Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/IOiIvNQ6Lago7B2cYB8RmvmZQdA.roa
File: IOiIvNQ6Lago7B2cYB8RmvmZQdA.roa (raw, json)
Hash identifier: uJmXSZEBld69dFXSdJ3g7CCN2zZ+3tLcxap7GBvJ+44=
Subject key identifier: 20:E8:88:BC:D4:3A:2D:A8:28:EC:1D:9C:60:1F:11:9A:F9:99:41:D0
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 094D481C
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/IOiIvNQ6Lago7B2cYB8RmvmZQdA.roa
Signing time: Sat 01 Jan 2022 11:58:42 +0000
ROA not before: Sat 01 Jan 2022 11:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29445
IP address blocks: 195.149.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156059676 (0x94d481c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Jan 1 11:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20e888bcd43a2da828ec1d9c601f119af99941d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:33:80:ba:43:9c:15:f2:7e:8b:b5:a7:3a:
43:2e:98:3b:05:a7:d8:02:1f:94:ae:a6:25:3b:02:
7d:f0:12:b1:c9:95:da:71:7c:d5:15:82:39:82:03:
46:c9:96:a8:3b:fd:58:a6:e1:89:85:c8:e4:aa:33:
8a:fa:13:56:fd:5d:c6:96:0e:d9:28:0f:40:0c:41:
39:e7:56:7e:fe:ba:a7:dc:64:c8:2c:37:4c:c8:0f:
62:99:cb:b9:fe:9f:1e:73:0a:5c:e2:a1:ed:a4:a1:
4d:c7:f0:0b:1b:2e:db:77:08:19:dc:47:50:a5:9b:
6f:89:d5:d3:40:70:20:1f:20:d3:8e:5e:d4:2f:00:
99:b5:e4:87:44:3f:f0:66:c0:f7:7f:b1:01:a0:0f:
3c:03:1e:26:e6:5b:92:da:6b:c5:1d:ce:65:45:67:
d7:6a:32:02:f1:a8:91:7d:8e:6a:d8:88:50:14:4d:
20:36:23:64:16:79:16:da:29:1e:db:47:21:b5:77:
b9:46:77:8a:be:fb:cd:33:c5:c9:6c:cb:6a:f1:a8:
a9:72:d8:28:a3:61:0a:ec:35:55:df:92:0e:42:53:
9d:5d:01:25:ed:68:b9:47:f6:b1:ac:a3:6c:86:a3:
7a:6d:8a:45:56:86:1c:0a:ce:ae:b8:b8:17:65:73:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:88:BC:D4:3A:2D:A8:28:EC:1D:9C:60:1F:11:9A:F9:99:41:D0
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/IOiIvNQ6Lago7B2cYB8RmvmZQdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:27:03:ce:eb:ee:bb:5e:e2:b5:53:e7:82:5d:a1:3d:1f:d9:
52:26:87:00:1f:1a:b5:68:d8:30:10:c8:07:dc:c4:d1:ee:89:
a0:37:f0:39:3f:a9:fd:58:5e:bd:67:65:7c:54:ce:1f:ba:97:
6d:bd:db:36:b0:b9:ce:8f:72:05:a8:f7:cf:97:7f:d4:34:9e:
79:95:93:2d:fc:fb:c0:85:ef:23:4f:ae:a0:7b:5c:e7:e4:e1:
c9:3a:bf:a9:53:27:6f:37:02:43:49:a9:32:d5:70:7b:e0:90:
95:f4:66:d5:99:30:a3:65:35:e1:36:32:e6:a0:ba:48:65:17:
ca:32:fd:16:98:a2:ac:92:df:a5:ef:2d:88:3d:c1:71:4d:48:
ee:78:7b:93:4f:53:bf:03:43:06:e9:f9:5c:cf:c7:09:c9:82:
ad:a1:72:55:9b:65:2f:5c:aa:86:70:3a:54:a5:c6:ba:ab:3b:
bb:a0:6c:8a:18:a9:f3:32:ec:10:94:4a:e7:22:bc:30:5d:3e:
33:40:d8:b6:62:1b:74:9b:d9:95:7c:eb:f9:00:52:e4:6f:28:
bd:72:4d:02:f7:2a:d1:ee:7d:b5:7e:dd:99:51:b4:78:10:25:
f2:26:2e:94:44:16:23:7f:1e:6b:f3:25:e1:65:4f:73:0f:c7:
92:68:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:41 2024 by rpki-client on console-fra.rpki-client.org