Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/fOD8wX_S9Dqi_uknm05PBA3Tnpw.roa
File: fOD8wX_S9Dqi_uknm05PBA3Tnpw.roa (raw, json)
Hash identifier: CLwXVQ0jrpjmQxVbOUcvVgnQOfCKQrB/FfcrL75y7K4=
Subject key identifier: 7C:E0:FC:C1:7F:D2:F4:3A:A2:FE:E9:27:9B:4E:4F:04:0D:D3:9E:9C
Certificate issuer: /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial: 05343FB1
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/fOD8wX_S9Dqi_uknm05PBA3Tnpw.roa
Signing time: Sat 01 Jan 2022 15:04:21 +0000
ROA not before: Sat 01 Jan 2022 15:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207231
IP address blocks: 185.25.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87310257 (0x5343fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Validity
Not Before: Jan 1 15:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ce0fcc17fd2f43aa2fee9279b4e4f040dd39e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:bf:e8:48:1a:21:88:82:43:94:f6:9d:b4:
1c:2e:07:0c:95:da:e4:67:be:b3:18:54:32:eb:75:
68:a9:28:62:15:cf:b2:c9:5d:a8:54:84:d4:56:36:
69:6b:0d:ad:66:af:af:72:ce:8d:5a:04:71:a6:14:
1f:9c:b0:9f:b1:aa:35:cd:1c:de:1f:a8:63:c4:cd:
be:f4:ff:07:39:1e:71:c6:48:ea:6f:79:13:3e:01:
1e:ac:0b:3d:eb:c8:0b:ff:8b:c0:57:d2:e2:c9:b8:
cb:03:7b:70:cc:15:79:b0:8a:f0:e8:bb:4e:80:c8:
59:19:97:f4:c3:b7:69:6a:7c:9c:82:ac:83:af:b0:
a8:c9:1c:38:ac:42:73:69:f9:75:18:4d:54:28:ad:
33:93:bc:ff:e2:b9:72:5f:ae:9b:a2:df:91:8f:15:
be:dd:28:f6:c2:eb:a3:7f:14:f7:ea:8d:7b:23:24:
09:18:8d:1a:94:89:6c:04:c3:57:5c:56:17:5b:e1:
16:81:c8:9e:45:4e:e2:ee:89:fc:d5:f7:e9:66:ae:
88:47:24:b9:01:b9:be:bc:1e:0b:8e:16:19:d9:52:
f5:0c:a5:5b:fa:a3:62:f7:19:ef:1e:59:d9:2e:9d:
26:59:12:0f:7e:fe:b5:02:5a:37:b5:aa:17:ae:52:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E0:FC:C1:7F:D2:F4:3A:A2:FE:E9:27:9B:4E:4F:04:0D:D3:9E:9C
X509v3 Authority Key Identifier:
keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/fOD8wX_S9Dqi_uknm05PBA3Tnpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.95.0/24
Signature Algorithm: sha256WithRSAEncryption
37:45:ee:da:26:c4:4f:d8:e1:ab:07:89:22:4e:2d:8d:45:62:
09:86:21:6e:58:88:39:9d:74:e0:8e:0b:2a:f4:89:61:ec:a6:
65:0f:77:00:51:e2:ec:6b:b9:c4:80:95:31:6d:1a:0e:39:a6:
81:68:ac:54:ff:aa:b4:d3:2e:d9:20:8c:6e:6e:3e:de:85:2c:
57:83:e5:a2:04:c2:5b:88:99:85:45:c9:81:9d:8d:ec:8b:af:
2e:f4:16:b8:1d:61:e9:e1:2c:00:97:5d:8b:38:a2:cb:62:2a:
af:27:09:f3:87:5e:6c:63:16:90:bb:13:b6:67:6e:7d:05:2a:
5a:77:ce:1c:cf:70:19:43:f9:46:ec:7a:90:fd:74:e4:7f:d8:
d8:d8:59:fc:0d:e3:25:a4:c6:58:2a:fd:71:d3:c3:a5:ec:ce:
05:65:21:4f:23:7c:fc:55:53:1b:3b:f4:e5:c6:c0:55:ff:d5:
27:45:c5:3e:68:64:23:bf:73:d2:65:be:b3:d0:01:e9:89:bb:
ae:38:17:6a:21:32:82:f1:de:bf:75:10:ce:1b:f4:4d:9e:48:
64:05:8e:7d:c0:ad:c4:d7:d1:d5:0f:d4:14:22:cc:04:cd:b8:
76:2b:07:17:48:36:3c:a5:cb:ec:47:fe:f4:c4:c3:69:16:b9:
66:bb:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org