Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/oIVgXKveu8OOl9ZM78-QGIDxaZQ.roa
File: oIVgXKveu8OOl9ZM78-QGIDxaZQ.roa (raw, json)
Hash identifier: nHiPcYANv9SLtUHP+A0ybhWyiSWtTqNYLoFw53VR1CY=
Subject key identifier: A0:85:60:5C:AB:DE:BB:C3:8E:97:D6:4C:EF:CF:90:18:80:F1:69:94
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 07163BE8
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/oIVgXKveu8OOl9ZM78-QGIDxaZQ.roa
Signing time: Sat 01 Jan 2022 15:01:11 +0000
ROA not before: Sat 01 Jan 2022 15:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41698
IP address blocks: 95.128.208.0/21 maxlen: 21
193.227.124.0/24 maxlen: 24
194.62.220.0/24 maxlen: 24
2a02:608::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118897640 (0x7163be8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Jan 1 15:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a085605cabdebbc38e97d64cefcf901880f16994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:fb:38:54:7e:75:29:de:5d:6b:4c:33:a9:
ad:ff:3d:23:1f:e2:09:4a:2f:6a:a4:f4:b0:40:85:
f3:4d:44:09:72:e6:0f:e6:77:f3:c4:a5:c2:62:10:
8b:22:81:00:a9:9a:cb:b0:e0:f0:c7:33:8d:46:ab:
fd:84:6c:8e:43:ba:3f:23:ce:13:c9:1c:c3:59:0d:
49:87:44:b8:0a:8d:30:78:8a:8b:02:fd:28:42:ad:
c2:93:c6:ef:0a:89:d3:bb:97:01:20:ed:6f:26:f2:
9e:2a:57:1a:91:b4:7f:76:6b:c6:82:eb:93:26:e7:
18:1d:e8:90:d0:7e:97:ce:29:72:30:ab:eb:f5:1b:
3c:1f:6b:a3:d3:d1:a0:b8:10:76:52:6a:41:ac:10:
29:6d:28:02:3e:92:20:91:0b:03:0c:a5:8a:d1:d3:
5a:4e:55:65:ad:50:11:4c:58:58:ce:ef:4d:25:5e:
00:76:3e:6d:e1:9a:7a:fe:c0:6b:8a:41:f5:a5:d4:
51:ff:38:67:04:ce:64:46:14:1d:a4:37:0f:f9:f6:
33:90:d2:09:64:2d:00:e9:6f:f9:39:f7:31:4f:23:
1a:22:22:1f:24:7b:ee:bc:45:2f:9c:86:a9:cf:2a:
8e:2c:ff:59:d6:f0:b8:2f:f8:46:7f:2b:a7:0b:ae:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:85:60:5C:AB:DE:BB:C3:8E:97:D6:4C:EF:CF:90:18:80:F1:69:94
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/oIVgXKveu8OOl9ZM78-QGIDxaZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.208.0/21
193.227.124.0/24
194.62.220.0/24
IPv6:
2a02:608::/32
Signature Algorithm: sha256WithRSAEncryption
37:85:20:7e:ee:d2:8d:50:10:70:47:7c:0a:3e:43:57:cf:76:
bf:00:d7:2d:e6:40:1b:7a:bd:c7:40:07:60:2d:14:4e:3f:7e:
30:a7:66:dd:79:98:35:e3:52:20:56:9b:8b:e6:e7:fc:27:52:
a3:db:2e:be:4f:00:ad:3c:70:ef:f3:51:81:38:f2:0d:32:d0:
92:ee:04:72:c4:fb:4a:77:55:4f:9c:9b:05:2e:44:4d:3f:b4:
95:ed:bd:ab:5d:49:2e:de:79:e8:20:80:39:49:e5:72:3a:30:
f9:6b:b2:c8:c6:be:8e:f9:83:1f:1d:dd:32:55:6b:4d:bf:58:
ad:25:58:50:b6:19:91:3e:fc:27:f1:88:d7:11:dd:20:21:29:
f6:75:98:da:59:a0:64:f7:d5:b7:70:f1:64:86:50:b7:b9:cc:
5c:e7:58:17:af:65:85:ad:1e:92:7e:f2:ae:d5:10:5d:57:61:
59:06:a4:b3:70:b1:dc:fa:1d:25:fc:4f:09:67:0b:1d:89:7f:
34:94:ba:8d:77:47:de:c4:a1:7a:cd:0d:5d:f0:d8:bf:ee:04:
e6:62:16:0d:fd:cc:0a:42:2a:10:43:23:db:00:98:e7:23:63:
10:3b:c2:6f:4f:4a:c3:e5:ba:2d:a7:18:95:21:27:3b:a4:94:
0b:c2:1b:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net