Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/dyEyRRAJJ7uSAJxnYBGeeoOL2bo.roa
File: dyEyRRAJJ7uSAJxnYBGeeoOL2bo.roa (raw, json)
Hash identifier: LYiBqHo60/MlOhXwsFmfn3MEFuKHbJS/IgEFm+P30vA=
Subject key identifier: 77:21:32:45:10:09:27:BB:92:00:9C:67:60:11:9E:7A:83:8B:D9:BA
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 22DC2F
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/dyEyRRAJJ7uSAJxnYBGeeoOL2bo.roa
Signing time: Mon 03 Jan 2022 18:33:47 +0000
ROA not before: Mon 03 Jan 2022 18:33:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43019
IP address blocks: 95.214.212.0/24 maxlen: 24
95.214.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284591 (0x22dc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 3 18:33:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77213245100927bb92009c6760119e7a838bd9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:61:73:9a:40:5f:0b:e4:20:fd:b9:55:7f:
9a:28:ac:fc:99:67:30:9b:d5:62:01:1d:a5:1c:86:
b8:fc:4e:63:fe:08:54:dd:94:87:dc:55:51:64:1c:
eb:da:cd:09:6f:62:5d:35:f1:20:41:1e:57:66:6e:
d9:ca:f4:bc:c1:21:e0:3d:87:a9:b7:96:87:b2:b0:
f6:cc:9d:3f:e5:9f:7e:3e:1c:bd:69:58:1d:b7:8b:
9c:3c:9d:b7:6c:62:75:e1:ff:02:b2:fb:96:0a:75:
0e:41:8d:c1:a7:ee:d5:8b:85:06:63:81:39:6c:72:
fa:8c:db:b5:c7:92:9f:b0:8a:b1:2a:54:c4:20:9b:
48:e7:93:20:82:75:ea:74:9c:db:2e:97:98:f1:4c:
e6:41:ea:eb:10:3e:79:5b:e8:b2:60:67:69:31:49:
13:95:69:f2:53:1c:f1:b0:54:c6:ef:33:f4:11:73:
01:25:d2:80:48:6f:12:2f:11:00:1c:bf:4a:e6:7d:
44:17:ab:1d:52:b5:c5:ad:16:94:a7:92:5a:09:da:
09:c5:20:23:a1:80:7f:60:f4:01:6b:5b:93:3d:9a:
4e:b9:76:e3:3c:df:45:08:f5:f7:80:14:43:f8:ce:
96:11:71:84:0e:8a:bc:f6:70:37:72:2a:b1:7f:a0:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:32:45:10:09:27:BB:92:00:9C:67:60:11:9E:7A:83:8B:D9:BA
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/dyEyRRAJJ7uSAJxnYBGeeoOL2bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:28:69:7d:95:50:d0:cf:53:3e:03:02:7b:38:52:ed:55:b3:
5d:3e:df:9a:33:48:d5:de:b9:16:70:ff:b8:1a:58:3a:45:fe:
f3:43:22:06:e4:dc:a6:d6:ea:fb:8e:1a:a9:d7:ca:65:41:b2:
c3:16:69:43:fa:84:e0:17:8b:61:b0:2d:9f:3c:ad:39:2a:56:
e1:ee:dd:b9:57:e7:4d:13:34:b8:1e:1a:5f:ec:00:55:1d:6c:
23:75:e0:ad:c7:a4:29:45:7a:43:c0:ef:88:e1:09:64:28:66:
47:45:ae:40:b3:52:10:e7:cf:02:ac:52:11:78:d2:86:f7:a3:
2a:55:b1:ee:0f:34:e6:df:6c:0d:81:00:ad:7b:51:f5:64:b3:
bf:b6:ac:00:a7:11:29:6e:f3:fe:b2:8a:db:8a:f2:f0:bd:9a:
61:3c:df:ca:22:e1:a1:82:75:d6:e0:94:af:a8:15:81:dd:20:
09:64:5b:dd:91:da:27:07:73:0f:34:2c:5c:d1:2e:a7:a8:fb:
8f:c7:cd:a0:01:d4:9d:74:d3:f1:7f:aa:1e:d3:7c:66:2c:61:
3b:41:3c:b7:e6:2a:38:f6:6c:fc:f6:be:8e:99:5d:75:fe:d9:
ef:c6:b6:c0:a5:6d:f3:93:3a:cf:9b:77:92:81:16:29:d1:22:
68:4c:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:49 2024 by rpki-client on console-ams.rpki-client.org