Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2PlKg13xlrCQTofFH-ANpGY0h8Q.roa
File: 2PlKg13xlrCQTofFH-ANpGY0h8Q.roa (raw, json)
Hash identifier: JXIYdDQaf/Hb4x2yJ8noDgLV2bIA9z7PMmLuWdZxYh8=
Subject key identifier: D8:F9:4A:83:5D:F1:96:B0:90:4E:87:C5:1F:E0:0D:A4:66:34:87:C4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018562CC6C5D22D10839049B26D57278E1F2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2PlKg13xlrCQTofFH-ANpGY0h8Q.roa
Signing time: Fri 30 Dec 2022 11:30:42 +0000
ROA not before: Fri 30 Dec 2022 11:30:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204902
IP address blocks: 195.133.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:cc:6c:5d:22:d1:08:39:04:9b:26:d5:72:78:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 30 11:30:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8f94a835df196b0904e87c51fe00da4663487c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:84:7f:f5:e8:78:72:69:f5:d8:03:95:7c:
34:c1:7b:f9:3a:93:b7:2e:3f:95:d8:f8:0e:fc:e9:
2c:63:c3:84:0f:b8:d8:1f:87:de:de:8b:d0:1c:50:
4e:7d:73:06:4c:98:1f:82:ea:bd:f3:12:72:b4:e4:
67:52:ac:31:4e:3f:72:ff:5e:a5:82:1a:4d:d7:cb:
f1:8b:35:56:e0:0a:97:ac:e1:ff:e6:d5:3d:5f:c2:
d2:71:4d:74:96:b2:12:96:66:ea:62:a2:d6:76:16:
4a:00:6a:8e:32:0b:d1:4d:ec:29:b8:7d:67:03:3d:
7a:64:74:93:35:a5:fd:d7:6c:ed:73:78:ae:f4:b0:
3d:8f:38:4c:7f:58:65:16:2f:81:e0:61:8c:5b:9e:
60:8d:f7:75:da:2a:2f:34:a7:25:b7:17:9a:80:37:
19:05:39:42:30:d9:80:39:d6:2f:6b:b8:1c:b0:43:
a8:20:af:fe:3b:c6:02:be:28:dd:af:39:32:08:cf:
12:ec:2c:b7:82:97:42:1e:d4:4c:4b:12:b9:d8:6a:
ce:4a:5a:dc:66:04:68:3a:69:8b:35:ed:c0:ef:41:
67:fd:46:70:46:72:44:14:cd:9e:2b:82:18:74:73:
2d:bc:41:1b:e6:e5:ca:ee:eb:0d:f4:ac:b2:4d:d9:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F9:4A:83:5D:F1:96:B0:90:4E:87:C5:1F:E0:0D:A4:66:34:87:C4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2PlKg13xlrCQTofFH-ANpGY0h8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e7:fa:50:b9:96:95:99:eb:8e:eb:20:96:53:07:26:60:23:
11:ec:86:ce:50:ff:ab:e1:81:62:ef:e8:b5:42:46:60:be:32:
c2:5e:00:56:d0:c7:4e:25:19:67:7a:12:ee:a1:e3:0c:87:cd:
35:23:e8:3b:ae:62:43:e1:a9:f3:22:06:c2:ad:99:ef:ec:e7:
a4:5c:69:ca:19:de:e6:07:01:35:f9:e0:66:27:0b:68:2c:89:
5b:da:02:b8:47:49:53:8b:c3:5b:2b:9e:a4:bc:8e:78:89:05:
d8:91:86:c8:1b:eb:79:76:24:7b:db:e9:55:b5:3d:8d:84:63:
43:10:04:66:56:bf:b5:24:c9:3c:de:46:68:cd:42:69:04:0b:
43:6e:ae:2f:43:ae:72:62:dc:f1:dd:e4:02:a7:76:fb:35:e8:
8a:48:a1:fd:eb:79:0f:b9:9e:2e:c6:6b:64:c8:d8:d9:8f:f5:
b0:ce:8f:6d:22:ad:81:d7:ee:3f:5c:66:f9:89:52:68:3b:27:
00:e7:58:ad:fd:bd:51:75:bd:da:f3:0b:e3:51:d6:2b:15:cd:
a4:35:d8:35:b0:cc:9d:aa:bc:39:40:a3:51:d6:00:b2:69:c2:
09:3f:68:ce:37:9d:c9:72:20:b1:b5:36:8b:99:20:c2:cf:d0:
d8:00:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org