Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1rUuKlD7PSB8o3TO3GJCaZMP68I.roa
File: 1rUuKlD7PSB8o3TO3GJCaZMP68I.roa (raw, json)
Hash identifier: TGOqmDDBFnSvubyqOabpdaGYFfYsyqgJdt/OYXMGlK0=
Subject key identifier: D6:B5:2E:2A:50:FB:3D:20:7C:A3:74:CE:DC:62:42:69:93:0F:EB:C2
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 108F0311
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1rUuKlD7PSB8o3TO3GJCaZMP68I.roa
Signing time: Sat 01 Jan 2022 10:02:12 +0000
ROA not before: Sat 01 Jan 2022 10:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206849
IP address blocks: 95.173.173.0/24 maxlen: 24
95.173.174.0/24 maxlen: 24
95.173.175.0/24 maxlen: 24
95.173.176.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277807889 (0x108f0311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 10:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6b52e2a50fb3d207ca374cedc624269930febc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:dc:a9:db:c1:fd:86:a9:fe:fd:99:93:ab:
ee:ad:5a:f2:e6:0e:83:8c:de:5f:a3:f5:3e:a0:d8:
f1:d1:2e:2c:4d:83:f5:0c:0a:c9:c9:58:9b:4b:a7:
ef:85:5e:03:8c:0f:22:bb:c8:18:7a:39:f6:31:86:
6f:ae:9f:18:bd:8c:ad:df:f5:0f:60:dc:d6:ed:47:
5c:d6:a2:fa:42:77:12:7f:00:55:ea:63:b7:4c:df:
19:fd:51:59:4f:c4:40:36:ab:e3:b1:79:e1:32:75:
92:be:e0:8a:51:16:5b:09:25:35:74:4a:f0:72:a0:
f9:f6:7c:02:a9:bc:b1:65:04:10:b5:af:64:5d:98:
a9:58:f2:88:6f:1f:6f:b0:a6:4e:be:44:ac:ef:f8:
54:19:d1:9d:3d:5d:75:80:e9:17:ae:71:56:1a:74:
06:1a:69:32:65:75:fb:04:0b:aa:c6:cb:0e:85:c5:
da:5e:46:c8:b2:ec:07:7d:a3:af:b6:8c:5d:91:a9:
f2:ca:e8:e4:5a:16:1b:3c:c2:06:31:d6:34:b4:b8:
96:fd:7c:0b:05:93:ff:84:f4:dc:5a:64:41:92:24:
d9:eb:4f:fc:51:d4:3d:2b:44:b6:7f:fe:c7:33:81:
ed:f5:1e:a7:d6:08:0a:6d:c7:3e:c2:ab:11:86:b4:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:2E:2A:50:FB:3D:20:7C:A3:74:CE:DC:62:42:69:93:0F:EB:C2
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1rUuKlD7PSB8o3TO3GJCaZMP68I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.166.0/23
95.173.173.0-95.173.176.255
95.173.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ef:33:4c:3e:14:71:d9:f8:fd:9b:df:3e:b5:3f:f6:c3:a0:
b5:b1:e6:da:23:dc:f8:d2:19:b4:a7:8f:59:63:38:0d:56:15:
d6:8d:c9:10:0d:64:97:a1:56:93:b1:11:0f:a3:c7:be:ef:85:
e1:03:c7:64:06:5f:37:df:39:2f:40:b8:b4:3d:f8:c8:9a:4a:
aa:34:6f:d9:76:c1:89:06:93:51:13:0d:5d:80:1c:df:89:08:
bb:76:d9:c8:68:d9:2b:17:3c:bf:4f:27:57:9f:b4:c5:d1:9b:
36:57:d8:20:3f:bb:51:e8:88:49:b4:5d:f9:12:b4:a6:eb:86:
37:f5:ed:7f:a9:30:86:7d:b9:33:4b:4f:8e:43:3d:27:5f:56:
92:ce:ff:3a:de:07:86:f9:59:e4:b3:fe:c1:c6:1f:7c:87:b7:
da:f5:ad:12:b5:54:ae:95:71:0b:8a:07:cf:58:66:c9:cb:e2:
ee:fa:41:7f:32:34:12:55:20:70:10:e3:8b:eb:cb:d5:47:6c:
ba:3c:45:e6:a1:4c:0a:f6:1a:98:aa:b1:72:85:08:f5:01:6f:
37:9f:63:b6:77:99:ff:69:55:24:b6:6d:d2:f9:ae:22:bb:e8:
39:d9:db:00:ff:b4:6a:93:99:86:95:d9:aa:a7:22:f6:85:3c:
98:ff:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org