Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-BkyGefbTcajEh537o0dj4_ELIU.roa
File: 1-BkyGefbTcajEh537o0dj4_ELIU.roa (raw, json)
Hash identifier: V6kZHGIugizNn8YEhMI75Xt5lvcyNgIyiCPL3D4Erbc=
Subject key identifier: F8:19:32:19:E7:DB:4D:C6:A3:12:1E:77:EE:8D:1D:8F:8F:C4:2C:85
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E9FFB02
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-BkyGefbTcajEh537o0dj4_ELIU.roa
Signing time: Sun 06 Feb 2022 16:52:18 +0000
ROA not before: Sun 06 Feb 2022 16:52:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245365506 (0xe9ffb02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 6 16:52:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8193219e7db4dc6a3121e77ee8d1d8f8fc42c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:ba:03:4d:5f:4d:8b:05:e8:65:7f:06:c3:
4d:ca:6a:69:9f:fd:d9:93:2b:cc:77:1a:21:f4:24:
c5:d3:76:b2:6c:dc:dd:62:35:9e:8a:71:b8:e8:08:
73:5c:2e:98:17:6d:ca:dc:d9:20:56:e8:67:f9:14:
36:ec:e0:00:44:de:77:73:af:67:d1:f7:c4:35:53:
d8:0c:fb:32:c6:1c:7e:ef:a5:71:35:09:b2:13:5f:
37:4c:a3:3c:0e:08:c9:0a:2a:87:2d:f1:5c:71:a7:
dd:09:be:62:5c:ef:b6:9e:a4:59:10:3d:85:03:82:
86:c4:25:06:22:18:72:2d:a6:68:bb:fc:c5:99:3a:
b5:4b:35:cb:57:8a:74:9a:b8:d8:71:12:fb:29:f6:
53:c6:0a:9b:73:52:0c:a9:0e:68:10:fc:24:2a:c4:
c3:e0:c4:05:2f:e5:36:5d:eb:37:72:2a:2f:10:3c:
34:ed:7d:d6:03:6c:81:d0:55:13:6d:a2:fd:e3:86:
47:90:8e:99:3e:94:b2:c2:06:3c:31:f5:22:14:f4:
45:b7:37:69:1f:5b:d6:85:f6:22:45:38:1a:c2:67:
6f:d7:06:c9:77:8f:bd:ef:c4:65:0c:61:00:74:08:
6c:88:82:af:ca:68:43:35:01:2e:88:a2:04:1e:56:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:32:19:E7:DB:4D:C6:A3:12:1E:77:EE:8D:1D:8F:8F:C4:2C:85
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-BkyGefbTcajEh537o0dj4_ELIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.227.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2d:e3:62:1b:1b:f5:5b:35:6c:60:81:c1:19:54:d5:be:a0:
f3:4f:a6:d7:15:f0:05:07:60:1a:72:40:0c:d8:ab:70:78:50:
f7:e3:d6:6a:e5:5c:ad:cd:de:ee:e1:e4:e6:2a:d1:8a:ec:f3:
35:dc:4c:db:e5:3e:04:83:67:8b:85:30:e0:2a:ec:b1:df:79:
fa:bf:6e:66:82:53:bc:05:21:41:f4:19:d9:85:f7:85:c2:10:
94:35:e8:ab:6f:02:1c:8c:d8:d3:63:b7:35:30:77:99:dd:e5:
df:5b:5e:ed:13:6c:15:cf:82:80:b3:b2:cd:d2:df:15:f6:a5:
35:f6:4a:62:21:a6:60:83:83:03:3a:b0:b5:1c:4b:ca:55:18:
7a:e2:c3:1a:59:51:89:bc:54:05:8e:ed:df:87:04:91:de:c0:
ed:ef:24:f8:ad:8b:cc:a0:26:e8:39:3a:bb:be:0c:4b:7e:e6:
85:fd:31:97:22:c8:40:11:7e:8d:f2:a0:3c:ea:a9:13:aa:33:
aa:35:64:05:b5:c0:bb:5d:49:8b:24:89:87:a8:bb:e4:ba:50:
47:8c:ad:6a:f7:b1:c9:9d:a1:cf:49:65:5b:bb:29:f9:12:b0:
1a:88:8d:82:87:9b:d1:e7:99:7a:94:b6:b2:11:b5:d7:82:68:
13:3b:88:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org