Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/9QUxY2ZOHuS3xSt91JqqcR4U1oc.roa
File: 9QUxY2ZOHuS3xSt91JqqcR4U1oc.roa (raw, json)
Hash identifier: auWbGlhpAyNrOZAoZmdZ4ox/jz03HK23i68EWJDLbHI=
Subject key identifier: F5:05:31:63:66:4E:1E:E4:B7:C5:2B:7D:D4:9A:AA:71:1E:14:D6:87
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 0182EF38A2E96340A1518E0C8D1FF5F5B1E3
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/9QUxY2ZOHuS3xSt91JqqcR4U1oc.roa
Signing time: Tue 30 Aug 2022 14:47:22 +0000
ROA not before: Tue 30 Aug 2022 14:47:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12727
IP address blocks: 95.131.18.0/23 maxlen: 23
95.131.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:38:a2:e9:63:40:a1:51:8e:0c:8d:1f:f5:f5:b1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Aug 30 14:47:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5053163664e1ee4b7c52b7dd49aaa711e14d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:e4:13:d4:88:c4:85:af:6d:e3:3e:0c:c9:
b0:02:54:25:22:fc:b0:b0:a0:18:24:72:65:0b:c6:
75:fe:af:ef:f9:b6:0c:a4:9f:68:de:bc:ef:79:ca:
49:ad:97:2e:03:21:33:3d:13:f2:7b:7c:ae:29:7d:
6e:23:a1:07:07:24:e9:65:12:8b:5e:3d:01:98:aa:
83:a1:14:26:1b:69:98:a8:4d:29:e7:f2:45:ce:af:
cc:ab:d8:b8:80:32:1c:b2:76:71:b0:3d:ac:e3:3b:
1b:a2:cb:86:00:31:73:1e:96:b7:82:76:6c:ee:b4:
29:79:89:d8:9a:d2:d9:8c:8b:e3:c4:c0:2a:d9:60:
b3:1a:01:da:90:b2:ed:aa:38:1a:0d:fc:37:8e:66:
71:d6:33:e5:04:0d:6f:69:ac:09:12:a1:71:ae:07:
ea:03:9c:c0:10:f3:cb:fa:e3:8e:98:33:96:7a:0f:
51:97:a6:1c:d7:df:78:8a:54:a4:01:ef:c0:9f:29:
f8:d6:0c:29:ea:3f:d4:ac:cf:8b:95:43:a9:e7:78:
ee:af:22:b7:8f:3b:0e:24:01:6f:e3:ba:5f:4c:77:
a7:e2:00:33:24:38:12:12:3e:68:3c:a0:ee:d7:ba:
70:bd:ae:a4:c7:70:f9:36:bd:b5:35:1d:14:08:2d:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:31:63:66:4E:1E:E4:B7:C5:2B:7D:D4:9A:AA:71:1E:14:D6:87
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/9QUxY2ZOHuS3xSt91JqqcR4U1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.18.0-95.131.23.255
Signature Algorithm: sha256WithRSAEncryption
7b:5f:e1:5a:72:35:9f:9b:ce:c0:eb:2f:b9:6d:a4:ca:ac:d1:
4d:56:4c:ed:e7:4d:7f:df:65:cf:a5:ba:48:4c:2c:01:16:b9:
60:e0:0c:f2:48:b7:1e:46:4d:f6:67:30:ed:07:0c:0c:d3:02:
c7:bf:b6:e4:29:81:83:7e:fe:49:87:5a:b9:b4:57:9e:f3:ab:
80:98:3d:a1:8c:84:bb:36:6c:96:e5:9a:33:be:fd:ec:22:3c:
15:a2:92:bf:48:44:6e:49:b6:2f:4e:45:0e:26:de:28:0a:a4:
8d:11:7f:2e:36:03:d5:2f:38:6e:23:e4:04:d0:0d:a3:21:28:
fd:1c:1e:cc:8e:4e:b8:3e:cd:ec:83:39:04:65:8c:a4:b9:1e:
d5:c2:02:47:fc:5d:b1:3f:54:33:10:0b:d9:9c:6e:6f:d3:b6:
32:00:96:03:9e:8e:9d:eb:09:79:8a:99:a9:a4:e6:1a:80:b3:
db:11:0b:ed:2e:10:f9:33:9d:32:09:89:8a:13:f6:a4:fc:ac:
7e:1a:7b:b1:d0:a5:a9:53:35:0c:9f:5f:51:33:d4:a8:38:04:
be:92:c5:b0:f0:2a:6c:c4:5b:36:2f:d3:b1:d7:f2:c5:4c:7f:
db:3b:37:65:44:f8:eb:5d:a4:e3:1a:82:fe:4f:66:3f:75:cc:
fd:64:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:59 2023 by rpki-client on console-ams.rpki-client.org