Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/yD7mJZNeS4J0mx4agh4tP2sp3GY.roa
File: yD7mJZNeS4J0mx4agh4tP2sp3GY.roa (raw, json)
Hash identifier: AN1mmvJQ+IVycBWq42XdNKM/cUyGhIivUjc1LW+O8uA=
Subject key identifier: C8:3E:E6:25:93:5E:4B:82:74:9B:1E:1A:82:1E:2D:3F:6B:29:DC:66
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018461312FDEE3061156593FC792C320B772
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/yD7mJZNeS4J0mx4agh4tP2sp3GY.roa
Signing time: Thu 10 Nov 2022 10:58:44 +0000
ROA not before: Thu 10 Nov 2022 10:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206849
IP address blocks: 95.173.173.0/24 maxlen: 24
95.173.174.0/24 maxlen: 24
95.173.175.0/24 maxlen: 24
95.173.176.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:31:2f:de:e3:06:11:56:59:3f:c7:92:c3:20:b7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Nov 10 10:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c83ee625935e4b82749b1e1a821e2d3f6b29dc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:f4:0b:97:a7:5f:24:7f:e6:19:c6:54:a6:
c9:be:91:75:44:1b:b4:fa:34:ee:fa:83:1a:53:f9:
9c:39:2e:24:58:db:c5:5d:2d:16:4f:c0:8d:8f:62:
8e:84:94:1c:a2:22:57:9e:28:05:98:e2:4b:1c:18:
b4:55:ad:ea:1b:b5:b1:27:aa:f7:8a:6a:d3:8b:89:
df:c0:4f:68:78:de:c1:46:7b:9e:09:bb:88:3f:c2:
ec:15:a1:b8:9d:f1:25:be:d7:f9:bc:ce:4f:34:b2:
d8:98:70:f8:9e:9e:f1:b9:57:0b:da:86:5d:fb:d4:
18:6a:53:e5:de:8b:ca:05:14:ce:96:bd:ca:0d:98:
eb:b2:bf:d0:83:93:de:82:dc:44:f6:7b:74:1e:6d:
91:15:66:ac:0e:dc:6f:2a:c0:7c:04:fd:54:fc:5d:
20:c0:57:dc:bb:a4:70:fa:34:32:9d:a5:e7:41:84:
29:5d:44:a0:5a:9d:c3:eb:70:20:41:b8:89:00:b5:
ed:e2:f1:38:24:1d:6b:fd:25:da:58:f1:f7:f3:e4:
36:1d:4c:b0:b0:4a:ee:b6:d8:a2:a4:2a:6b:63:ba:
af:f9:97:09:dc:a7:bf:87:41:40:34:b3:38:a8:20:
e9:dd:23:6f:16:8d:c6:8a:94:79:d7:e9:00:7d:2d:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:E6:25:93:5E:4B:82:74:9B:1E:1A:82:1E:2D:3F:6B:29:DC:66
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/yD7mJZNeS4J0mx4agh4tP2sp3GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.166.0/23
95.173.173.0-95.173.176.255
95.173.183.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cd:26:62:77:74:61:fe:61:e4:b9:f0:02:27:45:c6:67:07:
83:34:9a:83:89:f4:b1:a2:e7:03:4c:14:30:80:ec:5d:f8:c1:
4a:5d:ce:1d:00:b6:e7:6c:a9:40:59:02:e7:93:8e:6e:b3:72:
c0:a4:46:49:ad:74:d8:86:cd:52:ec:bd:70:9b:9b:e4:ce:e6:
93:cb:e1:29:8f:13:1c:27:b1:7f:f3:ec:ac:fb:a3:25:98:ab:
0d:6a:f1:a8:60:e2:73:34:22:20:e2:6f:44:15:5e:92:c0:70:
32:5b:09:09:d0:e0:0c:64:a3:cd:22:f5:c8:2c:f8:df:84:c2:
b4:c8:cb:54:89:b4:c9:05:fa:8c:eb:60:14:57:66:ad:cf:1e:
f0:47:fe:3e:16:24:cb:ba:64:6e:f5:c5:2b:cc:82:d2:f7:a3:
88:bd:f8:8d:9c:68:72:c9:bd:c5:e0:b3:d8:23:97:aa:25:49:
27:6d:30:2e:d0:51:22:d8:a9:87:f2:95:3e:72:72:15:e6:e1:
9a:82:56:40:de:0f:75:a7:64:98:e6:85:2e:ab:18:14:ae:7e:
4e:a3:7f:57:90:bf:a4:69:ec:70:7d:a7:8e:f4:ce:33:ca:6d:
e4:a9:15:61:d4:12:fa:8f:28:fe:a8:9a:0e:da:e2:5d:8d:f6:
34:50:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org