Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/AcrmGhrdlHkTmrNx5i7TN6j-UiU.roa
File: AcrmGhrdlHkTmrNx5i7TN6j-UiU.roa (raw, json)
Hash identifier: 9o1JKjUpZkNe5H8ShOwQNNE6bqh7SNVrwwJI2K3w+Zs=
Subject key identifier: 01:CA:E6:1A:1A:DD:94:79:13:9A:B3:71:E6:2E:D3:37:A8:FE:52:25
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 97E83A
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/AcrmGhrdlHkTmrNx5i7TN6j-UiU.roa
Signing time: Fri 25 Feb 2022 06:54:09 +0000
ROA not before: Fri 25 Feb 2022 06:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 195.95.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9955386 (0x97e83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Feb 25 06:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01cae61a1add9479139ab371e62ed337a8fe5225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:17:ea:a0:8a:63:46:af:82:bf:07:49:1a:
ca:58:7c:fc:3a:ca:51:fd:f1:78:8c:df:0d:cc:b4:
20:2c:76:ec:f8:38:58:d7:b3:09:fc:01:fd:35:3e:
5c:09:b3:18:9f:76:e7:bc:8a:03:85:57:47:ef:9f:
1a:75:dc:31:5d:ca:87:03:5e:d5:cd:aa:69:1d:38:
e8:fd:eb:e3:5b:41:89:ee:78:a0:7a:00:ae:4f:2e:
7e:9c:9b:bb:80:6e:f1:4f:00:db:65:37:6b:4e:1b:
b9:23:16:8c:0a:31:d8:f1:69:b0:d5:e7:bb:d7:03:
2c:b9:35:23:4e:7b:88:cc:14:a7:50:b2:92:23:4c:
d8:2c:5f:b5:57:64:85:3a:ec:9d:b1:a9:48:5b:fc:
5c:9b:e5:bf:09:15:19:1c:ec:0d:7c:70:46:39:86:
a8:40:62:26:2a:a1:62:81:e5:5b:d8:29:e3:4b:e7:
2f:5c:11:ee:81:b5:0d:ad:17:78:ce:82:e0:c5:35:
6f:b7:e2:e1:6f:56:6e:56:8d:9b:9a:19:68:bb:19:
fb:4b:cf:f6:27:93:09:8a:80:4d:19:8c:a1:8a:c8:
91:e7:6d:43:e3:6f:d7:76:b5:f8:84:a1:2e:3a:75:
9b:b4:b5:17:91:3c:d7:91:46:db:4b:27:3e:c4:f5:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:E6:1A:1A:DD:94:79:13:9A:B3:71:E6:2E:D3:37:A8:FE:52:25
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/AcrmGhrdlHkTmrNx5i7TN6j-UiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d3:5d:7f:83:f4:c2:f6:15:94:5b:dc:00:b4:91:ee:0e:84:
79:25:4d:28:28:34:ab:11:ae:d6:8c:76:e1:60:87:22:b6:84:
df:7f:f7:2c:b0:f4:25:18:f6:5f:3c:f7:bf:f3:3e:de:d2:92:
50:44:41:20:62:f8:66:b1:90:6e:e0:33:1f:f3:34:11:21:b2:
8f:82:0c:e3:9e:34:32:5e:aa:40:c0:be:35:27:c3:ad:65:93:
e5:12:6a:8d:be:9d:93:b7:d6:e3:b0:3c:d6:c4:a8:d2:41:f4:
d9:21:d2:5c:de:11:23:63:21:08:b1:94:04:5e:1c:c3:b9:87:
bb:80:06:42:9e:9d:0b:ba:23:37:ff:4b:ad:36:2f:b5:4f:01:
34:31:d0:cf:12:1b:da:71:ca:fd:db:94:61:df:b8:a9:8b:8c:
50:a1:b9:5b:a9:92:05:14:3c:67:b5:fd:a2:8c:b6:9e:f5:1d:
a7:42:63:dc:87:d3:02:de:3b:ec:61:89:30:46:75:1c:a7:6a:
cb:cb:ba:8b:08:59:9d:7a:fe:7d:ae:a6:15:93:a9:9f:fd:85:
8d:3b:70:fd:97:9e:b5:27:1f:8f:11:23:7e:a0:3b:3a:7f:37:
b9:d0:69:3b:14:71:30:56:83:7a:22:be:2c:e0:ab:8c:0a:f0:
fc:67:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org