Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/gf8csgMtRXD81JswEuSqP9KrmVc.roa
File: gf8csgMtRXD81JswEuSqP9KrmVc.roa (raw, json)
Hash identifier: ajAo11ywzvw5NpBUTG08gKyFMFpXgYFaqdzeocYBTBs=
Subject key identifier: 81:FF:1C:B2:03:2D:45:70:FC:D4:9B:30:12:E4:AA:3F:D2:AB:99:57
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08F0731F
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/gf8csgMtRXD81JswEuSqP9KrmVc.roa
Signing time: Sat 01 Jan 2022 08:05:21 +0000
ROA not before: Sat 01 Jan 2022 08:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62386
IP address blocks: 95.158.136.0/22 maxlen: 24
95.158.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149975839 (0x8f0731f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81ff1cb2032d4570fcd49b3012e4aa3fd2ab9957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:86:19:6e:70:1c:45:31:e2:d7:4a:4b:12:
5c:a1:b9:02:e2:2d:11:79:9c:0f:42:8e:e7:e3:33:
3c:db:b8:5f:19:de:8e:c5:80:77:a7:3e:b4:c3:f7:
96:a7:97:c1:aa:63:5d:d1:d3:a0:f7:ea:4d:56:92:
1a:cb:99:e9:3c:03:8d:4f:c9:b0:99:1f:61:09:7b:
68:b7:78:ae:86:60:e5:0c:aa:1c:66:d0:7f:36:b5:
8f:6a:9a:86:09:2d:5e:f2:28:f4:b0:67:88:8d:d0:
9d:b3:9e:bd:a9:28:b1:47:37:58:96:1d:15:5f:85:
ac:57:60:44:80:70:a9:da:ff:5d:da:a5:aa:5c:5a:
41:4c:21:78:a2:2c:e8:67:fd:73:65:da:cd:92:3e:
d3:77:3c:f7:c2:f5:e2:5f:5b:c7:9c:78:d5:b8:f7:
a7:71:27:6f:2f:3b:d2:fd:a1:ad:5f:29:b2:69:f8:
5c:76:e7:83:5a:ca:3c:c8:8b:4a:ea:73:5e:dc:8e:
44:44:4c:2d:b4:cf:64:9d:04:e0:64:cc:79:56:99:
97:c4:be:13:44:45:f7:30:a9:75:63:bd:9a:ef:a9:
23:1b:ea:0c:79:97:3c:b2:94:dd:60:a1:0f:ff:85:
1f:6d:5c:19:b1:4e:7a:4f:43:02:d5:eb:28:71:72:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FF:1C:B2:03:2D:45:70:FC:D4:9B:30:12:E4:AA:3F:D2:AB:99:57
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/gf8csgMtRXD81JswEuSqP9KrmVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.136.0-95.158.141.255
Signature Algorithm: sha256WithRSAEncryption
22:aa:f8:c5:90:16:e3:ed:44:78:0e:d2:10:66:21:40:c4:b2:
17:7d:a5:f6:85:7d:6a:f3:6c:f0:19:ee:81:5f:4d:29:96:fa:
02:65:b9:e2:9d:49:26:9e:dc:b5:5c:4d:58:cc:90:44:42:87:
ed:4f:f8:f5:e4:cf:a4:1d:29:d7:d9:cd:c0:ab:b3:52:5c:63:
83:a9:51:f4:62:c3:ea:e0:48:44:5b:e4:a6:01:99:7c:92:65:
e6:15:67:74:a7:e8:3a:1c:91:c9:50:65:88:0c:57:df:d7:23:
0a:c9:76:50:05:ea:d6:48:1c:71:d7:ee:49:3c:10:ec:34:35:
24:54:13:6a:2e:db:7f:f4:f1:ae:e2:89:bf:20:79:55:86:03:
56:32:d7:10:5c:25:72:ef:5d:85:5d:cb:05:fe:b3:40:fa:64:
bf:b9:77:f1:46:98:ad:56:a2:76:b6:76:af:a7:bf:f3:75:d4:
24:05:11:22:7c:72:6d:13:27:cf:1a:c2:f9:dc:56:4b:6d:42:
60:27:1a:87:fb:97:89:16:a0:8e:9e:88:bc:e1:34:ec:b6:63:
13:64:5c:29:96:81:7f:9d:0a:e5:ff:60:3e:43:06:60:37:38:
41:32:d2:c7:1e:25:62:32:d8:c6:54:a6:10:bc:15:96:d6:16:
75:0b:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org