Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ppCcqFmvAsiYlwxtqJG_kaFJHEY.roa
File: ppCcqFmvAsiYlwxtqJG_kaFJHEY.roa (raw, json)
Hash identifier: WVbVTz1pH6NSV2uaX88F2oQuigGWubt7VLYMbSH3UXQ=
Subject key identifier: A6:90:9C:A8:59:AF:02:C8:98:97:0C:6D:A8:91:BF:91:A1:49:1C:46
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08E4A81F
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ppCcqFmvAsiYlwxtqJG_kaFJHEY.roa
Signing time: Sat 01 Jan 2022 08:05:14 +0000
ROA not before: Sat 01 Jan 2022 08:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8967
IP address blocks: 95.158.156.0/22 maxlen: 24
46.35.182.0/23 maxlen: 24
95.158.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149202975 (0x8e4a81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6909ca859af02c898970c6da891bf91a1491c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:85:20:70:89:95:2a:ca:cd:c5:b9:dc:84:
32:9f:fd:49:6b:c5:42:cc:bf:1d:58:dc:c6:1d:08:
dc:61:ab:96:81:ab:23:f8:1e:69:36:0a:16:f7:77:
3b:ff:31:39:15:d4:38:fd:de:6c:92:fa:66:cd:78:
b4:6f:4c:06:9d:14:89:0c:90:08:e6:18:a0:d1:60:
36:4c:73:f2:3a:8d:c4:74:54:4c:22:a8:35:88:2e:
7d:6e:73:4f:51:30:9b:58:2e:80:40:b4:4c:e4:0b:
6c:70:83:52:d3:46:c3:a6:1c:0d:89:e9:1e:aa:16:
f8:ef:81:9f:2b:f7:e7:2c:2e:ad:b5:48:d7:d1:50:
bc:2d:de:e4:03:5c:bd:da:a3:b3:74:b8:ec:29:dd:
61:07:23:d2:40:69:d9:8d:d3:0e:7c:ed:df:d0:3b:
d1:64:dc:2e:c9:ed:06:16:c0:52:4a:fa:94:80:1f:
d0:dd:e9:8c:38:66:3f:1c:72:1a:2f:ff:66:91:97:
d2:25:7b:50:5e:73:65:ee:2e:65:4f:e9:77:84:8d:
cb:f3:53:6d:f2:4a:41:50:05:4c:19:94:9a:04:e8:
44:9f:26:65:72:e9:97:45:84:2e:0f:65:25:88:a1:
c9:ed:e9:68:ed:12:4d:8e:ea:8a:c2:9f:0e:15:84:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:9C:A8:59:AF:02:C8:98:97:0C:6D:A8:91:BF:91:A1:49:1C:46
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ppCcqFmvAsiYlwxtqJG_kaFJHEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.182.0/23
95.158.156.0/22
95.158.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:4a:40:cb:9b:5d:8b:ec:1b:2c:77:26:16:50:de:4f:74:e6:
fe:84:50:86:45:29:7d:83:2a:6c:af:d7:dc:5b:f6:56:60:0c:
cc:3e:f6:11:db:1c:ad:cb:b4:04:70:ce:3f:5c:67:13:bc:f2:
c7:e2:84:fe:b3:8a:69:2e:a1:2b:bd:1d:9f:b2:1c:b6:55:fe:
a6:34:85:4d:e6:96:97:95:71:06:a9:1f:39:b0:05:28:b9:5e:
21:5b:de:95:13:0a:25:7e:99:fc:55:a1:77:db:7e:8a:c5:e2:
50:88:82:2e:9a:28:55:13:ac:7d:e7:8d:09:3b:d8:94:f7:1f:
11:ef:59:31:69:4e:54:74:5a:10:04:a7:be:9c:67:d7:1c:57:
e2:07:f7:bf:7f:99:c8:b9:07:e0:94:d0:6a:2b:cc:9b:dd:9f:
94:5e:31:e2:15:40:16:93:2f:ae:cf:59:d1:10:3e:f3:60:ab:
93:42:43:9a:89:d3:96:33:fa:84:9a:2a:e8:dc:2e:2a:49:8f:
e7:0f:27:2e:1e:a3:c7:81:7a:7c:cb:c9:f9:21:c5:96:51:e9:
f6:93:21:1d:c4:1a:27:9a:0b:f5:c1:55:97:98:6c:4b:ad:cf:
03:5e:ce:7c:f3:77:e1:7e:e5:b0:32:d8:42:30:21:7f:c0:07:
7e:99:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org