Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/C3HELizyIMdjdHx-s6fCrnVGQlA.roa
File: C3HELizyIMdjdHx-s6fCrnVGQlA.roa (raw, json)
Hash identifier: grNDpscs8ZpBI4gRI2klCxb12VK2N6zovF4Tl3tlVec=
Subject key identifier: 0B:71:C4:2E:2C:F2:20:C7:63:74:7C:7E:B3:A7:C2:AE:75:46:42:50
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08EF89DF
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/C3HELizyIMdjdHx-s6fCrnVGQlA.roa
Signing time: Sat 01 Jan 2022 08:05:20 +0000
ROA not before: Sat 01 Jan 2022 08:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61071
IP address blocks: 95.158.144.0/24 maxlen: 24
185.18.230.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149916127 (0x8ef89df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b71c42e2cf220c763747c7eb3a7c2ae75464250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:ea:e8:e6:bf:30:09:0c:30:a5:6f:75:2d:
ae:c8:5f:69:67:bf:17:e2:35:c9:b9:45:06:97:e5:
ff:4c:35:2c:5d:b4:09:50:55:d3:ff:68:f5:d2:a5:
0a:2d:e1:38:e2:00:49:ed:cb:e7:15:fa:f8:73:d3:
1a:c8:56:d5:44:0c:6f:b5:e4:f4:6b:df:52:c3:7a:
7e:81:91:98:f9:7c:bb:c6:6c:02:34:9e:42:9f:7f:
c9:97:9f:5e:7a:4b:cb:0e:1f:d1:6b:40:3b:c2:22:
86:b7:af:5f:74:60:ef:67:04:a9:e7:31:91:ac:9f:
fa:d6:f3:bc:41:4d:5c:ba:00:3b:ab:4f:82:f4:5e:
12:88:a0:bc:7b:4e:30:66:6c:65:7c:95:8d:8c:e2:
fd:35:61:1f:7c:07:e9:f3:c6:d0:d2:b3:fe:17:4c:
f8:cb:81:3a:43:a3:6d:eb:47:07:40:3c:f7:ec:23:
00:15:9f:cd:c4:66:2b:0d:f8:06:41:5d:28:d0:60:
f9:67:82:52:9c:dd:23:e8:cd:52:9b:54:82:44:ed:
e0:0c:2e:a3:43:12:ff:9d:eb:90:8d:25:cd:21:03:
21:2b:3c:86:69:38:1c:5f:d0:cd:e2:dd:0e:8a:c7:
75:49:27:30:99:67:7a:5e:9f:94:f1:05:0c:38:6c:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:C4:2E:2C:F2:20:C7:63:74:7C:7E:B3:A7:C2:AE:75:46:42:50
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/C3HELizyIMdjdHx-s6fCrnVGQlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.144.0/24
185.18.230.0/23
Signature Algorithm: sha256WithRSAEncryption
08:94:08:62:2d:69:7a:2c:1b:af:d6:67:76:52:c2:ee:6f:0a:
41:b9:ee:81:17:ed:b2:32:97:03:6d:fe:47:3b:96:e1:27:05:
04:03:df:af:3f:d9:46:6c:6e:2e:a8:34:4e:d7:0f:50:8a:c9:
97:9d:77:22:26:4c:d4:81:86:a9:ba:37:3b:47:e1:7c:a9:54:
da:7e:3f:e5:eb:37:35:a5:e8:f4:b1:0d:6a:0c:a1:9e:bf:3d:
e5:b0:6a:cf:38:da:5e:45:ed:d6:44:db:a9:92:4a:67:8a:b5:
78:84:4c:a4:1a:49:3d:5f:f6:f1:b3:52:a9:3e:a9:98:ca:24:
cc:7c:ac:72:2e:60:14:3e:84:b9:83:14:52:d3:49:8c:bd:a5:
15:1c:a1:f5:89:2e:20:12:72:58:b4:86:ef:fd:49:e1:15:74:
f3:50:8e:bd:6a:48:b0:6b:c5:8f:bc:07:8c:73:b5:e2:7d:d8:
9b:f4:37:53:11:c3:1e:72:d6:74:ee:98:0b:31:6e:11:8b:41:
fb:13:34:22:91:1c:5c:13:2c:65:02:a7:08:9d:a0:af:d0:dd:
81:c4:72:f7:25:65:fa:28:93:6d:6a:3b:a6:53:b7:fc:4b:e8:
31:28:6b:a4:86:68:35:4f:a9:35:c4:78:36:2f:db:e7:09:7b:
c2:f4:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org