Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/xwC_-3egsIRMMhqdoo04ZX81p7A.roa
File: xwC_-3egsIRMMhqdoo04ZX81p7A.roa (raw, json)
Hash identifier: TK/BL4fzJz236fQ2/xAEwxMMarYmtcFWRatVOhkNjzY=
Subject key identifier: C7:00:BF:FB:77:A0:B0:84:4C:32:1A:9D:A2:8D:38:65:7F:35:A7:B0
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: E511EB
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/xwC_-3egsIRMMhqdoo04ZX81p7A.roa
Signing time: Mon 28 Mar 2022 09:45:54 +0000
ROA not before: Mon 28 Mar 2022 09:45:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147186
IP address blocks: 195.95.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15012331 (0xe511eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Mar 28 09:45:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c700bffb77a0b0844c321a9da28d38657f35a7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:80:f1:98:3c:ea:14:f7:c2:a0:e0:2d:ea:
7c:d4:fc:53:bb:04:90:d0:fb:42:c1:85:31:8a:c0:
c3:40:ac:7c:a9:b6:0c:c3:cb:6c:85:9b:3f:3d:7a:
81:a8:93:d4:49:0f:70:0f:b5:74:d3:c8:93:d0:c5:
39:7c:a5:d2:da:41:73:97:ac:5b:12:9e:e8:08:3f:
1c:d2:df:fd:d8:fb:21:64:f7:d9:4a:03:a7:8d:00:
a1:56:d2:8d:d1:d0:29:05:03:74:04:13:1d:f2:8b:
ef:a1:a6:cc:aa:a0:50:0e:03:53:89:30:a6:40:e8:
b9:64:7b:97:c1:d4:8e:d7:6e:fb:93:db:62:49:5a:
01:c8:4a:2a:6a:b3:ac:7d:4a:fa:58:b4:7b:14:0d:
78:35:be:02:94:4d:e6:2c:59:7e:40:c3:e1:8b:de:
7f:1e:cc:03:4b:b8:1e:c1:23:9f:d5:ba:35:d6:79:
47:90:05:b8:67:e7:4a:ee:6d:9b:40:08:a9:36:94:
cc:89:e3:19:ff:a5:b3:fd:a5:16:2b:68:89:c5:e0:
e2:cd:cc:05:10:9b:58:a7:b4:ee:0c:12:6f:7d:99:
26:38:47:b1:fb:51:fa:ea:a7:a8:76:3a:6c:4a:24:
17:3c:0f:90:6e:81:5a:de:a8:c8:49:bc:16:10:c6:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:00:BF:FB:77:A0:B0:84:4C:32:1A:9D:A2:8D:38:65:7F:35:A7:B0
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/xwC_-3egsIRMMhqdoo04ZX81p7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
78:47:4a:ef:32:9e:a1:93:33:6b:81:73:a8:c7:52:64:0f:8a:
79:56:2e:3c:a6:7e:3d:8d:9e:10:5c:21:86:49:dd:d5:0f:ef:
2e:c6:de:71:db:a3:f5:26:cf:2f:3d:fd:d9:a0:04:72:08:84:
0d:e3:4c:a9:ee:cc:a0:35:b9:d9:0b:c8:ea:4e:39:86:73:ca:
77:c4:5d:77:d7:e0:f7:b5:5b:1f:d2:64:33:ac:ec:2e:60:6d:
1c:87:bb:86:45:47:ea:60:3a:04:48:56:a4:a4:a2:e5:af:e4:
ce:cb:d8:bc:6a:bf:96:b9:eb:81:4d:34:38:6a:5f:e2:fb:74:
ba:45:aa:bd:7d:04:9a:59:36:c0:ab:a8:d1:35:3e:89:7f:ad:
72:e6:14:7f:07:79:4b:d3:7e:25:14:bf:c2:3d:7e:c5:2e:4f:
8c:62:24:50:e4:30:3c:1e:9d:73:a2:61:5c:d8:61:c0:8b:4e:
41:b7:cc:03:fc:09:cb:45:8f:a8:69:73:dc:fa:48:8a:3d:cc:
08:9d:11:ab:c5:f2:98:ff:80:e3:0b:78:c3:65:48:65:a2:10:
2b:25:16:60:40:73:a0:d4:b7:51:6f:98:51:de:03:71:c7:08:
1f:80:15:40:f8:be:15:55:02:b8:fe:dc:40:0e:6d:5d:51:63:
72:98:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org