Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5PeG5ijMNmcUbGrc_uxyywpiP44.roa
File: 5PeG5ijMNmcUbGrc_uxyywpiP44.roa (raw, json)
Hash identifier: t5fiFfK2d4IzeV8o1YOvmgsheFYaBtwjMwIbYBJK7DA=
Subject key identifier: E4:F7:86:E6:28:CC:36:67:14:6C:6A:DC:FE:EC:72:CB:0A:62:3F:8E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F4A839C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5PeG5ijMNmcUbGrc_uxyywpiP44.roa
Signing time: Wed 30 Mar 2022 09:49:36 +0000
ROA not before: Wed 30 Mar 2022 09:49:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48658
IP address blocks: 194.87.212.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256541596 (0xf4a839c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 30 09:49:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4f786e628cc3667146c6adcfeec72cb0a623f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:dd:fc:6a:97:e0:b4:5e:36:6e:d7:c3:01:
56:57:f2:1f:b6:a2:e6:82:42:11:4d:09:15:ee:d3:
ba:c8:56:91:5d:20:c7:c6:f9:ea:76:5f:6b:8e:03:
de:f7:0a:03:86:e0:cd:1d:d5:33:4c:02:06:1b:97:
60:31:c9:c0:1f:f8:91:e7:74:5b:47:23:a8:42:38:
9d:b3:0a:b7:93:8d:95:64:c6:7d:91:e4:f9:0c:e2:
ca:df:68:81:12:2c:2b:94:4a:d1:2e:eb:36:43:d3:
5d:b9:7c:d1:85:05:b7:c1:1e:23:c7:2d:43:ff:bb:
0c:a4:e1:e9:f6:b9:5c:a5:6f:a5:2a:cf:d8:fb:d7:
04:2f:18:8f:92:ce:83:3e:ab:9a:2d:51:23:ba:99:
40:47:12:f3:8b:ab:53:1e:f0:60:35:ba:fc:56:76:
c6:1f:a7:f8:c6:fd:76:37:34:8b:2d:44:83:41:2d:
e9:f1:21:95:d1:7d:f7:c8:ec:b9:49:40:21:fe:c7:
29:46:3f:31:6c:fb:de:dc:20:36:dc:43:29:be:78:
5d:d5:60:76:90:fd:82:72:06:cd:5c:97:0b:ad:a7:
4f:54:42:53:a1:16:ae:44:41:47:65:f5:38:5f:3e:
b6:38:27:c2:9b:d9:60:92:40:31:4a:38:b4:90:a2:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:86:E6:28:CC:36:67:14:6C:6A:DC:FE:EC:72:CB:0A:62:3F:8E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5PeG5ijMNmcUbGrc_uxyywpiP44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.178.0/24
194.87.212.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c5:b6:13:67:7c:b1:2f:28:08:3a:d0:e5:48:59:52:ad:6e:
c9:e8:71:b5:98:b4:cc:22:30:6e:f7:82:b3:db:32:de:6e:5b:
d4:91:02:76:74:a5:f1:0f:9d:70:2f:8e:ca:a1:0a:8a:ce:b3:
88:e5:28:e8:de:17:dd:0b:5e:c1:fb:7a:72:22:55:ec:a1:84:
ce:f4:39:9d:bb:0d:9a:8f:32:79:65:83:b5:c2:65:d6:56:64:
ae:ed:2a:97:12:1c:b7:bb:66:ae:2c:f5:c0:d4:2b:49:71:15:
57:9b:51:1a:db:d6:64:dc:95:be:2f:23:da:da:7c:70:4c:66:
97:ae:5a:0e:89:5e:87:84:88:65:2d:1a:fb:29:7a:81:01:d1:
bc:f4:78:d4:b7:7e:9f:aa:86:6c:98:8a:85:ef:c1:30:de:ec:
1f:83:92:a9:a2:71:d9:33:4b:ba:f9:90:d7:7c:ca:0d:43:46:
a8:fb:af:db:b6:77:86:e1:7c:d3:03:b3:a5:f2:fd:fe:0b:21:
48:2e:db:89:b8:62:7c:da:da:07:3e:74:f9:01:e5:fb:b0:9b:
ed:58:33:a6:85:55:1f:fb:1e:b4:86:f1:67:ab:f4:61:0a:0f:
3b:b1:d6:be:72:a3:41:93:63:14:c2:2f:9a:6f:ea:62:d7:22:
88:3e:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org