Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/AsD6j4DrmXgEKgKR50g8P29Uxcg.roa
File: AsD6j4DrmXgEKgKR50g8P29Uxcg.roa (raw, json)
Hash identifier: 4ugVDmj1w8cXD5TQhdV7v3VDIH1Rni/VejVVnaSXz2Q=
Subject key identifier: 02:C0:FA:8F:80:EB:99:78:04:2A:02:91:E7:48:3C:3F:6F:54:C5:C8
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0182FE96A814CB9EE3F003AB643B4514C069
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/AsD6j4DrmXgEKgKR50g8P29Uxcg.roa
Signing time: Fri 02 Sep 2022 14:24:22 +0000
ROA not before: Fri 02 Sep 2022 14:24:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209788
IP address blocks: 95.183.44.0/23 maxlen: 24
95.183.46.0/24 maxlen: 24
188.68.80.0/24 maxlen: 24
188.68.91.0/24 maxlen: 24
188.68.90.0/24 maxlen: 24
188.68.92.0/24 maxlen: 24
188.68.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:96:a8:14:cb:9e:e3:f0:03:ab:64:3b:45:14:c0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Sep 2 14:24:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02c0fa8f80eb9978042a0291e7483c3f6f54c5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:6c:c7:9c:8f:48:ab:ea:37:2f:f3:a4:35:
68:3d:97:f6:8e:ba:67:87:07:94:e2:52:b8:7b:74:
c7:3c:28:65:05:ee:af:ad:76:e4:3a:21:2f:29:87:
a7:11:27:4a:24:04:80:58:fd:ac:d3:fb:de:df:de:
96:44:7d:ea:d8:97:55:bd:2d:ed:16:0f:a6:ff:07:
0e:19:38:e1:9d:bb:bc:6e:91:d9:05:d2:1e:f5:4f:
3a:3e:7c:c6:b4:ba:21:55:5f:f3:6a:cb:81:07:12:
8c:b9:71:2d:07:2b:a4:0e:f3:3f:5c:72:bf:8d:2d:
a9:ae:73:7a:17:80:55:bf:2b:1e:66:0a:1c:61:86:
bc:d3:8f:b1:47:da:ee:3f:ed:9b:15:12:0d:33:e8:
0f:9e:ed:6a:f6:60:f5:28:2e:2c:1b:28:7f:ed:7a:
17:32:a9:48:12:88:d0:d5:05:f5:f0:1a:29:7b:5b:
1a:6a:96:fb:ab:61:d6:02:58:78:a1:0c:49:fd:b2:
3b:73:79:da:74:d3:4c:f6:82:e7:81:1e:a2:91:b8:
78:7a:96:84:64:93:a1:f5:b6:50:5d:c7:2a:68:a7:
30:d6:00:6d:41:d2:8c:aa:f9:78:ee:39:64:f4:0b:
26:70:b6:73:e6:f9:39:af:5e:8c:ff:53:b3:d3:37:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:FA:8F:80:EB:99:78:04:2A:02:91:E7:48:3C:3F:6F:54:C5:C8
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/AsD6j4DrmXgEKgKR50g8P29Uxcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.44.0-95.183.46.255
188.68.80.0/24
188.68.90.0-188.68.93.255
Signature Algorithm: sha256WithRSAEncryption
a7:09:7d:35:80:23:99:0b:ce:0b:f6:9d:85:15:b8:23:cf:70:
6f:c0:77:96:7a:dd:52:e5:f7:fe:0b:a1:ed:60:96:71:ce:d4:
cb:d4:52:62:f1:c0:75:b5:ab:c5:e3:4c:56:5e:c7:ff:23:d9:
e7:9a:0c:d7:fa:06:09:78:c3:92:8c:5e:cb:e5:bb:44:f6:aa:
38:0d:cf:4f:12:51:67:2e:dc:00:7d:60:0a:ec:c2:6a:38:ca:
20:61:e0:6f:44:96:59:5c:50:e4:ee:24:c8:55:b7:f9:51:c3:
32:47:04:6b:4f:76:e2:a7:d3:32:ff:7c:ff:02:23:f8:58:af:
de:5b:e7:ff:0a:71:30:43:03:65:ac:53:5b:06:b7:6c:a2:af:
18:cd:46:c6:ad:6f:0d:54:ab:f5:4b:ec:55:e9:f4:90:ec:00:
cc:0a:46:cf:60:2a:01:f8:dd:63:6a:63:04:1a:88:86:61:d5:
f2:41:7d:88:54:c6:32:ff:c5:05:26:ca:7d:0d:61:ea:1e:1f:
eb:4f:21:97:ec:af:a4:29:53:fd:35:5a:70:00:c4:c8:73:ad:
ce:2c:2e:b6:4d:e0:ea:22:6b:b5:cd:34:f7:50:97:53:11:84:
76:3b:35:26:6a:b9:16:f2:b2:1b:6c:f8:1b:5c:c2:07:27:4d:
cb:1f:31:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-ams.rpki-client.org