Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/z1146ra9fDHjI6gQTs9gAMg8E9w.roa
File: z1146ra9fDHjI6gQTs9gAMg8E9w.roa (raw, json)
Hash identifier: QLFex0HVS/l4ak/Go0dwzXjESeKObYdO+hAT+/VPotw=
Subject key identifier: CF:5D:78:EA:B6:BD:7C:31:E3:23:A8:10:4E:CF:60:00:C8:3C:13:DC
Certificate issuer: /CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Certificate serial: F9E4EF
Authority key identifier: EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/z1146ra9fDHjI6gQTs9gAMg8E9w.roa
Signing time: Sat 01 Jan 2022 06:02:29 +0000
ROA not before: Sat 01 Jan 2022 06:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 188.95.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16377071 (0xf9e4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Validity
Not Before: Jan 1 06:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf5d78eab6bd7c31e323a8104ecf6000c83c13dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:a2:9d:58:41:e5:3e:72:a8:29:90:78:a9:
00:19:e5:5c:f7:34:7f:83:e3:8b:d1:30:02:a9:2b:
25:75:0f:80:a6:be:80:15:6d:6a:24:f2:97:9b:90:
75:d8:fa:a9:31:33:f2:ff:ef:a4:47:32:b8:df:37:
f8:20:57:0f:9f:75:3b:d7:99:d0:1b:25:f4:cc:b0:
c9:40:f7:c1:5c:a3:e0:0b:fd:2d:89:c6:87:f0:ed:
08:34:3b:fa:a1:7f:63:15:81:13:df:93:a9:98:3b:
30:54:17:17:d1:34:e9:2d:95:2f:9f:20:53:5c:2b:
35:b1:c8:37:2f:e2:ab:42:96:80:a8:7a:1e:9c:b3:
46:18:b8:93:f3:99:4c:b7:d9:de:0a:78:df:00:79:
2b:7f:82:67:12:41:c1:46:0d:0b:c7:4c:dc:00:f3:
fa:b6:a6:ca:f4:f8:a0:e0:2f:dc:47:6c:96:6f:6f:
c9:50:8a:54:32:69:f8:48:fb:95:aa:2f:9b:88:35:
be:ef:86:e5:e5:52:2c:81:24:82:c9:59:2c:4e:78:
3b:80:b6:95:d1:91:5f:58:81:1d:c3:25:c1:cb:89:
48:22:31:46:93:92:f5:7c:17:5b:51:52:f3:25:1a:
de:25:9d:30:79:b9:c5:33:72:34:f9:b7:df:34:9d:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5D:78:EA:B6:BD:7C:31:E3:23:A8:10:4E:CF:60:00:C8:3C:13:DC
X509v3 Authority Key Identifier:
keyid:EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/z1146ra9fDHjI6gQTs9gAMg8E9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/7hpiB_6dsND36dFhq6Tl3eJUmi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
34:34:44:44:e6:2b:71:0a:38:be:5b:11:fe:17:60:81:ba:08:
07:5f:3d:6e:80:c7:4e:07:ef:66:b8:ca:94:56:93:42:ef:0b:
95:60:e3:3c:a5:5f:77:2a:ab:e1:3d:76:0a:fc:ac:24:7e:a1:
91:79:16:51:eb:fb:26:46:89:7d:7e:ef:a6:f6:f7:d3:93:c7:
e1:d9:32:36:8b:e4:c9:37:7f:f4:b9:97:39:1e:bb:0a:f7:0b:
cf:fd:35:8c:60:44:b0:ba:49:b2:10:88:d1:f4:85:38:19:52:
4e:b9:23:01:11:8a:58:ca:2b:90:57:67:97:35:2d:88:44:07:
d0:b1:be:9d:50:0f:da:4c:be:2e:07:25:68:b4:92:04:84:a0:
78:bd:53:7e:34:c1:12:c3:22:20:65:0f:52:4a:99:15:0e:4e:
d4:e2:76:78:d2:8d:ba:67:ce:c2:7d:c5:16:d9:07:c0:f3:29:
99:5c:ed:e9:12:ba:e0:e8:83:dd:7b:2e:17:67:b7:64:af:0b:
08:b2:6a:14:2c:c8:e6:54:66:e1:a5:2d:04:84:71:9b:4d:eb:
8e:97:a0:99:8b:1d:63:d5:a3:1d:2b:85:19:10:f8:dd:b0:2b:
96:54:89:e5:69:ef:97:5b:13:3a:32:f8:9a:8b:a9:20:74:e6:
a2:22:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:03 2023 by rpki-client on console-ams.rpki-client.org