Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/lVkDKHIBv2Y8Nra_p4ClZXGzBDs.roa
File: lVkDKHIBv2Y8Nra_p4ClZXGzBDs.roa (raw, json)
Hash identifier: xoyd20iGA6h4LgdLcYYvUjk8VhfGMDRWsfgzY5A+MP4=
Subject key identifier: 95:59:03:28:72:01:BF:66:3C:36:B6:BF:A7:80:A5:65:71:B3:04:3B
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 09E0DB32
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/lVkDKHIBv2Y8Nra_p4ClZXGzBDs.roa
Signing time: Sat 01 Jan 2022 00:58:20 +0000
ROA not before: Sat 01 Jan 2022 00:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47698
IP address blocks: 195.47.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165731122 (0x9e0db32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Jan 1 00:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=955903287201bf663c36b6bfa780a56571b3043b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:22:0f:81:c9:53:7f:b7:52:de:69:db:f4:
a9:4b:58:1c:bc:65:e9:85:31:3e:9a:3a:ac:eb:49:
9d:c3:b4:34:42:ef:a5:5c:a3:7c:4d:46:f6:e7:ed:
2d:cb:90:40:3e:2f:c5:27:f6:f6:7a:ac:f8:b6:6f:
b8:00:3f:1d:2c:5e:73:9f:f5:52:cc:48:a0:b1:7e:
2a:14:f6:ca:a3:ca:f0:5a:55:53:d3:d6:ad:5b:93:
31:b5:d2:df:57:56:a7:87:76:f7:00:ac:c2:10:82:
00:2a:9e:57:cb:53:77:3b:0d:79:cf:26:2a:9d:1a:
fa:0a:3b:68:10:99:cb:07:31:60:1e:88:3f:56:da:
92:52:73:ec:71:32:14:0f:ac:3d:87:c6:80:d0:19:
48:4a:6c:b1:92:96:50:91:a1:13:19:02:13:f7:48:
7a:92:f8:c8:d6:0e:de:59:6e:1c:c9:7c:80:43:84:
13:c2:cb:df:6b:fd:cd:84:9d:45:39:7a:72:b2:b5:
01:cb:77:2e:ff:89:3f:be:72:4b:6a:1b:f1:a8:d7:
20:fb:1a:fa:08:3c:69:07:6a:0c:cd:91:e3:1b:0f:
86:2b:b0:b3:e8:19:85:0f:8f:15:b5:e8:4c:d1:69:
6c:89:29:59:52:c0:93:1e:ef:80:4e:9e:35:e6:e9:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:03:28:72:01:BF:66:3C:36:B6:BF:A7:80:A5:65:71:B3:04:3B
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/lVkDKHIBv2Y8Nra_p4ClZXGzBDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9d:f8:e8:6e:50:cb:77:c4:93:c5:ef:b3:f4:df:a2:c1:2c:
3c:76:8a:b7:57:bf:ff:97:3f:71:a5:32:ac:ac:30:11:51:b7:
0e:c5:eb:18:bd:6b:42:c1:9d:ff:24:4d:ee:7d:b9:f2:6e:5e:
89:ae:93:2b:a2:48:27:f8:84:6a:2d:a6:f1:49:26:e2:1f:d6:
28:d1:3f:4d:05:b9:ea:91:8b:38:ab:09:5c:24:d5:11:91:a2:
d0:02:4a:bc:6c:0e:46:d1:00:b2:da:10:52:d6:ef:d2:ff:2c:
06:1f:40:3d:31:4a:1c:6e:cb:5e:48:f3:12:84:0d:47:ea:5b:
3b:a2:2c:ca:92:6c:27:6d:7a:0a:ba:78:37:ea:38:45:a7:de:
08:32:19:ed:95:93:52:e6:c1:d7:77:b4:03:f3:1f:ed:af:ff:
e9:9d:5e:a0:23:c0:55:09:21:1a:80:e9:70:6e:22:12:3d:6c:
6b:a8:49:96:2f:c1:20:f2:c3:c0:fb:3c:80:eb:82:af:0f:39:
a9:8f:1e:24:9b:6f:03:d3:65:b4:ea:e6:48:da:36:ab:9b:ea:
14:7f:fc:03:52:12:02:c2:58:43:19:d4:d1:88:fc:3c:0c:02:
4f:77:bf:2a:3f:ee:61:4d:dc:35:9d:0e:7f:74:29:91:59:d3:
0c:2e:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:58 2024 by rpki-client on console-ams.rpki-client.org