Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1S9RT2awWsDrINzoQLZjhKzoAQA.roa
File: 1S9RT2awWsDrINzoQLZjhKzoAQA.roa (raw, json)
Hash identifier: 5yT0YHJjvrkUiZxPIVDpjFsCk1FQxONrfWfb8kW/Bsg=
Subject key identifier: D5:2F:51:4F:66:B0:5A:C0:EB:20:DC:E8:40:B6:63:84:AC:E8:01:00
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 05DB9FE4
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1S9RT2awWsDrINzoQLZjhKzoAQA.roa
Signing time: Sat 01 Jan 2022 11:02:55 +0000
ROA not before: Sat 01 Jan 2022 11:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 95.101.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98279396 (0x5db9fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 11:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d52f514f66b05ac0eb20dce840b66384ace80100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:6b:35:0a:f1:af:61:84:07:fd:e2:45:b8:
3d:43:93:80:27:0b:82:bc:cd:7f:4b:18:3a:4b:44:
7a:3b:3a:52:e2:b6:72:6d:6e:9f:13:7b:58:a0:78:
a2:2c:68:f9:e2:94:10:4b:d1:36:a3:51:94:2f:8e:
4b:e4:7f:63:24:c5:38:49:0d:a5:c5:ad:4d:bb:28:
6c:dd:ea:07:ed:fd:a0:9e:30:3e:20:da:0d:8e:41:
20:97:78:04:93:2c:aa:98:31:6a:6a:5e:11:d5:53:
a6:50:99:c1:13:8e:6f:0d:38:bd:41:19:2e:01:f9:
a0:cf:5d:52:ab:4c:4e:de:4e:15:7f:6a:0a:1f:d2:
35:18:7d:9c:0a:66:06:94:14:6b:8c:c1:ea:8f:fa:
de:dc:90:9e:c0:82:ab:54:c4:7f:97:32:87:42:61:
09:c3:ff:e7:fb:17:16:37:5a:a8:53:33:53:52:cb:
c4:9c:69:7c:33:cf:17:e8:57:84:d7:ec:bb:ae:d2:
8c:5f:f9:77:76:bc:41:6e:44:5a:69:9b:e9:31:c2:
b4:ed:ed:3c:36:2a:60:51:90:06:3e:91:6c:8b:63:
36:2f:ef:85:c9:53:2d:ff:0e:5e:71:f1:a2:fa:f0:
f2:d3:4b:db:ae:9c:61:49:7c:3c:65:a1:ba:4e:72:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:51:4F:66:B0:5A:C0:EB:20:DC:E8:40:B6:63:84:AC:E8:01:00
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1S9RT2awWsDrINzoQLZjhKzoAQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.101.235.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0b:bd:9f:79:02:78:fa:c1:91:bb:be:25:9b:4e:0b:78:1c:
9b:ab:cf:4a:60:24:0b:b9:e0:e6:20:d8:c6:d0:ba:0b:2b:6d:
18:bb:66:07:88:fc:ba:bd:8f:8b:c4:b5:44:09:a0:d8:b1:3b:
1c:0c:91:47:17:b9:1e:b4:c8:bb:12:0b:9e:5f:ec:7f:12:3b:
cd:82:8f:15:32:ec:7c:1c:87:68:03:b1:49:1e:fc:7e:07:ab:
dd:a9:a7:41:59:08:72:4f:df:ac:b5:87:6e:f6:50:25:4c:f6:
e3:f5:8e:61:e9:f0:a0:11:6c:43:2f:b3:c3:21:4a:71:23:bf:
ad:c3:38:b0:07:5f:aa:49:dc:93:4c:37:af:1c:98:09:00:d0:
c6:b9:59:f1:91:09:c2:66:2a:af:23:38:47:64:11:91:0c:5c:
45:70:16:fb:f6:53:d7:cb:4d:c8:27:59:3c:83:bd:ee:2c:f9:
8e:f7:dd:6b:51:45:a7:a4:74:86:95:f6:25:9d:a3:27:3d:f2:
d2:0c:da:20:61:5f:1a:20:5f:42:2d:14:22:8d:8f:5e:f8:f3:
3b:63:b4:9c:d9:dd:cb:d1:e4:8d:68:38:70:4e:a4:f0:61:3b:
8f:ad:73:5e:1e:b3:f6:30:84:01:6a:51:94:72:62:09:67:7d:
4d:da:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:41 2023 by rpki-client on console-fra.rpki-client.org