Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/Z7jhtzvKJlv7raOAE3ZySpG783Q.roa
File: Z7jhtzvKJlv7raOAE3ZySpG783Q.roa (raw, json)
Hash identifier: S8V0YsV8ieKMTvAxoFs48VeVixqqAXeWWi3+KxO5Hog=
Subject key identifier: 67:B8:E1:B7:3B:CA:26:5B:FB:AD:A3:80:13:76:72:4A:91:BB:F3:74
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 35767D14
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/Z7jhtzvKJlv7raOAE3ZySpG783Q.roa
Signing time: Sat 01 Jan 2022 11:55:42 +0000
ROA not before: Sat 01 Jan 2022 11:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 195.93.197.0/24 maxlen: 24
195.93.196.0/24 maxlen: 24
95.130.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896957716 (0x35767d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jan 1 11:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67b8e1b73bca265bfbada3801376724a91bbf374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:0f:96:29:ce:c3:7f:e8:0b:6a:e1:94:08:
0d:69:f7:8a:76:a5:aa:cd:5a:ac:2b:6d:db:e4:d8:
d6:73:bb:99:72:a9:cc:b5:44:56:ce:51:73:87:3b:
d9:bf:ff:b4:3e:b4:4c:d4:2b:8a:07:88:82:48:2c:
0b:e4:b0:20:9e:04:db:68:15:2d:41:58:46:d8:64:
62:30:43:5e:7b:db:77:30:f1:da:d1:49:b9:34:45:
bf:cc:23:50:5c:e8:a7:ca:a1:47:3e:6e:7e:2a:31:
be:2c:aa:59:75:14:32:ee:cf:34:3e:00:e9:86:d6:
a7:8a:cb:1c:63:ba:b1:99:49:35:54:14:86:c6:1c:
dc:cc:8e:05:2f:5c:85:a5:e5:7b:98:a2:51:10:f8:
89:f1:ce:f6:e2:99:0d:9e:a6:dc:4c:23:dc:90:e6:
d6:c2:fd:e6:32:fa:55:da:be:0a:0a:70:cf:63:cc:
13:fc:3c:e9:40:f2:3d:8e:91:b8:4a:09:8f:0a:fb:
8f:09:c0:b4:a9:55:d3:08:02:50:a9:ac:bd:28:82:
1f:3c:29:b0:58:ab:de:b5:91:1c:22:50:b4:51:b3:
3a:ca:ca:90:42:ec:ae:e6:89:d3:34:44:d7:f6:9c:
f9:b7:8f:50:72:a1:3e:40:e7:e2:25:f6:6a:8a:b2:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:E1:B7:3B:CA:26:5B:FB:AD:A3:80:13:76:72:4A:91:BB:F3:74
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/Z7jhtzvKJlv7raOAE3ZySpG783Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.110.0/24
195.93.196.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:f7:e3:93:66:64:fc:09:0c:2f:09:39:a8:fe:38:f6:de:fc:
c6:b2:5c:fe:c2:ee:6b:ac:b8:f0:64:3d:1f:9f:9c:04:a2:2f:
42:ba:c0:be:0e:70:c5:20:54:25:b0:a2:e7:17:87:28:3e:9f:
b7:7c:bc:56:68:e0:31:5e:6d:5a:84:2c:cf:67:b4:80:0e:24:
50:c9:80:91:57:1c:1f:27:fe:5f:40:87:14:15:d4:0a:d0:44:
35:f9:37:d7:2b:42:15:bf:64:ed:d1:fa:d2:4f:23:77:01:b8:
fd:91:01:57:64:76:4b:11:7d:ca:af:e3:30:b4:1e:0d:ac:21:
72:68:0e:2c:c6:a9:05:70:2b:da:7c:70:de:35:36:a9:c6:7f:
93:4a:eb:ed:99:87:2b:29:b3:bf:5e:72:f8:07:74:6f:b4:0d:
68:ff:61:96:3c:f6:47:c8:66:e1:1f:90:8d:23:b5:a0:67:39:
fd:07:cc:9e:04:fe:41:8e:fc:39:87:3c:6e:df:c4:1a:0d:4d:
18:11:2e:bf:bf:26:db:22:25:d7:c6:85:d3:e0:34:8b:03:d7:
eb:2b:5c:38:0e:14:4b:93:cb:6c:7c:c2:fd:d6:8f:95:e6:a8:
4e:08:73:40:1c:da:12:6f:6e:9f:f4:28:f8:ac:72:4a:ee:c4:
86:51:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:23 2023 by rpki-client on console-ams.rpki-client.org