Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/BszRbQlcr3HWP0ZYGa4CVBWbDDY.roa
File: BszRbQlcr3HWP0ZYGa4CVBWbDDY.roa (raw, json)
Hash identifier: 3YtU7um8aXcNNSAZMhBycU87WoDp0cTtA+SiYQbfHEA=
Subject key identifier: 06:CC:D1:6D:09:5C:AF:71:D6:3F:46:58:19:AE:02:54:15:9B:0C:36
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 095154C0
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/BszRbQlcr3HWP0ZYGa4CVBWbDDY.roa
Signing time: Tue 08 Feb 2022 07:01:09 +0000
ROA not before: Tue 08 Feb 2022 07:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204448
IP address blocks: 80.95.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156325056 (0x95154c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Feb 8 07:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06ccd16d095caf71d63f465819ae0254159b0c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:bc:7d:9f:73:31:b7:5f:0f:b6:24:c7:73:
41:4f:ba:cb:62:99:8b:a7:38:b6:62:7c:f6:f4:be:
ae:c5:14:a6:fa:2e:e2:28:1c:75:25:b1:d2:ad:80:
01:f9:e2:4a:46:65:1b:f4:01:3c:90:d8:ac:a4:e9:
de:c0:64:5b:66:82:44:87:ae:a4:58:11:e7:c6:31:
f1:86:a7:08:fb:fe:ef:37:f9:74:21:d6:b4:a4:bb:
fa:72:81:85:b2:0a:b5:d9:a6:de:e7:86:8e:99:b0:
c8:83:82:49:2c:3c:18:28:ef:6c:ad:eb:d5:f1:46:
37:6a:a4:3c:02:96:8f:ff:1d:b2:16:30:66:9d:52:
36:ad:c5:d7:a2:c8:59:4e:13:c8:0d:a8:4d:8a:3c:
88:4c:16:dc:3a:c4:c4:20:0e:d3:ef:c1:4c:20:d5:
20:24:2a:20:26:34:82:be:a6:6b:fb:c2:17:80:b5:
62:8b:a3:24:40:79:5d:93:c9:1a:d2:25:cf:52:91:
a6:4b:7c:a4:73:9f:d8:69:05:9a:15:da:38:ef:97:
17:c1:e0:07:93:b1:8b:d1:7d:84:79:fe:81:7d:f1:
c0:c0:d9:54:79:d2:3d:b3:26:81:51:17:a7:6d:87:
6c:2d:b6:ea:6d:17:fd:cc:e6:75:6f:34:c7:d7:38:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:D1:6D:09:5C:AF:71:D6:3F:46:58:19:AE:02:54:15:9B:0C:36
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/BszRbQlcr3HWP0ZYGa4CVBWbDDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.23.0/24
Signature Algorithm: sha256WithRSAEncryption
69:47:d7:9e:2a:18:c7:70:da:c1:c7:f0:4b:55:47:2f:28:f4:
e1:10:d6:f5:d5:4a:5a:c6:8c:4d:d0:d8:e4:66:d6:70:96:c9:
46:f6:55:cc:f6:66:ec:cd:41:48:8a:b7:97:82:f0:64:c5:20:
33:5d:e7:73:47:41:b4:16:df:e3:34:b0:36:1d:1a:a9:b7:6e:
43:9b:59:7b:28:dd:91:15:c8:be:27:da:b5:5f:b0:cf:6a:fa:
c7:e4:7b:2a:31:9f:19:cc:26:bb:fb:80:a3:7f:13:64:61:72:
c6:60:11:0b:02:65:1a:0f:66:39:1c:b1:0e:b2:80:f7:a4:74:
49:fb:67:5f:cd:c9:b5:70:20:19:b8:b3:e0:34:88:bd:db:3c:
a0:4b:a4:64:08:49:e6:64:89:42:36:dc:d8:81:c8:a1:db:94:
90:63:57:7c:00:c2:80:85:eb:f9:f7:fd:99:89:6a:ad:55:1e:
ea:83:54:96:e2:20:0a:57:7d:dd:00:cd:67:5c:62:ac:1b:fd:
09:8d:dd:2c:87:b7:63:5e:3f:37:e5:5f:ec:e7:fc:98:7d:1d:
ca:15:b5:5f:da:cb:0e:b3:5b:09:98:1f:89:fc:f2:eb:d3:80:
fb:52:31:0b:81:b1:97:bc:f4:ba:99:87:c8:ef:54:37:64:79:
30:fd:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org