Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KuXRfjDeZNp3zSi3WhM3RiBXcuo.roa
File: KuXRfjDeZNp3zSi3WhM3RiBXcuo.roa (raw, json)
Hash identifier: NkLLVG5RuvOJWajM1JrKMhZzsv8NxtbiM2ZxMJz5shg=
Subject key identifier: 2A:E5:D1:7E:30:DE:64:DA:77:CD:28:B7:5A:13:37:46:20:57:72:EA
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 199D72C8
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KuXRfjDeZNp3zSi3WhM3RiBXcuo.roa
Signing time: Sun 05 Jun 2022 08:23:20 +0000
ROA not before: Sun 05 Jun 2022 08:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196801
IP address blocks: 95.87.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429748936 (0x199d72c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jun 5 08:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ae5d17e30de64da77cd28b75a133746205772ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:2e:c3:34:da:2e:ae:80:18:89:22:53:c7:
87:1e:47:4a:9a:35:35:f7:39:ff:8f:c4:aa:a3:71:
8f:e4:48:25:9e:e2:71:64:dc:64:d4:26:be:a0:7f:
a6:87:68:bb:35:f1:d5:d7:57:35:68:be:5a:bb:d1:
02:3c:2f:86:cf:04:ae:ba:45:47:0e:66:0f:91:c0:
e9:74:50:f4:bd:5a:78:dc:b4:c7:b3:8c:11:42:75:
f4:9a:dc:bf:87:74:a7:da:25:90:31:6d:66:74:f1:
c4:cd:f7:0c:32:4b:66:87:b5:e9:ab:78:46:3a:2c:
63:13:b9:53:09:1f:b3:2d:25:6c:49:93:5f:54:bf:
dd:72:51:23:9b:de:56:67:17:a5:90:1a:b4:9d:96:
53:09:cd:3c:b0:6c:fe:c0:67:0d:3d:7b:af:2a:1e:
33:47:21:9d:53:7d:1d:72:67:3a:c8:83:83:a3:f7:
ca:08:ff:45:9b:75:80:e7:2a:14:00:a8:e6:97:40:
fd:80:19:48:8c:b5:e5:84:f9:26:b7:79:18:4f:3e:
bf:40:85:f0:52:38:19:58:90:82:1a:18:f2:85:e9:
2c:86:dc:20:89:15:c8:68:bd:3d:9b:fa:0a:df:59:
fe:0c:8f:13:dd:c8:23:0f:3b:2d:c3:75:0c:0a:3e:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:D1:7E:30:DE:64:DA:77:CD:28:B7:5A:13:37:46:20:57:72:EA
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KuXRfjDeZNp3zSi3WhM3RiBXcuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d7:68:b5:bc:41:50:8d:59:1b:35:ed:fc:a8:01:a6:d6:8a:
f6:7c:e5:9a:9d:73:a2:00:6e:a5:e8:05:f0:2b:75:5d:b4:0c:
e8:5d:95:6a:48:cd:60:1e:b3:84:b4:6a:d8:72:3c:35:4b:37:
dd:73:9d:63:67:37:75:7d:ed:19:e1:b6:61:07:28:cc:90:cd:
f7:96:c4:33:eb:8a:6c:b7:e7:21:7b:c0:08:e3:16:bf:e8:0b:
26:62:d8:72:3e:82:f1:ae:e8:8c:1d:f6:11:1f:ee:e2:fb:a4:
8a:41:99:56:73:34:c4:28:20:64:20:74:80:16:52:f2:fe:ff:
27:45:17:43:af:4b:28:97:86:ba:d9:22:4d:57:ed:7d:90:0a:
77:6a:a5:8f:01:a7:6a:0c:7f:90:2c:2f:18:c6:e6:3f:db:f5:
d0:92:7f:4f:4d:d3:38:13:43:b2:90:23:28:2d:4a:fe:d6:71:
9c:f7:69:57:f2:1e:47:b3:de:f7:b6:eb:0b:c9:54:7d:53:ca:
67:c1:0a:6e:f8:bf:48:20:86:41:96:49:f3:61:34:97:f8:c7:
72:37:d1:60:ca:9d:70:f7:ab:58:bf:90:f3:ea:72:06:57:46:
c5:93:dd:a4:7c:72:12:b9:e3:61:34:b4:30:87:44:9c:6e:e5:
45:f9:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org