Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/VxI7vS6WM2Jy6VJ9pGhKK4fPyn0.roa
File: VxI7vS6WM2Jy6VJ9pGhKK4fPyn0.roa (raw, json)
Hash identifier: QXcMF6MRiySslHdLnlcakIcH2mqwmNAl+bvs0kh4mog=
Subject key identifier: 57:12:3B:BD:2E:96:33:62:72:E9:52:7D:A4:68:4A:2B:87:CF:CA:7D
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 26676C
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/VxI7vS6WM2Jy6VJ9pGhKK4fPyn0.roa
Signing time: Fri 03 Jun 2022 09:18:22 +0000
ROA not before: Fri 03 Jun 2022 09:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212882
IP address blocks: 95.130.184.0/22 maxlen: 23
95.130.186.0/23 maxlen: 23
2a03:ac40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516844 (0x26676c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jun 3 09:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57123bbd2e96336272e9527da4684a2b87cfca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:9b:20:c5:56:67:8a:48:0c:3f:4c:e8:17:
5c:de:3d:8d:fd:1c:fe:41:10:4d:4f:ba:06:97:fb:
ef:97:c8:78:10:02:32:60:86:24:7e:03:2e:f5:74:
54:cc:1e:c0:9d:90:27:6a:e1:fb:46:46:4a:33:76:
b0:9c:33:a0:40:eb:46:f4:f1:db:1a:8f:d3:25:83:
72:a4:3d:3a:fe:d7:91:c5:84:20:62:de:fb:2e:88:
f9:6b:13:7c:8b:1e:16:07:c4:01:5b:e9:d9:fe:84:
c0:8c:99:2f:74:6b:9f:57:06:36:c9:d4:c4:05:13:
70:c1:f1:d4:97:a4:2e:b5:ac:87:9a:55:8d:e8:75:
11:21:e5:d4:cb:bc:c5:4d:fd:85:ed:6b:07:73:f5:
ee:b4:a3:ac:9b:e9:4e:45:e5:e9:3a:ad:8d:a4:3d:
bc:d4:a5:91:2f:a4:d3:02:ff:08:27:4c:4c:64:9f:
45:43:3c:5e:55:23:c5:a0:39:1b:76:a6:8d:4c:52:
3a:9b:47:5b:9b:0a:6e:6f:58:a7:37:dc:89:c1:1c:
90:60:16:41:d2:84:db:4a:53:b1:5e:32:00:cc:80:
32:f3:1a:70:08:7c:53:ad:1f:39:3b:5e:5c:b8:ed:
bf:78:8c:1e:52:6f:e9:3f:11:40:a3:18:85:1f:46:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:12:3B:BD:2E:96:33:62:72:E9:52:7D:A4:68:4A:2B:87:CF:CA:7D
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/VxI7vS6WM2Jy6VJ9pGhKK4fPyn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.184.0/22
IPv6:
2a03:ac40:1::/48
Signature Algorithm: sha256WithRSAEncryption
63:cc:97:a1:9c:f5:ce:16:ca:09:12:7d:af:a3:8a:9f:7b:b9:
76:48:27:11:de:98:c9:77:0f:70:36:da:c5:ae:4a:8a:9b:b1:
61:a9:13:3b:6a:57:b1:5a:47:ee:a3:0a:9b:63:3f:0b:17:e6:
fa:7f:e0:51:a5:e3:93:4d:0a:91:4b:d6:2c:30:cb:86:36:28:
38:48:f2:ec:1c:ba:30:e5:d0:9b:01:2d:0d:da:7f:1e:5b:36:
b5:5c:84:eb:96:3c:8a:44:cb:ab:bf:e5:bd:04:94:77:0c:80:
f7:f2:98:98:f3:c8:8e:4a:77:ac:d3:75:c8:43:c3:e1:a6:2d:
4a:00:4f:4d:ae:ec:5f:e2:d0:62:c9:f7:fc:fb:19:ea:24:28:
91:34:e3:13:fe:0a:92:3f:2a:06:03:8f:cf:fb:bb:98:2f:28:
4d:f2:24:16:42:df:50:50:cf:52:da:00:80:2c:9c:d3:3e:64:
56:13:48:53:f9:6a:78:e9:71:63:ff:43:3a:55:86:92:93:06:
ae:12:43:fa:1f:0f:fd:bf:7b:d6:2d:90:de:ec:f6:6b:f8:40:
7a:ce:b9:7b:7f:a7:c5:80:b6:f2:6e:06:8d:ac:5e:de:7a:90:
9c:47:1c:10:7f:89:09:ac:09:e8:b7:7f:a3:c3:7a:66:03:7f:
d5:14:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-ams.rpki-client.org