4e:4c:c8:4c:ea:6f:e3:63:d9:99:
62:3a:6f:c6:2a:f6:65:96:23:55:42:da:0b:73:ea:eb:fa:5e:
0f:bb:ab:4c:47:68:67:0b:08:4e:30:91:5f:01:ac:d8:0e:98:
36:af:27:e2:82:3d:00:f7:54:1f:66:db:55:33:ea:6f:d7:88:
88:e3:f8:c5:9e:1e:cb:3a:f6:c2:c0:37:94:9e:43:22:88:ac:
a4:e2:b2:4f:8d:8e:53:92:e8:68:4f:a9:70:29:46:a0:62:35:
d2:7d:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org