Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/9AKofohJR4pezqTMe-89KF3G7ec.roa
File: 9AKofohJR4pezqTMe-89KF3G7ec.roa (raw, json)
Hash identifier: JH7PaUGFWsFaBGtjiSKq8AcK1ccQCIqnFLBv6Xqq47M=
Subject key identifier: F4:02:A8:7E:88:49:47:8A:5E:CE:A4:CC:7B:EF:3D:28:5D:C6:ED:E7
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 37065A02
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/9AKofohJR4pezqTMe-89KF3G7ec.roa
Signing time: Sat 01 Jan 2022 11:00:21 +0000
ROA not before: Sat 01 Jan 2022 11:00:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48780
IP address blocks: 95.182.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923163138 (0x37065a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 11:00:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f402a87e8849478a5ecea4cc7bef3d285dc6ede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:7e:68:81:4b:c6:7a:bc:de:18:db:75:bc:
bd:57:3f:1c:ce:17:40:e0:ed:80:09:e7:c6:f5:b7:
0a:ac:ca:9f:a6:50:91:c0:8d:a0:ee:70:86:01:17:
08:59:c7:25:8f:e4:70:89:47:37:93:cb:be:6b:7e:
9d:cf:53:28:b4:a7:fc:82:dc:75:d2:57:91:34:6c:
86:8f:5c:c0:d5:17:fb:1d:5a:c3:39:83:af:8a:75:
a5:d8:42:b6:d5:bb:28:d8:f4:ca:37:a7:25:2b:e8:
f7:3a:f3:e8:28:02:ff:5a:a9:3d:11:c8:df:b6:47:
ce:14:c6:cd:26:64:45:4c:00:2a:9a:27:ef:e4:43:
e4:e6:20:ec:64:fc:9d:e0:6c:fd:70:16:67:49:18:
37:5c:9c:06:31:59:8d:78:5b:23:b7:2e:c1:d2:10:
3c:f8:90:b5:23:5e:10:0d:45:42:15:22:92:2d:15:
e1:9c:8e:79:70:95:52:77:59:7b:79:0f:b9:02:00:
25:42:8e:18:13:cf:4a:f8:fc:73:21:75:cf:2a:58:
95:1d:e0:ee:b5:d2:eb:37:5a:0f:42:82:c2:f2:59:
8a:fc:94:62:b7:b6:00:d8:61:43:b3:73:04:6c:2d:
f7:ec:b1:7b:ba:bc:bc:3c:69:63:98:ef:67:82:9a:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:A8:7E:88:49:47:8A:5E:CE:A4:CC:7B:EF:3D:28:5D:C6:ED:E7
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/9AKofohJR4pezqTMe-89KF3G7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.112.0/21
Signature Algorithm: sha256WithRSAEncryption
28:a0:3e:e0:43:a7:70:e1:d9:5e:0b:a8:6f:17:17:e8:3b:d2:
de:d7:10:7c:39:b8:21:15:78:c3:35:cc:8f:32:a9:1f:d2:de:
5e:bf:04:c7:fd:77:e3:38:61:55:5a:76:f9:09:09:6e:fb:0a:
88:ef:ce:d3:b5:8b:fb:13:f4:e3:c0:78:68:21:4e:11:91:02:
a8:3f:19:cf:ba:a4:03:8a:66:82:dc:01:18:2e:a7:a4:d3:45:
4f:bb:ae:99:6d:15:68:66:40:22:a2:47:bf:9e:b7:8d:5a:e5:
2e:ed:5b:ee:19:3f:7b:82:b4:6b:25:cc:8b:c8:b1:f2:16:82:
5f:2c:94:7d:cf:b5:1a:4a:e5:a2:07:71:89:20:68:4f:51:20:
19:9c:a6:d4:20:4e:a1:32:e7:91:1d:d2:a3:15:81:d4:df:74:
ce:f3:98:ac:f6:cd:3f:ed:6b:41:97:70:05:c3:68:c9:7b:b6:
c2:cf:78:de:f7:d1:53:39:eb:5b:7a:fd:58:2f:85:00:1f:ca:
65:5c:5d:a5:81:82:9d:b3:61:2a:58:64:ee:f3:ce:9d:f1:10:
f2:3e:6f:0a:02:ab:6d:b6:ed:5a:9a:a4:03:a7:ee:9a:71:47:
d9:82:ff:7c:a3:dd:6f:eb:e4:a6:45:37:5e:5b:7b:6e:39:f8:
45:35:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org