Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/1ufofvz0Shkp87VA7afaGnxT-h0.roa
File: 1ufofvz0Shkp87VA7afaGnxT-h0.roa (raw, json)
Hash identifier: atEosqXPb+yHgBSRj35U/3kc/0ZEkyCpYJBrjo+6+yU=
Subject key identifier: D6:E7:E8:7E:FC:F4:4A:19:29:F3:B5:40:ED:A7:DA:1A:7C:53:FA:1D
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 258BDAC2
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/1ufofvz0Shkp87VA7afaGnxT-h0.roa
Signing time: Sat 01 Jan 2022 05:58:07 +0000
ROA not before: Sat 01 Jan 2022 05:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50606
IP address blocks: 95.160.58.0/24 maxlen: 32
93.105.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629922498 (0x258bdac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 05:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6e7e87efcf44a1929f3b540eda7da1a7c53fa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:22:1a:03:30:59:35:8a:a8:7e:46:78:89:
cb:62:b2:71:b5:80:a2:2f:08:85:cc:02:38:ae:21:
19:e4:50:56:64:72:cd:e0:f8:b2:23:ca:78:65:e4:
44:da:5b:d2:00:3d:59:ce:33:5d:78:c3:08:e2:a1:
5b:f0:26:ac:2f:b4:e7:3b:49:ad:50:ad:c2:eb:5b:
64:b0:27:c3:2b:2b:a9:0b:89:0c:bd:55:7d:85:ea:
a6:1a:f8:6e:0b:14:9d:74:59:7c:9a:d7:d4:48:ed:
6f:e0:db:2a:01:1b:2f:04:f8:46:d0:56:dd:96:5b:
5b:d6:b2:eb:7c:d9:3e:0d:00:1f:8c:cf:15:ed:2a:
20:61:6c:14:5a:fb:8f:7b:e4:c3:4e:4c:cf:a2:a8:
b8:f9:47:b9:30:04:b3:5b:ee:10:e7:d1:c0:8e:0b:
cb:9f:80:df:be:32:f7:90:d2:a8:86:b3:21:f5:13:
e3:18:0e:da:1b:4f:25:06:a5:a0:e5:ec:9c:81:5b:
0d:f1:6f:9f:53:6d:0b:8c:5e:b9:fe:79:01:25:94:
ea:dc:95:46:d0:b5:06:7d:7f:5a:66:16:d2:f6:e1:
11:bb:7e:40:83:57:f2:9b:e4:10:f7:78:6a:b1:e6:
19:ba:ba:1b:f3:c1:9f:42:d5:cd:4f:32:0a:a2:be:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:E8:7E:FC:F4:4A:19:29:F3:B5:40:ED:A7:DA:1A:7C:53:FA:1D
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/1ufofvz0Shkp87VA7afaGnxT-h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.88.0/22
95.160.58.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:5c:a2:ac:47:41:72:6a:62:f1:2b:d6:1c:ee:ec:5d:0f:aa:
99:ad:0a:e4:76:a5:f1:58:cf:f7:d8:0f:f5:bc:3a:2b:34:d1:
69:70:b8:5e:b1:78:be:ba:19:05:6b:7d:bf:f5:ff:eb:cf:5c:
7b:86:1e:33:09:7f:e5:c5:45:e4:69:61:97:7b:4b:d7:50:65:
68:29:1e:bc:fa:3c:fc:43:ce:af:e9:dd:3c:13:eb:0e:69:f4:
c8:53:36:73:1e:62:4f:bd:0f:67:cf:34:9d:e1:31:fe:03:1a:
c4:66:09:e4:4c:eb:9d:f0:df:09:31:2b:65:77:b6:2d:77:3d:
87:4e:f9:7a:d7:11:dd:4d:7a:a3:1c:3f:08:9d:ab:ae:0e:f3:
30:8e:80:70:2b:3d:bd:21:1a:27:d1:32:aa:b6:82:50:1d:37:
4d:43:ac:86:59:71:b3:e8:82:ed:a5:e3:cd:69:14:54:4d:ed:
2f:67:6c:c1:24:5c:b1:8c:46:6c:43:2c:7c:16:11:67:8d:68:
79:bb:8e:bd:22:a5:04:2c:be:82:5e:2e:1c:ac:a5:48:c1:c4:
dc:bb:b1:4a:87:e3:e9:80:e2:2a:08:f4:b3:81:e5:4a:71:fb:
d9:b0:4e:ec:62:02:f5:5a:70:63:6b:ef:e3:bd:5b:7e:6d:9c:
94:7f:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org