Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ogh6Zq1YJfyeWviuZgJPUzgiKlY.roa
File: ogh6Zq1YJfyeWviuZgJPUzgiKlY.roa (raw, json)
Hash identifier: fKF6Xk6wnvYF9JqrZXjG7H8Tiqji760+lwmg0tFNiRs=
Subject key identifier: A2:08:7A:66:AD:58:25:FC:9E:5A:F8:AE:66:02:4F:53:38:22:2A:56
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01850CFB4A265FDE485C4A046B1DB59383B0
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ogh6Zq1YJfyeWviuZgJPUzgiKlY.roa
Signing time: Tue 13 Dec 2022 19:34:33 +0000
ROA not before: Tue 13 Dec 2022 19:34:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 195.95.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:fb:4a:26:5f:de:48:5c:4a:04:6b:1d:b5:93:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Dec 13 19:34:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2087a66ad5825fc9e5af8ae66024f5338222a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:4a:96:63:7b:c9:9f:43:77:fe:de:0f:40:
5d:c7:bf:e8:f6:ba:50:1e:0a:76:81:da:b5:b9:a2:
ba:ec:6d:85:3d:2f:ea:a7:b3:f6:70:40:bd:ae:8f:
6b:b2:98:27:16:2f:5f:2e:1e:8e:8f:46:da:6e:fc:
be:55:80:ce:11:2c:a4:d8:82:32:8d:73:40:cf:6a:
74:da:3b:a0:e1:8d:01:71:e3:f5:47:e3:6c:66:22:
dc:09:7d:91:48:7f:88:45:84:45:73:f3:3a:18:2e:
6e:ee:02:8e:d2:75:ca:40:cb:06:d6:90:4c:4f:d7:
57:9b:b8:56:bd:bc:1c:f8:67:8c:bf:f4:57:39:80:
a4:29:4b:6c:6d:eb:3e:9f:65:0a:f0:c5:d0:57:93:
69:de:50:02:f3:3e:a2:9b:00:f0:ae:a5:47:9a:bc:
c5:4a:10:de:59:da:bf:2c:2f:3e:6c:82:00:c4:f1:
f2:13:7a:7f:d4:47:51:0e:af:48:96:fb:17:61:1f:
d0:47:ed:9f:f8:de:24:20:09:f2:a9:42:0a:f0:aa:
03:76:29:90:51:fa:a8:1c:c0:9b:2b:f6:66:55:28:
fd:9e:f1:72:14:a8:4c:e1:c7:e8:b6:ca:a1:4c:d7:
e2:b7:fd:1d:3f:ca:b1:fd:40:fb:2b:33:04:22:a8:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:08:7A:66:AD:58:25:FC:9E:5A:F8:AE:66:02:4F:53:38:22:2A:56
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ogh6Zq1YJfyeWviuZgJPUzgiKlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:78:c2:2e:4a:76:62:fd:7b:de:aa:44:5a:2d:8a:63:cb:1e:
2b:fb:71:bc:ef:e6:98:e9:c0:33:8b:f5:cf:da:74:8a:ce:03:
9a:14:e7:1f:ec:5d:c8:33:79:e7:46:5b:09:ce:56:78:a6:4c:
91:09:6f:72:18:44:4c:0b:89:a0:b8:9a:0f:b5:24:90:66:17:
17:27:52:0b:e6:97:7d:24:d3:52:ab:b0:44:4c:3e:b8:57:62:
40:4a:38:c9:0c:a0:e6:eb:99:b2:aa:24:b2:0d:08:79:c9:96:
3c:4d:20:b3:76:6e:77:06:15:da:a7:61:67:39:e2:6b:35:d0:
73:6b:9a:27:5a:72:33:ea:d7:ea:85:ca:65:91:2e:af:dc:d8:
ac:40:cd:04:d5:7b:4b:18:77:17:54:40:3e:8d:9a:b2:21:d7:
51:5c:dc:4f:4f:52:2d:8a:48:70:0a:70:c6:32:c5:2c:29:ed:
7c:96:22:37:ff:56:64:cd:11:bb:5f:0c:7d:df:42:af:cc:06:
ee:04:2d:a0:f4:a3:7a:15:92:74:05:da:11:77:06:fb:26:9f:
b6:b0:2b:20:08:0f:63:0c:c7:3a:04:25:82:c3:e3:b4:95:d4:
83:2a:d2:5b:8e:47:39:7c:00:7f:07:16:88:eb:6e:39:63:f2:
61:f0:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-fra.rpki-client.org