Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/NpO15SWr8ZsIcGtBzj-U4H-N2rA.roa
File: NpO15SWr8ZsIcGtBzj-U4H-N2rA.roa (raw, json)
Hash identifier: 11xAD2FZPtwkWIOy/OkN6ey+SAhTwV5yE7snXBNuOhg=
Subject key identifier: 36:93:B5:E5:25:AB:F1:9B:08:70:6B:41:CE:3F:94:E0:7F:8D:DA:B0
Certificate issuer: /CN=5a2a022fed81cba608817d2a9589a5098e0a708e
Certificate serial: 128DB982
Authority key identifier: 5A:2A:02:2F:ED:81:CB:A6:08:81:7D:2A:95:89:A5:09:8E:0A:70:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WioCL-2By6YIgX0qlYmlCY4KcI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/NpO15SWr8ZsIcGtBzj-U4H-N2rA.roa
Signing time: Fri 14 Jan 2022 09:15:16 +0000
ROA not before: Fri 14 Jan 2022 09:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48918
IP address blocks: 95.215.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311277954 (0x128db982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a2a022fed81cba608817d2a9589a5098e0a708e
Validity
Not Before: Jan 14 09:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3693b5e525abf19b08706b41ce3f94e07f8ddab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:a1:97:53:a3:63:1c:55:4b:32:19:24:d9:
44:64:19:44:0b:bf:a9:8f:02:68:d6:ce:76:23:35:
13:af:ac:1d:a8:84:7c:7b:2b:67:98:a4:86:f3:c9:
21:f8:e0:b2:f1:9c:8f:ee:5f:93:28:f6:b9:79:e2:
87:70:e3:e0:c7:48:d9:8a:ce:98:6f:da:49:2b:20:
31:6a:b2:eb:a9:86:fb:22:eb:9e:73:00:1c:8b:0d:
e6:18:cc:0f:ba:ee:12:8f:bf:31:6e:e3:39:36:97:
c1:9a:68:dc:dd:7c:1a:0d:2e:d4:e9:4c:8a:4a:9b:
22:05:15:5a:43:10:f3:56:39:92:66:9a:81:ba:b5:
e0:ab:cb:8f:cd:ab:0d:27:b1:e4:d2:2a:2c:f4:9c:
82:75:3d:4d:12:36:6c:61:58:02:f6:5e:78:59:a5:
b0:54:24:4a:5e:80:fd:b0:e9:eb:35:1c:15:a8:c7:
9d:3f:0a:6b:ee:1e:d5:5c:1f:36:3d:62:d2:6c:2f:
76:64:9b:96:6b:a4:d1:bd:c7:62:36:6e:0f:6f:26:
db:bd:9e:d0:0a:96:26:b9:9d:19:9b:94:a6:5e:43:
e0:e1:90:df:56:6d:ad:72:9c:c7:99:25:a0:aa:9b:
dd:b4:1e:b6:03:50:74:da:4c:ff:78:60:4b:aa:ce:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:B5:E5:25:AB:F1:9B:08:70:6B:41:CE:3F:94:E0:7F:8D:DA:B0
X509v3 Authority Key Identifier:
keyid:5A:2A:02:2F:ED:81:CB:A6:08:81:7D:2A:95:89:A5:09:8E:0A:70:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WioCL-2By6YIgX0qlYmlCY4KcI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/NpO15SWr8ZsIcGtBzj-U4H-N2rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/WioCL-2By6YIgX0qlYmlCY4KcI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:93:eb:da:47:3a:2c:e8:94:b4:17:c5:56:61:7d:24:2a:ed:
49:1a:50:29:a9:19:77:98:ce:6f:d9:ff:e8:b1:65:2a:a4:c9:
ee:51:91:28:d1:73:86:b9:fb:c6:fc:4e:e2:9f:9d:8a:71:fb:
c7:f6:fb:06:cc:62:6f:d5:60:13:fc:28:db:90:19:33:d0:45:
d9:90:39:2e:8d:59:51:b4:39:9c:10:d4:75:b9:34:90:a6:a8:
20:a5:19:34:dd:ea:09:75:14:92:48:d8:54:77:17:3e:65:b0:
cf:7e:4a:fe:4d:a7:92:e8:94:3b:a6:98:d2:13:f9:6a:b6:70:
52:13:70:b9:35:32:fc:ef:97:4b:9e:3f:0b:f9:2f:0f:df:15:
68:89:5e:09:68:d0:78:00:45:64:42:01:a1:ab:17:f1:fb:98:
a6:11:0f:5c:b2:b1:21:95:4c:f3:18:43:c7:30:10:35:18:14:
6e:19:2f:1a:b7:98:61:f5:e3:b5:ae:de:6c:07:4a:d3:f8:a8:
61:97:0a:c3:da:6b:48:8b:f6:b2:a0:2f:2e:c6:d6:3b:3d:3b:
ef:8c:05:88:8e:8c:71:60:ad:c2:c6:3b:f4:10:3b:f6:8e:63:
3b:eb:4e:f5:9f:11:bf:c6:1d:b3:5c:7e:de:13:5f:00:03:0d:
aa:d9:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:11 2024 by rpki-client on console-ams.rpki-client.org