Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ouGSE4iE9w15CLzwmxeQzPvQ_DA.roa
File: ouGSE4iE9w15CLzwmxeQzPvQ_DA.roa (raw, json)
Hash identifier: BhfDVnUQAqggn/ACvQj/UFAegQHEEd26mrrWZTsHp34=
Subject key identifier: A2:E1:92:13:88:84:F7:0D:79:08:BC:F0:9B:17:90:CC:FB:D0:FC:30
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0183A464B1FABDB7145A3F3D7068275FC3A7
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ouGSE4iE9w15CLzwmxeQzPvQ_DA.roa
Signing time: Tue 04 Oct 2022 19:06:46 +0000
ROA not before: Tue 04 Oct 2022 19:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 81.28.252.0/23 maxlen: 24
95.214.176.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:64:b1:fa:bd:b7:14:5a:3f:3d:70:68:27:5f:c3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 4 19:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2e192138884f70d7908bcf09b1790ccfbd0fc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:f1:6a:c6:4a:4a:72:dd:71:77:42:8a:92:
62:55:98:25:e6:d9:50:06:aa:28:06:72:ae:8b:e5:
f2:de:b1:dd:5e:c8:4f:30:27:d4:43:f3:b0:0a:18:
98:f9:99:87:a3:f4:cc:b8:25:47:3c:26:52:b2:65:
b5:61:4f:34:a3:42:d9:a4:86:87:78:0c:07:8e:ca:
81:74:ab:de:b2:fa:96:83:be:05:ef:96:78:69:72:
11:b0:7d:1f:0e:76:27:22:7a:6a:da:94:13:f8:a8:
46:09:29:e1:e0:6f:6a:4d:fc:2b:25:bc:17:21:08:
1f:36:48:f1:5f:8c:8e:6d:04:92:24:61:7a:e3:2f:
5f:12:9d:13:8f:3d:df:af:d3:98:52:3b:39:0e:bd:
2d:96:36:69:43:02:6d:a1:1b:9e:c2:02:d5:44:45:
d8:f0:b1:68:92:a9:9c:4d:6e:66:ca:21:20:cf:76:
73:e2:92:78:49:cc:8a:04:f9:3f:4c:9b:9d:c2:f5:
92:80:3a:ff:22:bc:cb:2c:05:1b:7e:fa:ab:dc:d6:
fc:7f:af:6a:00:91:aa:54:47:e5:53:98:b7:75:9f:
01:ee:e1:fd:7d:b3:ea:e8:8b:9d:77:40:b7:56:36:
94:3e:bc:a9:90:0f:fb:7b:83:b7:e3:4c:89:1e:2e:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E1:92:13:88:84:F7:0D:79:08:BC:F0:9B:17:90:CC:FB:D0:FC:30
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ouGSE4iE9w15CLzwmxeQzPvQ_DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.252.0/23
95.214.176.0/23
Signature Algorithm: sha256WithRSAEncryption
85:86:35:97:60:5a:4b:49:21:7c:6f:b3:a3:6f:b3:60:89:26:
41:ff:ab:46:ec:ce:91:7b:d7:49:7b:d9:b9:b9:5d:91:33:01:
da:98:9f:fb:cd:cf:d4:65:32:b8:83:5d:6d:a7:01:90:f9:9e:
b5:15:b5:c7:97:9e:8a:ad:3c:7e:f6:0c:e3:47:2e:d9:a5:da:
20:d9:b1:03:97:30:db:28:14:b5:55:a7:81:72:e1:8d:a8:3f:
af:56:89:28:7d:ae:07:6b:a7:28:29:24:bf:e1:67:07:32:89:
5c:3b:95:b6:f5:f3:da:2d:d8:c0:85:c8:2a:8b:34:ea:64:67:
41:9c:35:e5:05:9c:e2:84:3d:71:d0:90:e1:70:71:e5:8c:ee:
ea:b9:4b:15:e2:8e:eb:54:6f:fa:99:88:49:7d:bb:31:f2:31:
b2:4e:80:d8:09:38:e7:f8:65:db:cf:18:8e:ca:86:4a:66:c4:
b4:fb:de:31:6b:e0:c0:63:94:ff:1b:54:2c:9e:b8:9c:ca:9a:
39:a2:f9:b4:77:32:85:9f:4d:12:82:9f:44:4f:46:30:e8:68:
f1:db:1b:ef:b9:c6:de:b2:64:dc:5a:15:b5:c6:6d:b5:76:e5:
84:07:0f:d2:d8:37:5e:26:70:b7:79:df:ee:0a:04:01:f7:b3:
e4:94:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org