Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/n-tuQuv5j9YqcStubAHMMVPQLhY.roa
File: n-tuQuv5j9YqcStubAHMMVPQLhY.roa (raw, json)
Hash identifier: c9olCOxqdXVzXje9eLDWbf6oHUtNUrbADMl5msO9LYE=
Subject key identifier: 9F:EB:6E:42:EB:F9:8F:D6:2A:71:2B:6E:6C:01:CC:31:53:D0:2E:16
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: E08DD2
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/n-tuQuv5j9YqcStubAHMMVPQLhY.roa
Signing time: Fri 15 Apr 2022 13:16:32 +0000
ROA not before: Fri 15 Apr 2022 13:16:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 195.88.162.0/23 maxlen: 23
91.211.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14716370 (0xe08dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Apr 15 13:16:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9feb6e42ebf98fd62a712b6e6c01cc3153d02e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:66:1f:49:4c:ed:9f:e3:4a:36:52:32:7d:
42:8b:1a:e4:9e:ba:38:a4:26:b8:0f:0f:d1:e6:89:
1a:fe:4d:bd:0c:5f:6e:f9:81:7f:35:c2:2b:a2:70:
cd:f0:bf:0d:db:07:8f:20:96:b4:f5:fc:f5:f9:af:
a5:2c:76:14:82:07:ca:af:36:9d:42:c7:03:c1:74:
91:4e:ad:72:81:73:59:31:25:5d:4d:2b:2f:9d:c5:
d5:e3:96:bc:b4:4b:55:09:14:72:e1:32:51:04:18:
c1:03:07:ea:1c:f6:19:fb:9a:9d:f3:e2:ca:b4:92:
45:9b:7d:7d:a0:e3:c9:de:d1:ba:40:2b:16:fa:12:
2f:a3:f7:cb:e3:8e:ca:0a:b9:af:97:d7:84:78:21:
5d:88:06:2c:cc:f6:44:e5:e7:aa:f4:b2:26:84:cf:
1a:1d:ac:47:b9:2b:07:63:9d:e1:75:92:4f:92:e7:
26:44:50:a9:4a:c5:b1:10:07:c7:0d:a0:e2:3c:11:
a8:41:23:b2:ab:59:a8:ae:28:fa:e1:96:a4:b8:c0:
88:0d:1e:aa:37:0f:09:bd:17:30:43:9f:60:a0:4c:
11:08:c9:2a:6f:98:3f:fc:74:e4:25:f5:ed:3e:80:
dc:41:9b:73:26:5c:9a:93:75:60:30:50:49:9b:e9:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:6E:42:EB:F9:8F:D6:2A:71:2B:6E:6C:01:CC:31:53:D0:2E:16
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/n-tuQuv5j9YqcStubAHMMVPQLhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.25.0/24
195.88.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:a6:40:2c:5a:62:30:2b:82:c8:e0:ff:29:99:3b:11:09:c8:
db:c3:a8:c0:0d:78:00:f3:9d:43:2a:ad:65:9f:bb:b6:6e:d5:
c6:26:96:05:62:56:10:74:f6:9b:c9:4d:af:0e:34:bb:ee:12:
3a:66:1c:5a:f9:ff:6f:db:b5:f6:dd:d1:06:9d:87:71:c3:2a:
1b:83:03:a4:21:50:17:b3:5b:b7:66:94:38:cd:01:57:c9:81:
36:8f:21:45:29:fb:68:02:f4:65:8e:15:f8:92:ca:5e:48:a6:
5b:64:07:45:22:f8:b9:1e:d3:c9:79:77:b3:1a:4b:d9:fa:e1:
bf:f1:d8:fb:19:24:fc:b2:55:f4:06:87:ce:76:4c:5e:3e:18:
1f:51:9f:2d:30:c5:7b:dc:69:24:6a:80:d1:70:5c:1f:f3:00:
d8:46:0a:88:0c:e2:ca:bd:1f:58:bc:2d:56:d7:3a:53:20:74:
a2:ce:49:b5:84:41:0a:55:a2:d1:4e:60:8b:79:ed:a4:c3:89:
2b:de:34:49:33:92:89:52:ad:5d:53:be:e4:dc:27:40:ad:ad:
f2:c3:fa:3f:da:04:37:78:1f:e4:27:e6:3e:18:54:d2:97:fb:
fe:34:13:e4:c6:13:2a:c1:14:50:83:49:e1:04:a8:23:1c:5e:
40:b2:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:50 2024 by rpki-client on console-fra.rpki-client.org