Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/K6Z43hxIXpS1WXZyGzv0Hkgb5uU.roa
File: K6Z43hxIXpS1WXZyGzv0Hkgb5uU.roa (raw, json)
Hash identifier: m6EbT9uwX16sqFC5niGLEvkE0fcmBWzkmc5BGq1eQUc=
Subject key identifier: 2B:A6:78:DE:1C:48:5E:94:B5:59:76:72:1B:3B:F4:1E:48:1B:E6:E5
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 04BE5F69
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/K6Z43hxIXpS1WXZyGzv0Hkgb5uU.roa
Signing time: Thu 28 Apr 2022 13:15:14 +0000
ROA not before: Thu 28 Apr 2022 13:15:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25227
IP address blocks: 185.106.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79585129 (0x4be5f69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 28 13:15:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ba678de1c485e94b55976721b3bf41e481be6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:fd:8f:29:1b:87:9f:36:5e:51:57:68:68:
b5:44:46:8a:c2:cb:df:4f:9d:13:80:7e:0c:a5:e7:
a7:5a:93:5b:ed:46:4f:34:68:e1:58:df:b0:36:c2:
bb:44:cb:9e:c5:fd:4a:75:48:d3:03:b9:14:c0:a9:
dc:54:18:2d:af:bd:3a:34:82:d9:7f:51:8b:f3:f9:
40:5e:c7:b7:8c:ea:af:9f:0f:8a:37:b6:d0:65:e6:
7f:c9:a9:53:09:55:42:04:28:f5:5e:1b:02:cf:69:
c2:f5:3e:72:5f:06:ab:48:54:2b:b4:36:36:21:22:
2d:f7:e7:e5:84:88:6d:d5:f0:0c:ac:88:36:4c:55:
6f:52:89:c5:74:a8:87:93:9b:c7:c8:d3:ca:8b:29:
16:37:ed:0f:43:dc:1f:5f:67:3b:0e:b8:08:ca:dc:
54:08:f7:d8:28:20:af:0b:2f:13:10:7e:10:0e:89:
52:22:00:8d:2f:13:8e:71:38:40:e7:64:90:69:1f:
86:c1:d7:50:b8:27:58:c0:63:b9:91:1d:9a:7c:b7:
22:9d:1f:d5:83:4c:fe:a7:58:c5:92:bb:a3:5c:f9:
8e:b1:eb:8c:e7:02:f8:9c:fc:7d:9f:98:62:10:0b:
be:ba:5b:a4:3e:d2:0a:14:93:9e:d4:af:fe:7b:ae:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:78:DE:1C:48:5E:94:B5:59:76:72:1B:3B:F4:1E:48:1B:E6:E5
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/K6Z43hxIXpS1WXZyGzv0Hkgb5uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9d:76:34:cd:6a:aa:d6:49:db:7a:a5:d2:c2:a7:b1:04:0e:
46:e7:47:37:d0:24:4a:78:5f:6e:f0:af:98:8d:fe:1a:ab:10:
1f:23:bc:0d:e9:e3:ec:1a:7c:39:c2:fb:ea:f7:c2:44:de:7f:
70:b6:7e:c1:13:3a:ae:a8:36:35:52:35:6c:ad:24:ff:3f:ed:
e2:c3:cb:b2:2b:58:43:05:44:51:f8:14:1c:73:55:70:e8:7d:
15:18:2f:03:2d:d0:02:4f:a2:93:80:37:a9:23:ea:c9:77:c6:
93:c4:9f:2c:96:e8:0b:9f:27:d6:16:5b:fe:4e:9f:66:75:f5:
4c:12:4f:b3:64:1a:70:99:da:5d:b0:fe:83:46:e9:8b:86:29:
40:f7:8f:6f:1e:e9:f7:33:13:2e:b8:c8:94:f9:bf:d0:95:01:
42:f7:24:31:d2:a7:00:62:c4:03:79:6b:aa:a4:06:1c:e6:13:
6c:af:d8:40:88:98:e4:a0:c0:3a:4a:68:7e:5e:ff:a4:84:dd:
31:a5:15:3c:4c:62:e2:a7:d8:6a:fc:1c:7a:2d:41:20:f5:dd:
c4:bd:1f:55:29:2b:76:5c:86:42:9d:12:d4:2c:44:de:70:4c:
54:12:5a:28:29:cc:eb:bc:61:0b:ee:b9:74:d3:7b:96:8c:a7:
cf:c1:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org