Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/Ky6a5Cz25XvyEksizaWk4vPzHD0.roa
File: Ky6a5Cz25XvyEksizaWk4vPzHD0.roa (raw, json)
Hash identifier: h1EE4ye/2yAPnKeWzb5N5JJjkiRVFC+MKWzg4wmlKds=
Subject key identifier: 2B:2E:9A:E4:2C:F6:E5:7B:F2:12:4B:22:CD:A5:A4:E2:F3:F3:1C:3D
Certificate issuer: /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial: 01571F57
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/Ky6a5Cz25XvyEksizaWk4vPzHD0.roa
Signing time: Sat 01 Jan 2022 13:04:15 +0000
ROA not before: Sat 01 Jan 2022 13:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5603
IP address blocks: 195.5.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22486871 (0x1571f57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Validity
Not Before: Jan 1 13:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2e9ae42cf6e57bf2124b22cda5a4e2f3f31c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:47:6c:69:40:49:93:71:77:98:6e:d2:06:
ba:df:a5:3d:b8:49:da:2d:61:12:71:29:72:a7:db:
cb:24:27:c5:f3:3f:76:e2:b6:40:74:88:e8:ae:fc:
c4:97:eb:73:45:60:ac:d2:68:b9:a4:01:14:38:f2:
b7:18:30:4a:d9:6e:62:e7:97:f1:ec:ee:a2:e1:72:
c7:b4:df:ca:12:3b:cb:10:cf:39:db:f1:ac:8f:93:
ee:8d:3f:2a:e7:16:4d:c6:9c:71:10:22:f4:b3:7b:
03:3d:d2:b9:65:d6:d7:29:76:02:56:c5:5c:20:7f:
3c:e0:c6:ef:cb:61:ce:da:e7:cd:93:8c:86:46:20:
a5:c9:19:9d:0b:1d:6c:9a:7d:94:2f:93:17:f3:bd:
b4:94:8c:60:70:3f:be:38:d2:ab:e7:42:bb:f7:2d:
91:a9:42:95:69:6a:a7:5a:4d:1f:09:be:0e:18:89:
e3:73:e2:84:83:9d:22:cf:c5:72:13:1f:c6:c9:cb:
57:cf:77:77:6e:5e:bb:c0:e6:f9:5a:db:15:d9:22:
08:8d:41:67:ab:83:e1:4f:84:4c:6c:9b:de:f2:65:
68:41:5b:bb:62:f1:67:57:b9:1e:51:11:3f:e1:66:
26:45:b6:79:25:0e:8c:3e:2c:f5:05:69:f5:1e:60:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:9A:E4:2C:F6:E5:7B:F2:12:4B:22:CD:A5:A4:E2:F3:F3:1C:3D
X509v3 Authority Key Identifier:
keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/Ky6a5Cz25XvyEksizaWk4vPzHD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.164.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7a:69:15:e2:99:95:6a:2e:3b:82:c7:b9:07:e7:75:4f:74:
65:55:4d:91:ef:5f:2c:c6:4e:e6:fa:29:e1:f0:38:9b:b7:ca:
5d:d3:21:61:fc:41:4b:c0:a9:b5:80:f6:4d:01:43:f6:39:2a:
32:bb:92:f5:61:42:ef:c2:3e:5c:49:0c:b6:30:93:e2:d0:6a:
93:6c:04:b9:6c:28:48:5b:28:d4:66:f6:d5:7d:2b:95:bc:ac:
88:f9:27:fb:1a:de:92:d6:64:72:67:de:f5:13:6e:bf:06:0f:
b8:3a:18:7e:ea:d4:3f:06:87:80:9f:d0:1c:14:54:51:44:37:
65:4e:47:02:e7:77:36:89:e0:62:e9:63:29:04:c2:ba:de:c6:
1b:0b:94:07:0c:1e:31:c3:52:42:a1:87:71:0f:8b:0e:fc:db:
44:d3:c1:0f:54:e8:07:7e:7b:57:d8:c2:18:e8:d3:89:b9:5d:
38:62:7a:99:13:6a:b0:fa:c6:1e:e2:38:24:9c:5f:be:b0:11:
2b:26:32:72:4b:be:4d:f6:00:5c:14:19:d9:d1:6b:f6:b6:7e:
dd:e9:1e:ae:87:27:07:5f:e5:28:46:40:12:4b:fa:11:b8:64:
66:3a:80:29:4a:9d:07:f7:33:8c:cb:0c:e3:a3:58:63:c8:78:
9e:15:fb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:43 2023 by rpki-client on console-fra.rpki-client.org