Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2P8tgF1VdyFCS5TKNLIGcLbItYI.roa
File: 2P8tgF1VdyFCS5TKNLIGcLbItYI.roa (raw, json)
Hash identifier: 3eLCat/Y28BZljQbRw0xJoxmD+/6L5io9e98AfZn5/M=
Subject key identifier: D8:FF:2D:80:5D:55:77:21:42:4B:94:CA:34:B2:06:70:B6:C8:B5:82
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 106F6412
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2P8tgF1VdyFCS5TKNLIGcLbItYI.roa
Signing time: Mon 20 Jun 2022 07:04:47 +0000
ROA not before: Mon 20 Jun 2022 07:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 195.133.77.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275735570 (0x106f6412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 20 07:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8ff2d805d557721424b94ca34b20670b6c8b582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:c9:a5:29:2c:a3:01:c4:c1:ec:b2:ef:95:
03:9e:6f:bc:14:b8:3b:06:1a:89:06:9e:d1:fc:50:
7d:cf:1f:f8:6c:c5:02:4a:9c:02:e4:49:a6:d0:49:
65:5e:77:9d:d4:a7:51:3f:18:14:11:20:7f:dd:0e:
cc:46:f2:92:b6:ea:4b:65:04:23:92:5f:98:4e:d7:
36:82:ac:fe:10:b9:3a:8e:8e:ad:ae:9e:df:ba:65:
a0:ce:50:2c:66:cf:50:7d:90:22:ba:09:2f:36:bc:
9d:95:61:93:07:72:39:5a:d5:c6:84:7e:b1:ca:18:
09:a1:8d:7b:e4:b8:34:8b:ac:95:7c:a7:9b:09:a7:
91:7f:a6:ae:0d:8e:a4:b1:48:91:54:52:45:19:88:
cd:59:79:87:3e:be:55:87:72:67:94:30:cf:25:c3:
fa:20:60:8a:32:7f:fa:2c:8e:a6:2a:d9:5b:c2:aa:
c8:16:56:70:88:6e:51:7f:4e:61:8b:38:b5:d4:ad:
a2:03:f1:96:7c:51:59:8f:9e:7c:7b:de:6b:0b:12:
61:ac:56:92:1d:da:7c:e2:0c:f0:73:f8:8b:44:d3:
3a:01:72:0a:a4:dd:ad:da:47:4c:d1:52:b7:80:3f:
c7:f6:e3:26:3e:e3:97:ad:78:79:80:a0:6f:f6:19:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:2D:80:5D:55:77:21:42:4B:94:CA:34:B2:06:70:B6:C8:B5:82
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2P8tgF1VdyFCS5TKNLIGcLbItYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.0.0/24
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6a:9f:1d:2d:f1:0f:43:49:ad:22:0a:52:20:d8:4e:d0:9b:
a3:a9:90:8d:2b:b4:ac:6d:73:44:82:94:c3:56:07:15:0c:ec:
78:e6:4b:50:1c:43:65:41:71:cd:49:4b:12:63:e3:3e:3c:f5:
91:93:4b:5a:4c:c9:cf:6c:69:48:d6:f9:e8:64:53:43:ac:5e:
9e:47:fd:14:21:68:93:59:8b:65:73:4d:18:58:42:26:ea:b3:
83:2e:8c:87:7b:9b:c9:52:18:ff:2d:23:f5:c7:8d:4f:d3:74:
82:90:5d:ab:af:9e:75:1e:58:1e:62:5d:9b:6a:09:30:3a:54:
00:9c:22:72:90:51:a9:7c:64:3b:46:0f:ce:6e:b7:45:08:3b:
51:04:df:98:cb:b4:bd:6d:3d:3b:e9:29:b8:0e:bf:b3:83:f0:
e4:f5:74:cf:5a:2b:7d:bb:59:da:92:e2:d2:bf:59:83:57:b8:
ad:9f:9e:53:6e:7f:f1:7b:03:f0:62:bf:14:db:7d:80:9c:b4:
e8:23:6b:c9:48:a3:84:2d:f6:ae:a0:a3:8a:b2:3d:be:94:ce:
00:1d:f0:3d:e8:d1:47:d6:4b:ef:16:5e:ef:26:84:9d:ce:3d:
32:04:78:ff:0b:f4:7f:2f:36:76:18:e0:f3:b7:9a:6a:44:76:
48:d5:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org