Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/L6a0lcOtoSvpCBdTi3eZzJ1evI0.roa
File: L6a0lcOtoSvpCBdTi3eZzJ1evI0.roa (raw, json)
Hash identifier: emDDSJknLJak141uUP8K9OMlBbPHb8XcWVU9E/p7XO0=
Subject key identifier: 2F:A6:B4:95:C3:AD:A1:2B:E9:08:17:53:8B:77:99:CC:9D:5E:BC:8D
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 03F40CDD
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/L6a0lcOtoSvpCBdTi3eZzJ1evI0.roa
Signing time: Sat 01 Jan 2022 07:53:43 +0000
ROA not before: Sat 01 Jan 2022 07:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212818
IP address blocks: 195.177.215.0/24 maxlen: 24
195.177.214.0/24 maxlen: 24
195.177.214.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66325725 (0x3f40cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Jan 1 07:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fa6b495c3ada12be90817538b7799cc9d5ebc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:9c:1b:ac:ab:39:0a:ee:17:c6:8f:60:1d:
cb:18:97:ce:8d:62:5b:67:30:f9:ca:3d:bb:4d:2e:
58:96:cb:df:58:d0:84:2b:33:9b:6f:c9:d1:d3:f2:
e9:f6:a2:08:c4:c6:c2:44:38:74:c6:0c:fb:bb:a9:
6d:32:2f:39:3b:cc:8e:b9:9d:13:e3:a2:8c:5d:cc:
53:b7:98:62:1a:ca:f2:24:aa:21:8e:38:73:dd:12:
5a:09:53:b2:5c:87:dd:57:88:28:1d:c2:c7:ca:00:
cc:3a:e3:95:b0:10:8a:48:f7:54:29:3f:eb:7b:b1:
a0:e4:8a:ab:be:7e:0a:46:9d:64:fa:4c:3f:d8:3b:
4f:09:d7:55:f0:79:72:6d:68:88:53:f1:ad:d4:dc:
3b:0d:58:12:b9:39:ea:a5:5e:5d:70:00:03:1a:e9:
2c:de:db:26:1a:bc:77:dd:75:1f:69:2d:0d:ea:44:
a8:e5:7b:bf:c9:08:43:3e:74:09:f6:79:80:c1:a4:
7f:c9:95:00:88:0a:39:ed:fd:06:0b:55:6c:65:32:
f8:2b:1d:de:1a:da:74:ac:8b:9d:c2:2e:5b:2c:ba:
80:7e:fe:61:4f:30:ca:48:f9:6d:39:7b:c0:28:7b:
b1:63:ba:32:7a:4d:19:3b:ed:6c:03:9c:00:7f:1c:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A6:B4:95:C3:AD:A1:2B:E9:08:17:53:8B:77:99:CC:9D:5E:BC:8D
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/L6a0lcOtoSvpCBdTi3eZzJ1evI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.214.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:3f:99:91:e4:18:9c:4e:89:99:90:cb:17:7b:c2:99:3f:e3:
78:4f:e7:1a:4b:94:33:96:3e:cd:11:b5:5e:e2:fd:35:22:59:
a4:e8:87:0a:4f:f1:4c:54:2f:83:ce:66:88:c3:78:7e:4a:4a:
11:bb:d1:7c:c7:4e:bf:74:4c:94:50:73:aa:db:93:fc:78:ff:
e7:8d:5d:02:43:1d:ed:5a:16:9d:26:62:e8:b2:07:8f:4b:09:
df:bd:7c:52:24:08:96:88:79:50:ca:b7:88:02:a3:fa:c9:00:
f6:26:3f:f8:14:f7:0f:8c:1c:80:20:10:6c:cf:67:6b:b8:8e:
1a:56:94:fa:ba:ea:8f:82:b9:6a:13:85:d3:58:f9:bf:9b:da:
b2:f4:65:df:4c:a4:a2:4e:85:b5:6a:fc:d6:a4:d0:4d:43:dd:
8e:67:9c:04:c3:24:41:ad:40:11:f4:db:87:91:39:13:13:69:
d6:86:c3:cd:48:73:c2:40:bf:43:31:c0:74:26:f5:cd:00:4c:
e9:47:2d:43:ac:d7:a1:5a:e5:97:cf:8a:9e:70:25:79:0f:f9:
a5:8d:01:71:c0:ef:6d:f5:aa:ca:8b:af:3f:f5:42:79:f6:13:
b6:e1:1d:7e:75:78:c0:ef:59:81:6d:14:a5:20:ed:91:be:cd:
99:b0:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:05 2024 by rpki-client on console-ams.rpki-client.org