Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/bDi4XjWSr6If3Fa_TWL2onxjAtk.roa
File: bDi4XjWSr6If3Fa_TWL2onxjAtk.roa (raw, json)
Hash identifier: oGeiq+84jrmA0AgEkm1TjMtaM0TkpdelEkXVs5sa/LY=
Subject key identifier: 6C:38:B8:5E:35:92:AF:A2:1F:DC:56:BF:4D:62:F6:A2:7C:63:02:D9
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018570027AE5655586553B8261CD5D88CD82
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/bDi4XjWSr6If3Fa_TWL2onxjAtk.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50606
IP address blocks: 95.160.58.0/24 maxlen: 32
93.105.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7a:e5:65:55:86:55:3b:82:61:cd:5d:88:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c38b85e3592afa21fdc56bf4d62f6a27c6302d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:ab:82:11:84:6c:e9:eb:06:c4:51:73:2d:
14:ec:be:09:31:4a:19:d1:a2:30:a6:f4:de:04:f8:
6b:52:a1:d1:c2:8e:6e:41:5c:76:67:2d:cc:45:51:
e4:6a:f4:9a:be:12:83:c1:49:a4:3f:c9:86:9f:f2:
9c:e0:e4:78:2b:bc:31:7e:20:d3:86:63:89:4e:3c:
49:9a:8b:27:69:92:4e:6b:f9:82:4a:bd:17:8d:3d:
39:26:59:69:27:3d:8b:10:7f:52:bd:9e:18:71:43:
37:f5:78:d4:2f:d7:d0:17:33:6f:97:60:b2:ac:af:
ea:d3:38:5d:f9:ed:6d:4c:bd:0c:1d:25:b4:ad:d8:
a3:32:74:24:10:8a:b0:c9:e7:ab:cd:c5:6b:ad:9a:
3f:20:0d:c4:5a:13:8a:5e:4a:b5:a9:3a:dc:d3:ed:
81:c9:de:4c:08:bb:a3:9e:3b:d8:0c:75:c9:73:2a:
fa:8f:d9:3e:0e:0b:4d:b3:c2:21:d2:ea:cf:b1:a5:
bc:f0:2b:91:bb:3b:84:8c:e1:07:42:fe:6e:74:7b:
87:af:e9:ec:02:85:ca:df:44:5d:33:1f:bf:46:2c:
49:4c:8e:33:f0:05:88:02:e3:ed:88:1b:de:91:ff:
f5:ca:72:27:16:ab:79:43:8b:f5:48:53:c3:04:c5:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:B8:5E:35:92:AF:A2:1F:DC:56:BF:4D:62:F6:A2:7C:63:02:D9
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/bDi4XjWSr6If3Fa_TWL2onxjAtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.88.0/22
95.160.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f1:e0:62:7d:3e:97:43:66:05:c4:f7:a2:86:ae:9c:94:b5:
97:c0:6a:aa:08:f7:fa:51:5c:ab:98:30:14:69:9c:f5:df:07:
b1:8c:67:d4:c3:57:a2:f1:8e:e6:a7:dd:9a:55:80:2d:62:fa:
da:ee:e7:8f:6c:fa:d3:f5:c5:34:6b:13:78:a4:b0:a7:b2:56:
b5:b1:fe:3a:e4:1d:f3:6b:c0:cc:cc:57:c8:d9:75:57:89:6b:
e0:20:e6:9c:b3:8d:de:21:7a:b3:4d:1f:d0:eb:1c:ce:e1:cc:
21:29:d5:6d:ee:d7:04:8a:31:60:66:4d:c5:12:42:43:bf:c1:
7f:a1:c2:c8:da:14:de:7b:b4:46:7d:2c:68:44:87:93:65:5e:
c1:c6:7e:af:44:cf:e3:2b:83:8a:4b:d0:fb:f2:d0:82:97:6b:
89:6a:c2:7c:9c:55:e5:1a:52:cf:fc:84:97:ad:ba:04:be:02:
2f:4f:c8:e4:d2:44:6d:48:f6:cf:49:81:8b:19:96:8f:ba:57:
ba:23:7b:c5:cf:77:57:d7:22:be:e1:aa:17:8a:78:87:15:a1:
6f:3d:61:18:10:24:6a:72:13:2f:c1:f2:fa:b4:c8:f8:c0:03:
22:76:b6:3e:c1:03:49:31:73:a7:5e:fa:21:66:df:2d:f3:f7:
4d:56:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:19 2025 by rpki-client