Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4zL5So0TuUHfJqwF9y0mbNIMQlE.roa
File: 4zL5So0TuUHfJqwF9y0mbNIMQlE.roa (raw, json)
Hash identifier: l+9lCJi7yTWQ5RbvDm9mGvzfp7+nhe1NmGVVNjajXwU=
Subject key identifier: E3:32:F9:4A:8D:13:B9:41:DF:26:AC:05:F7:2D:26:6C:D2:0C:42:51
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01828906D35197BE08CCFB734C9371D31045
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4zL5So0TuUHfJqwF9y0mbNIMQlE.roa
Signing time: Wed 10 Aug 2022 18:31:42 +0000
ROA not before: Wed 10 Aug 2022 18:31:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210993
IP address blocks: 95.215.108.0/24 maxlen: 24
80.76.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:06:d3:51:97:be:08:cc:fb:73:4c:93:71:d3:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Aug 10 18:31:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e332f94a8d13b941df26ac05f72d266cd20c4251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:e7:dc:d7:c2:67:45:58:e1:dc:83:7a:2e:
31:88:f4:9b:9c:9f:1f:c0:11:36:6c:47:d0:3d:2f:
7a:af:f5:28:6c:a9:f6:2a:64:ad:8f:b9:b0:d0:e9:
aa:a9:d4:32:d9:7a:1c:1c:b8:1b:34:fc:90:70:7e:
59:2b:42:95:09:b6:24:4b:f4:62:23:5f:61:41:a1:
da:d4:b6:2c:e6:1d:8e:0b:f9:df:7d:3e:e0:bb:7e:
d6:97:09:b4:12:92:ad:e8:ce:fa:46:c0:03:47:db:
9f:28:8a:9e:de:75:61:02:41:96:17:32:da:be:bc:
b8:79:1b:09:fb:d4:11:dd:39:5a:c5:e3:96:e4:ba:
3d:93:81:af:e4:c1:17:bc:89:46:a7:34:eb:10:ff:
fa:b6:74:42:3c:1d:4a:f9:48:31:0c:fd:35:5e:8d:
42:4c:a7:d2:26:38:3f:3d:3c:e9:8c:33:19:8f:87:
af:4b:bb:98:42:10:67:7e:e6:d8:0d:85:78:5f:15:
dc:0d:bf:df:68:ee:82:80:15:f8:fb:2d:25:64:47:
89:68:29:e5:e8:81:2e:ce:6a:4a:ec:97:69:ba:06:
28:b2:3f:79:21:40:c4:a5:6f:bb:7a:a4:c6:cb:32:
b1:57:4e:e7:b6:d5:c1:aa:9e:3d:88:86:dd:10:35:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:F9:4A:8D:13:B9:41:DF:26:AC:05:F7:2D:26:6C:D2:0C:42:51
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4zL5So0TuUHfJqwF9y0mbNIMQlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.43.0/24
95.215.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d0:91:1e:1a:51:d5:6e:52:5b:92:a7:44:a6:b1:45:79:cf:
a4:6d:8b:b2:2e:fc:2e:15:a5:07:ea:c0:99:05:fc:27:24:e4:
f5:92:1b:0c:51:22:6c:31:48:88:dd:a3:d7:2e:8e:c8:8c:ba:
55:91:c7:87:13:20:7b:fc:a3:25:74:13:26:cf:62:ad:cc:9a:
94:fc:b1:a1:a3:6b:2a:c2:2a:13:90:dc:15:da:d5:af:19:05:
55:ef:61:9f:14:2e:6a:62:98:a6:04:08:a3:58:d2:55:1e:2e:
2e:6e:7f:16:3d:12:51:0b:31:f9:9b:43:aa:74:fd:ea:64:dc:
09:ad:62:05:23:82:a3:a8:32:2d:bd:09:98:10:4c:f4:2a:2d:
c4:0e:66:7c:6e:31:ee:a6:d6:59:a9:61:c3:3c:01:3e:7a:e3:
59:03:66:67:8d:a4:e5:4e:a2:0c:59:32:bc:3c:73:cc:14:53:
27:fb:fd:9f:40:46:57:12:9a:56:74:82:09:db:2c:06:c9:2e:
bb:86:5a:59:58:b8:39:27:c8:6a:0f:7b:4b:ff:5d:b0:65:50:
c0:86:9a:5b:9c:88:98:71:67:b4:5f:07:33:1d:10:76:92:1f:
ea:61:99:30:25:c3:a3:27:eb:0a:3e:e2:68:6c:ef:f3:f8:3f:
74:4e:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-ams.rpki-client.org