Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/pAc8937KcZEVRnhlSgPW5A1NfTA.roa
File: pAc8937KcZEVRnhlSgPW5A1NfTA.roa (raw, json)
Hash identifier: VVERp4SLgT7tYNomZ9YYD2vOI7OsHf7yWoZiXBxjDSo=
Subject key identifier: A4:07:3C:F7:7E:CA:71:91:15:46:78:65:4A:03:D6:E4:0D:4D:7D:30
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 04E201F3
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/pAc8937KcZEVRnhlSgPW5A1NfTA.roa
Signing time: Sat 01 Jan 2022 09:00:28 +0000
ROA not before: Sat 01 Jan 2022 09:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208770
IP address blocks: 195.80.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81920499 (0x4e201f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: Jan 1 09:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4073cf77eca7191154678654a03d6e40d4d7d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:01:93:98:44:89:7b:de:aa:ac:8c:c5:d6:
86:e7:d5:be:1b:28:ce:64:9e:90:29:8a:79:e8:50:
d3:38:44:0e:17:92:11:87:22:cf:0a:f3:fe:03:49:
5a:69:d3:50:1f:4f:97:e2:11:b9:6a:46:c7:17:1b:
33:7b:b7:99:4c:34:1e:85:6b:6a:a5:d0:e5:24:9d:
f1:2f:3e:52:11:d2:12:31:9a:43:e2:32:83:30:1f:
da:fb:ae:7f:03:56:95:ca:8a:98:1d:c0:90:4d:26:
f3:f7:63:81:01:e2:66:87:cc:78:9a:dd:73:46:2f:
65:d2:1a:fc:e1:ff:d5:00:59:17:aa:ba:28:54:23:
0b:4e:81:05:34:3e:2b:17:15:ae:fb:50:bf:4d:52:
93:57:74:d4:12:5e:52:e0:4b:07:b4:97:2e:16:ec:
35:ac:9b:75:33:2f:02:c4:22:68:27:68:9a:0a:ab:
df:9b:05:c2:83:cf:41:a2:30:fc:25:53:29:88:b6:
bc:c9:6d:1a:b3:b5:60:f4:bc:0d:20:93:08:60:e4:
66:5e:2b:26:87:8a:34:c9:84:4b:18:60:87:26:f5:
9e:0a:5d:44:dd:6d:13:ea:38:94:67:d3:ff:da:f4:
da:04:87:c6:f6:dc:da:ef:7f:f7:ba:40:04:3e:69:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:3C:F7:7E:CA:71:91:15:46:78:65:4A:03:D6:E4:0D:4D:7D:30
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/pAc8937KcZEVRnhlSgPW5A1NfTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.32.0/22
Signature Algorithm: sha256WithRSAEncryption
76:60:a7:81:7f:d9:55:1b:f6:b3:87:7a:44:d1:50:64:9f:b4:
6d:cf:0b:54:68:61:25:5e:88:e7:29:b2:93:9d:a1:ff:f5:84:
66:2d:f1:97:69:50:aa:dc:76:b4:e0:b0:b4:e0:7a:1e:d8:79:
20:6c:bc:81:fe:1a:17:75:51:ff:8a:5a:ed:6f:2b:0f:22:f1:
42:88:fa:3b:01:92:da:b3:9d:f5:a1:e8:af:0f:5a:61:56:ed:
e0:f0:07:d7:ab:27:c8:d1:7d:b9:3a:e2:27:53:c3:f6:7b:eb:
46:56:97:bc:7e:c3:2b:e5:d9:40:e1:dc:65:1a:1c:3d:cb:b5:
66:f9:5b:df:ba:cb:fe:eb:1e:3b:98:fc:c6:75:df:82:38:1e:
62:6c:0d:b4:13:8b:9c:19:1c:eb:77:39:ae:bf:cd:82:64:6c:
6d:da:25:b2:dd:a7:97:ab:b5:2e:0a:cb:3f:02:d8:63:c5:a2:
d2:88:01:5b:5a:65:31:d7:4a:83:4d:20:7e:2b:da:c1:6f:78:
39:b5:5f:ad:66:e5:ec:8f:87:5c:db:c8:6a:35:40:fb:de:21:
ca:21:fa:4a:d5:36:13:77:91:07:42:03:df:2f:bf:11:f8:0a:
37:06:e9:c7:ac:c2:e4:cb:72:5e:4d:ca:ea:3d:e5:cb:8a:b7:
8d:56:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org