Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/N-iq0SqyC0pOCH2SOHjKWRnDR8s.roa
File: N-iq0SqyC0pOCH2SOHjKWRnDR8s.roa (raw, json)
Hash identifier: q+aL4xbnj5yA0IV21jfPd66uEVMmbIbSFuHEeeIkxtc=
Subject key identifier: 37:E8:AA:D1:2A:B2:0B:4A:4E:08:7D:92:38:78:CA:59:19:C3:47:CB
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 9AE153
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/N-iq0SqyC0pOCH2SOHjKWRnDR8s.roa
Signing time: Fri 25 Feb 2022 16:27:06 +0000
ROA not before: Fri 25 Feb 2022 16:27:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 195.95.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10150227 (0x9ae153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Feb 25 16:27:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37e8aad12ab20b4a4e087d923878ca5919c347cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:ff:2b:15:d4:a0:ac:e8:9b:83:3f:9a:12:
b4:86:f2:07:bc:f6:e9:4d:16:ae:03:dd:1c:78:a3:
47:02:3b:0b:fa:dc:c4:ed:41:b4:a9:e7:56:66:a1:
35:7a:10:e9:db:5e:74:de:11:67:42:0d:ff:4c:37:
a1:f9:00:15:3b:8b:59:8a:15:bc:ed:00:fc:46:96:
4c:3c:c1:e8:af:8f:cd:7a:72:06:9b:9d:31:ea:6a:
96:ac:60:d1:5d:cd:0d:87:83:e7:3c:08:fb:c1:75:
ef:46:81:86:98:de:61:21:1f:d9:21:b7:64:76:c7:
e0:fb:34:ec:65:b1:2f:82:52:ce:da:f2:e2:77:7b:
5a:80:38:cb:bb:8d:3a:ba:79:24:43:56:0b:10:df:
82:d2:37:93:db:8d:6e:fd:c9:a5:3c:c6:e7:1b:ff:
ca:9e:ce:2e:9d:6c:32:c5:fa:11:b0:4d:e4:7f:56:
f3:f7:a0:e3:b7:59:8b:43:2f:61:7d:b1:7b:2e:79:
8e:a8:e2:ac:f8:fe:64:16:9d:1f:72:6c:b9:29:63:
fc:e3:46:ed:d9:2f:12:6e:4e:43:32:44:3f:92:16:
61:b0:1d:ef:67:96:c5:5c:9c:1d:8b:47:b5:51:8b:
fa:6d:09:25:7a:a3:ba:62:fe:80:9d:7a:d6:51:8b:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:AA:D1:2A:B2:0B:4A:4E:08:7D:92:38:78:CA:59:19:C3:47:CB
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/N-iq0SqyC0pOCH2SOHjKWRnDR8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:98:3f:2a:80:77:aa:6e:c5:d1:e6:a6:f0:8f:68:74:c2:da:
09:89:56:98:f3:e0:22:7a:ed:46:e8:70:9d:5d:34:a2:2c:7f:
2f:26:56:ae:56:a9:16:a7:19:c5:4e:db:6d:a7:2f:e7:89:4e:
78:64:c6:7b:05:f8:92:da:15:37:53:53:da:b4:d4:a5:5a:2b:
b8:c1:e2:08:96:73:71:48:51:d9:10:21:88:79:44:bf:3a:a0:
a0:f0:05:3f:df:d7:fd:66:41:3d:d9:65:0f:ef:51:8e:bb:9f:
16:26:f7:61:b1:e4:92:c5:3b:a2:12:17:fe:36:a8:36:be:1f:
07:68:21:b9:d0:d3:af:d8:84:6f:b1:93:c4:ff:ec:04:75:b5:
ef:16:1b:c8:5d:19:97:1b:5f:7f:17:e6:be:45:2c:9b:86:98:
46:be:bb:85:22:37:29:b9:62:f6:56:1c:10:1a:7a:bb:4c:0f:
96:cc:03:9d:e0:b9:8a:b5:68:89:15:0a:c8:ed:86:1e:bf:72:
d1:92:48:85:c5:38:17:f8:aa:8d:45:63:bc:0a:1a:ab:95:82:
6b:be:27:09:61:8a:f6:32:08:e9:8a:f1:b4:88:f6:73:8b:b1:
33:62:8e:db:ac:77:df:70:99:51:79:b1:3b:2d:61:32:a8:c5:
f8:56:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org