Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5Rt546u0XAZ9juVLTWctwdOOhWI.roa
File: 5Rt546u0XAZ9juVLTWctwdOOhWI.roa (raw, json)
Hash identifier: m2R2ocm0148QbKLEf6KunjsmQlBf6/au8J1gfDv1ios=
Subject key identifier: E5:1B:79:E3:AB:B4:5C:06:7D:8E:E5:4B:4D:67:2D:C1:D3:8E:85:62
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183C6D42AA10333EE8329D880FD84F08851
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5Rt546u0XAZ9juVLTWctwdOOhWI.roa
Signing time: Tue 11 Oct 2022 11:35:36 +0000
ROA not before: Tue 11 Oct 2022 11:35:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 194.87.114.0/24 maxlen: 24
194.87.132.0/22 maxlen: 24
194.87.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:d4:2a:a1:03:33:ee:83:29:d8:80:fd:84:f0:88:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 11 11:35:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e51b79e3abb45c067d8ee54b4d672dc1d38e8562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:dc:b7:1c:8c:cf:64:a6:7f:6a:47:b0:0b:
ae:39:3a:d0:32:75:41:e8:be:a9:a6:c0:2f:9e:11:
13:50:78:c0:cd:70:d9:77:0f:79:2f:f7:04:19:b8:
48:1b:bd:b7:7d:5a:92:37:a8:1e:9b:00:a3:77:94:
31:19:46:e6:0b:fc:a6:b5:fb:e7:11:35:d6:d6:99:
76:a9:b3:fa:75:18:54:b4:fe:c0:a4:17:4d:3b:71:
f1:5b:8b:c9:29:2d:02:84:f3:b3:b3:33:5a:52:89:
93:8d:17:7e:0c:29:dc:ed:fb:07:fd:76:cc:a9:71:
10:c0:9c:13:3b:f5:eb:81:d1:f4:b5:3e:f7:15:30:
62:68:19:a0:c6:67:1b:54:50:69:43:33:0b:6d:b8:
19:52:ec:81:ea:f0:a4:fc:c5:55:64:5c:b2:d7:2a:
16:66:3f:b2:77:d8:5d:b8:6e:c9:68:79:0d:10:30:
33:f8:48:08:55:de:fd:2d:0d:81:99:9a:67:ed:91:
0d:9a:c3:15:4b:92:c3:3c:13:46:03:61:44:99:d3:
37:b2:0e:d8:bb:0e:60:60:f3:23:ac:db:4b:ee:b8:
03:fe:b8:24:02:21:9e:74:ca:f0:ea:4d:6a:5e:bc:
49:ac:39:f9:b1:19:ea:b6:10:fb:fa:6f:16:67:15:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1B:79:E3:AB:B4:5C:06:7D:8E:E5:4B:4D:67:2D:C1:D3:8E:85:62
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5Rt546u0XAZ9juVLTWctwdOOhWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.42.0/24
194.87.114.0/24
194.87.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:b4:3d:e9:57:36:f8:ce:48:26:31:68:d5:86:90:1e:a6:76:
9b:9b:bd:28:fe:23:1a:16:67:53:72:a4:5a:f7:f4:df:2a:00:
3e:2e:8b:15:27:5f:3e:db:d5:81:e1:35:8d:06:fd:a3:c6:ca:
0f:c5:34:b6:16:07:8e:36:22:c3:c0:06:50:31:09:63:e1:92:
65:28:9c:41:e1:e6:82:99:97:30:3e:24:a5:4a:c7:26:6a:d7:
d7:06:80:79:87:e4:bf:b1:08:bd:13:cb:ed:92:b2:23:93:44:
f7:a7:67:2c:4c:31:fb:70:e1:88:e2:4e:e3:d7:81:b7:15:c0:
5d:4c:76:22:ee:18:13:40:b9:13:58:8d:a6:f0:8e:47:52:d0:
88:e7:ad:1b:63:0b:71:a1:af:6b:85:0a:fc:ef:5f:67:de:87:
5d:df:82:f3:dd:7d:87:09:1a:72:04:91:9c:65:79:86:ad:f5:
73:96:52:d4:c3:af:f1:e9:4e:cf:46:04:17:21:31:f9:44:5c:
e3:57:63:26:24:4b:7d:fb:fe:8d:00:a6:cd:6d:a6:19:af:4f:
7d:bd:a3:b5:4c:b5:fb:8e:a0:d7:9a:ee:2a:06:95:c2:a8:b9:
3a:f8:d1:bf:6a:4e:41:90:f1:b1:e1:a7:c9:41:4a:22:2c:be:
46:e3:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org