Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/33yfeVi4EjETBwGO49coN6FN13A.roa
File: 33yfeVi4EjETBwGO49coN6FN13A.roa (raw, json)
Hash identifier: MyShYxtw31aPYk4WObXejW8Yhmo1Y8+xkk8vouu1FgQ=
Subject key identifier: DF:7C:9F:79:58:B8:12:31:13:07:01:8E:E3:D7:28:37:A1:4D:D7:70
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 18669F
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/33yfeVi4EjETBwGO49coN6FN13A.roa
Signing time: Sat 01 Jan 2022 01:53:41 +0000
ROA not before: Sat 01 Jan 2022 01:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209654
IP address blocks: 95.214.213.0/24 maxlen: 24
95.214.212.0/24 maxlen: 24
95.214.215.0/24 maxlen: 24
95.214.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599135 (0x18669f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 1 01:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df7c9f7958b812311307018ee3d72837a14dd770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:20:be:40:42:37:10:44:ff:c5:a0:fb:d2:
f6:d3:07:e2:6b:46:b9:13:78:a3:d5:1c:00:3d:3a:
01:04:8b:0b:e4:f2:ae:8a:5f:44:89:ab:2c:b8:b3:
6f:c7:42:60:ef:b8:b8:86:c7:e9:a4:c4:4b:dd:4f:
af:a1:eb:e1:6e:c4:a9:37:96:75:65:54:03:ef:8f:
cf:ea:b7:c1:80:64:17:85:55:11:33:a9:b5:09:f0:
e4:3a:69:31:c6:25:b6:12:65:4d:e1:4f:a5:8f:c6:
17:af:49:73:7a:5e:ac:e7:c5:ff:f7:ec:b2:3a:a4:
cb:bb:52:74:52:d5:c7:73:2f:b2:92:97:c8:e2:5d:
3b:57:a5:1f:07:da:cc:95:27:ff:69:96:71:8b:80:
a5:8b:99:9f:38:ef:0d:b0:7a:b9:e2:20:96:f8:b4:
62:b1:67:49:de:6a:5a:1a:09:23:2d:66:fe:42:d2:
ef:f5:1f:d3:c2:a8:ff:27:09:4d:09:54:12:29:47:
0e:1e:35:af:4e:02:cd:9e:65:79:85:e0:7e:18:6f:
28:91:13:c4:77:01:1a:c8:03:52:3c:42:d8:50:ea:
1f:2b:00:82:19:d6:c5:7f:b5:65:91:71:79:04:29:
b9:56:8c:8c:2e:2f:58:bb:50:d4:ad:fd:ce:b6:a1:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7C:9F:79:58:B8:12:31:13:07:01:8E:E3:D7:28:37:A1:4D:D7:70
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/33yfeVi4EjETBwGO49coN6FN13A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/22
Signature Algorithm: sha256WithRSAEncryption
58:bf:1d:d4:d5:16:cb:f7:ba:f1:a4:82:cf:db:10:c0:f2:57:
0c:13:59:14:aa:6b:9f:7c:c7:3a:14:1e:a5:f3:18:d4:d8:85:
69:de:94:6e:30:6f:8d:db:77:50:26:af:e3:43:b5:73:3a:1e:
78:19:1c:99:53:47:81:6e:9b:60:d8:74:6f:83:5d:ab:19:10:
1a:b7:49:f6:1b:04:87:fa:05:5c:0f:29:c4:61:f9:32:f0:ac:
bc:9e:ad:cb:63:e7:45:0d:17:7f:03:35:9f:a1:fa:90:16:66:
57:92:7e:a0:a6:6e:92:1c:0e:4e:d5:a1:81:81:1a:2b:c6:48:
1f:79:92:b5:ba:e1:0b:e5:cc:87:59:1a:5e:aa:b4:0f:fc:57:
f8:9e:eb:17:7b:e5:40:db:e7:01:79:ad:18:86:c7:fc:27:60:
d3:a3:ff:e6:9c:fd:23:3a:ae:bb:6f:2d:84:22:f4:29:44:91:
9b:90:d6:c5:77:12:52:bb:da:e1:4a:60:0a:ac:37:e6:8d:6e:
1d:51:ea:5a:50:2e:60:9d:b2:d8:61:2b:e6:1b:86:17:ab:06:
d8:8f:cd:13:45:25:c3:f6:b9:5c:a3:0c:89:17:ba:a9:74:d0:
1e:69:6c:56:9d:eb:32:d8:88:53:d7:84:46:dd:9b:cb:cc:eb:
c3:d6:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org