Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/_sIMWfzj5cZs2IstOc_FtKV4KcU.roa
File: _sIMWfzj5cZs2IstOc_FtKV4KcU.roa (raw, json)
Hash identifier: +ulppasmhHvUYC+WvHWIxLs4i3TkeKrg2I6HZiuC16c=
Subject key identifier: FE:C2:0C:59:FC:E3:E5:C6:6C:D8:8B:2D:39:CF:C5:B4:A5:78:29:C5
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 018258D4E3E8E7B8F3F3A03E027144FB6CBF
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/_sIMWfzj5cZs2IstOc_FtKV4KcU.roa
Signing time: Mon 01 Aug 2022 09:55:23 +0000
ROA not before: Mon 01 Aug 2022 09:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210162
IP address blocks: 195.7.8.0/24 maxlen: 24
195.7.9.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
195.7.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:d4:e3:e8:e7:b8:f3:f3:a0:3e:02:71:44:fb:6c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Aug 1 09:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fec20c59fce3e5c66cd88b2d39cfc5b4a57829c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:9c:9f:75:de:c3:8c:99:d8:57:c4:a5:72:
09:4f:b9:dd:be:03:92:b3:9f:bc:70:66:bf:07:a7:
3d:bd:18:30:76:bf:37:b6:5a:77:20:db:f2:6a:48:
c0:ac:9c:cb:6b:e3:f7:14:92:4e:fc:c9:cc:b1:ce:
f6:07:b0:7d:88:44:eb:a6:b1:84:d1:98:8f:82:a2:
20:e6:bf:64:b1:99:a9:51:45:79:be:94:a7:27:0f:
a9:7d:87:3b:3c:91:76:cb:57:db:7c:e0:ba:16:20:
9d:4f:05:76:e7:f5:6b:dc:fd:33:38:2a:0a:b9:69:
6b:f1:3b:98:d8:a5:e0:25:e9:d1:d4:6b:dc:09:ac:
2e:b2:fd:2d:f4:63:3e:4a:32:36:e3:f1:f2:fe:21:
45:69:60:65:66:1c:3a:35:af:bd:2d:34:61:39:d5:
a3:99:c5:27:9b:04:eb:69:1e:75:58:d0:3e:da:57:
a7:5d:4e:17:ce:fd:ee:e2:c6:db:3d:d9:02:88:ab:
71:9c:14:3f:5c:3d:41:02:0e:a8:dd:06:4a:87:fd:
11:c1:22:83:23:7e:9b:be:9a:76:d3:d2:4c:fc:25:
ab:86:10:57:9b:28:df:1d:1f:00:fb:57:56:62:35:
b3:2b:bb:8d:51:c6:88:1c:fa:b5:57:c1:d9:d8:30:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:0C:59:FC:E3:E5:C6:6C:D8:8B:2D:39:CF:C5:B4:A5:78:29:C5
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/_sIMWfzj5cZs2IstOc_FtKV4KcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.8.0/22
Signature Algorithm: sha256WithRSAEncryption
24:cc:10:e0:c2:db:27:0e:99:fd:f6:fb:13:7e:23:e5:6d:23:
5a:ce:e2:cd:8c:5b:d1:72:c9:df:40:2f:e6:d5:13:44:c1:24:
e7:bc:15:4a:48:cc:89:78:bb:a7:04:34:18:33:2f:f4:f8:c5:
f2:7e:f1:2f:1b:24:c5:24:33:35:4a:01:45:b4:b2:4c:29:ef:
4c:53:85:e8:ac:d6:f1:e3:ad:3f:27:cd:47:47:a2:54:55:07:
22:c1:51:da:0c:23:09:b0:ae:66:bf:44:d6:f4:11:33:64:cc:
b9:ac:3d:5c:c4:f9:6d:f7:f6:dc:2d:cb:e1:60:1c:a5:e0:27:
f8:37:dc:85:d3:7d:0d:6c:77:9a:17:e1:bb:96:f4:38:f2:70:
57:7b:6a:3e:35:d5:54:1a:2c:66:6b:7b:ca:80:5d:71:72:40:
c5:50:d2:55:e2:2e:88:0f:29:68:b1:6f:6d:08:f8:f2:25:01:
54:24:94:71:b3:79:2c:28:52:d1:8f:ce:ae:4c:dd:4b:d3:ac:
53:82:ae:69:a7:6d:67:76:ca:a4:8c:f9:07:08:cc:aa:fc:9e:
bb:b2:f6:5c:13:90:f7:4d:46:d0:bb:3c:8a:94:9f:46:82:3d:
d9:4e:23:f0:6a:3b:75:fe:b3:e6:51:e5:3e:2c:59:87:4e:2d:
d8:fc:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:46 2024 by rpki-client on console-ams.rpki-client.org