Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/4VZyVT7eglDnCzoViaR7osd3TBs.roa
File: 4VZyVT7eglDnCzoViaR7osd3TBs.roa (raw, json)
Hash identifier: XanLCSItrmY8DuNf3hEWh5lvCPHJTm670D3E/xYkjwU=
Subject key identifier: E1:56:72:55:3E:DE:82:50:E7:0B:3A:15:89:A4:7B:A2:C7:77:4C:1B
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0292BB94
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/4VZyVT7eglDnCzoViaR7osd3TBs.roa
Signing time: Sat 01 Jan 2022 06:59:04 +0000
ROA not before: Sat 01 Jan 2022 06:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8915
IP address blocks: 95.140.144.0/21 maxlen: 24
80.90.176.0/22 maxlen: 24
2a00:1818::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43170708 (0x292bb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 1 06:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e15672553ede8250e70b3a1589a47ba2c7774c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:38:33:ac:14:eb:9d:e5:35:1d:b2:cc:a3:
97:bd:2e:54:78:95:dc:54:19:44:71:27:a6:cc:6e:
5e:f3:ac:dc:b3:0b:13:0b:86:05:f0:3e:93:49:04:
0e:6e:f7:50:72:f8:fd:5d:77:81:70:1b:95:fa:4a:
84:03:1d:fd:3b:3f:a0:a8:75:38:e1:2c:b3:ed:cc:
2c:50:03:ee:f9:aa:25:5e:6a:8c:33:4b:46:36:ba:
20:14:12:78:e5:13:5b:5e:6c:5c:b8:1a:4f:72:fe:
16:26:1f:19:33:5e:30:36:80:9e:97:83:65:af:c9:
68:b5:5a:1b:4e:3a:e0:5b:5f:09:6b:c0:c8:ce:e2:
97:4c:fd:57:a5:ce:e5:5e:b0:bf:e8:01:b1:57:5b:
01:64:e8:22:04:7f:8e:bc:7b:04:15:ea:11:66:0a:
0c:3f:b2:5b:74:42:6a:04:73:e8:26:cf:8b:cc:bf:
78:09:31:58:42:47:42:f1:e0:93:35:f4:1a:63:9e:
d2:95:3a:d2:32:42:ae:a4:05:1c:e4:0e:a6:58:b4:
03:ff:69:8e:ab:94:d6:ad:1b:d2:fc:86:36:5d:c7:
c0:9b:f6:c9:56:a1:43:d4:b2:84:56:c6:3f:a0:f4:
5a:8d:6e:a7:e5:99:45:4f:d3:9c:c2:e2:ae:77:d8:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:72:55:3E:DE:82:50:E7:0B:3A:15:89:A4:7B:A2:C7:77:4C:1B
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/4VZyVT7eglDnCzoViaR7osd3TBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.176.0/22
95.140.144.0/21
IPv6:
2a00:1818::/32
Signature Algorithm: sha256WithRSAEncryption
77:a5:54:ed:b9:2a:c5:6c:7e:3d:61:62:b0:d4:fc:f6:f0:c4:
49:03:85:4b:d4:c0:79:7e:58:42:25:22:c7:a8:15:af:12:96:
f9:00:64:8f:f4:28:5f:aa:99:a8:2c:23:06:75:66:77:c2:ba:
69:78:0a:a4:9f:b6:d2:13:86:9d:8e:e1:39:13:0a:66:a8:1f:
f6:5a:e3:d1:c9:85:f9:43:a5:bf:af:69:01:a2:de:9d:b3:33:
48:5e:7c:1a:15:b5:5a:0f:6e:93:ed:74:54:46:3c:14:1f:4a:
43:46:52:f1:cb:ba:ff:0f:ba:6a:9e:dc:12:fb:44:ae:55:f2:
39:fe:4d:31:b2:83:ba:b1:9d:97:93:24:07:81:71:41:c3:73:
cd:99:d8:75:b9:40:c2:ae:24:cf:d7:98:83:74:37:7d:5f:0a:
51:54:2b:0a:13:99:a7:7f:be:de:3f:fa:82:fc:69:8c:7a:99:
a0:81:f7:be:75:8d:37:f5:ce:6b:f6:7d:dc:37:5a:47:92:fc:
cd:84:c4:cd:4b:a5:3a:57:3c:0d:65:9e:9f:f4:3d:25:be:ee:
1c:31:8a:21:e4:93:f7:4e:a7:0f:eb:4e:2c:d4:7d:5d:b6:9b:
8c:3c:f1:fe:14:d0:5c:37:0c:b2:e1:d7:40:94:4d:af:44:bd:
89:1c:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:33 2023 by rpki-client on console-ams.rpki-client.org