Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/2T6T5PZgzexz6bGnduR6rxHs-Nk.roa
File: 2T6T5PZgzexz6bGnduR6rxHs-Nk.roa (raw, json)
Hash identifier: obeaZgX0CcXKYxJtd8FkY1Kxq6hC07sI61s0MAfWSkw=
Subject key identifier: D9:3E:93:E4:F6:60:CD:EC:73:E9:B1:A7:76:E4:7A:AF:11:EC:F8:D9
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01848AE5A206492DBF17D7210713CD2DA983
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/2T6T5PZgzexz6bGnduR6rxHs-Nk.roa
Signing time: Fri 18 Nov 2022 13:20:15 +0000
ROA not before: Fri 18 Nov 2022 13:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21500
IP address blocks: 195.123.177.0/24 maxlen: 24
195.123.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:e5:a2:06:49:2d:bf:17:d7:21:07:13:cd:2d:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Nov 18 13:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d93e93e4f660cdec73e9b1a776e47aaf11ecf8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:99:d1:af:2b:a3:18:d0:85:97:e9:5b:0e:
9a:e5:8b:53:9b:b4:96:a2:38:c3:b9:50:ed:0a:b1:
5e:58:10:e6:7e:ba:03:02:ee:96:14:cc:df:e2:3a:
01:d0:0b:b3:4c:1f:e8:f1:8f:4d:05:17:eb:36:36:
ce:88:6d:2c:cd:5f:3d:ec:52:8d:c1:df:e9:aa:89:
63:b8:07:0a:b3:0c:56:c3:f1:52:e3:00:c5:80:0c:
10:cc:c4:ca:a5:70:ba:55:a8:f7:1f:f4:6d:3d:be:
f8:2c:f9:c2:d1:74:ca:b7:99:e0:ac:4d:87:85:f3:
a7:02:79:09:36:fe:4a:e8:27:ba:ff:96:e4:65:cd:
89:ac:3f:49:9d:10:ac:42:d5:44:66:5a:dd:d8:16:
1f:c4:cb:71:5f:6f:a2:67:ae:8e:87:d2:65:79:ff:
61:7b:45:af:94:14:9b:82:f1:a6:5f:dc:18:99:a2:
63:f5:7a:b1:70:4b:01:4a:aa:e2:d6:5d:a9:63:77:
94:fc:7d:2f:fe:4e:b5:c7:57:48:44:5f:b7:0b:8c:
4b:74:79:5e:92:0d:00:61:79:f5:75:aa:89:8e:cb:
81:e8:73:fe:8a:bf:7e:8f:dd:a7:0c:e8:da:d1:9a:
6d:d4:89:5d:cc:2c:91:ca:85:ae:1c:62:ce:49:1d:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:93:E4:F6:60:CD:EC:73:E9:B1:A7:76:E4:7A:AF:11:EC:F8:D9
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/2T6T5PZgzexz6bGnduR6rxHs-Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.177.0/24
195.123.184.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:f0:80:8e:04:48:0a:3e:bd:2c:c5:59:7d:54:ab:35:42:
4a:aa:9c:bc:dc:73:b6:4c:5e:c1:89:fb:72:a5:71:85:ff:02:
e9:c4:db:62:9e:3a:fb:eb:5b:30:2a:c9:fc:ac:5c:a1:05:ad:
79:3e:83:15:9b:e2:21:5d:c1:37:a3:07:fc:d4:e9:05:fd:04:
7e:70:d9:81:5d:3f:27:72:95:3a:1f:02:1a:a5:df:2a:87:57:
65:40:37:2e:06:59:1c:11:d2:ff:ae:1f:70:07:8b:15:4c:72:
7e:1c:7c:a6:ee:82:4b:08:86:e4:3a:2d:20:bc:b9:e4:2c:3b:
24:00:f1:89:68:a9:ee:2d:38:ad:a6:fe:59:3c:6b:81:40:9e:
41:d4:4e:e9:46:28:d4:33:36:5b:eb:4c:b5:c0:43:da:c9:ff:
d0:88:93:12:bd:81:3f:3c:cf:cc:c9:db:90:d7:a0:13:99:81:
0e:66:1b:86:d6:42:0d:bf:83:ca:ae:56:7d:4d:1a:27:87:93:
5f:f7:c8:95:4d:a2:e7:53:45:d4:0f:32:70:eb:8f:c0:b6:b6:
22:22:1f:4d:c5:dd:e3:45:88:e8:e9:60:a2:54:49:08:b0:08:
6c:59:cd:ff:01:ef:9c:f7:1c:0b:03:c4:1c:39:5f:ee:a5:5b:
75:5c:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org