Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/S1z5cel_4BMvGvO-a2AeYcUskw0.roa
File: S1z5cel_4BMvGvO-a2AeYcUskw0.roa (raw, json)
Hash identifier: ookwHuVy6nUWYt2L8JcI/M/fwqBsNhzg911nH7tJOmM=
Subject key identifier: 4B:5C:F9:71:E9:7F:E0:13:2F:1A:F3:BE:6B:60:1E:61:C5:2C:93:0D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 018570F09B46223B9246EC8AAA296E54E046
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/S1z5cel_4BMvGvO-a2AeYcUskw0.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 95.214.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9b:46:22:3b:92:46:ec:8a:aa:29:6e:54:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5cf971e97fe0132f1af3be6b601e61c52c930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:55:c1:9e:9d:42:3d:7e:ed:72:ae:3f:c0:c3:
15:c0:7f:79:15:1d:fb:8e:07:d4:da:ca:5d:51:b9:
fb:24:ea:a5:7c:b5:e2:fe:93:a8:87:9c:97:63:53:
2f:a4:f9:35:66:c5:88:f4:eb:55:64:eb:2a:e5:23:
26:5c:6a:76:da:63:01:7f:c4:8c:85:eb:51:f0:ca:
f8:78:9a:66:57:ec:f8:57:2f:bd:cf:95:23:1b:6a:
c8:6c:f4:f6:47:5d:cf:19:f7:da:0e:49:83:3a:d3:
69:91:04:35:66:3f:6f:bb:97:28:be:23:8a:12:4d:
eb:dc:12:1f:be:da:f1:ad:a5:19:cd:30:29:94:57:
e2:5a:dd:b1:9a:0a:53:0b:9a:7f:7b:7e:4b:ff:c8:
fe:92:58:e3:3a:1b:bc:c8:4e:7a:11:17:eb:f6:55:
53:b2:fa:2c:db:b0:d9:01:17:05:0e:00:ce:d2:31:
f5:ae:a0:53:a7:1e:33:a4:b9:70:0b:62:87:46:00:
7d:51:82:0e:d5:bb:bd:1e:87:7b:9a:64:15:24:8d:
36:9d:59:ca:90:d0:70:1b:2a:4f:c9:e4:00:9a:e0:
9b:2f:31:f8:d9:ea:8d:2c:b4:f7:4f:8b:dc:7f:4a:
89:40:97:cc:ab:7e:5a:9e:62:56:b5:de:ce:c9:7c:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:F9:71:E9:7F:E0:13:2F:1A:F3:BE:6B:60:1E:61:C5:2C:93:0D
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/S1z5cel_4BMvGvO-a2AeYcUskw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:38:71:06:74:36:03:72:04:da:53:aa:06:2a:e3:b4:dd:de:
77:d9:f5:bd:14:53:83:14:c9:b0:ba:d7:db:04:8f:3d:b4:c0:
a0:fc:61:d0:75:2f:d0:18:f8:da:c2:c8:b0:22:c6:c9:51:d6:
f2:14:1c:2c:07:ce:9b:64:5a:85:11:cc:7d:f5:ae:ac:8d:d6:
f8:e6:83:9b:1d:e4:da:fd:47:34:42:9c:69:d3:49:b4:cb:18:
e1:b4:7a:87:fb:05:cc:c8:59:ad:92:05:15:6e:2e:80:06:82:
b8:59:66:46:85:d0:66:5a:86:a7:ac:bd:d5:7c:c1:a6:12:96:
12:74:a1:3f:8e:1c:bd:5c:20:73:a5:d5:53:9e:2e:bc:c0:5d:
36:fd:e5:f1:2d:6a:c1:00:3f:0c:91:e5:e9:fe:93:ae:49:99:
b5:72:af:76:d1:04:91:c6:0f:aa:22:bd:66:89:7e:39:e1:c4:
91:bd:cc:20:ff:b4:a8:6c:09:b8:55:cc:15:79:3d:fe:ca:88:
01:3e:2f:c5:f6:d1:d2:44:84:10:c6:51:1b:3c:5a:38:cc:59:
0d:27:0d:77:79:a5:d8:25:17:15:59:d5:e0:bc:82:f8:af:11:
fa:5c:60:a7:74:a1:63:29:c7:21:41:d5:1f:f8:d0:32:47:d8:
fc:cb:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:52 2025 by rpki-client