Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5wF65TicjLF9-O6AKv-PJ6n6THI.roa
File: 5wF65TicjLF9-O6AKv-PJ6n6THI.roa (raw, json)
Hash identifier: 3ovCzQKP/8vnYQL6tMVadNbdQrCDBvhQrIJRI2mq4uQ=
Subject key identifier: E7:01:7A:E5:38:9C:8C:B1:7D:F8:EE:80:2A:FF:8F:27:A9:FA:4C:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183E4CD375E949E4E1CD6646F26E7A4FD25
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5wF65TicjLF9-O6AKv-PJ6n6THI.roa
Signing time: Mon 17 Oct 2022 07:16:37 +0000
ROA not before: Mon 17 Oct 2022 07:16:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 266169
IP address blocks: 194.87.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:cd:37:5e:94:9e:4e:1c:d6:64:6f:26:e7:a4:fd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 17 07:16:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7017ae5389c8cb17df8ee802aff8f27a9fa4c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:59:4d:c2:52:14:d5:4e:50:80:89:0f:33:
4f:10:8a:95:f5:ea:4b:8b:df:40:6c:05:02:a9:fb:
68:29:d4:0f:c8:cd:be:b1:0a:2c:25:d1:55:7d:18:
bf:c2:b7:2e:2b:96:15:9e:e8:bf:21:b3:6c:6e:f2:
c2:be:4f:d6:a5:7e:22:db:60:51:30:8b:0c:3c:69:
24:7c:d9:22:8e:29:b3:21:3a:7c:42:9d:9f:ae:ca:
dd:60:25:d4:13:36:0a:4b:5a:69:2d:c4:99:9b:13:
94:d6:6f:05:30:4b:09:b5:02:36:f4:3a:39:eb:c6:
9f:0c:4e:0e:52:c4:32:92:51:5f:0c:fd:90:ec:a1:
fc:49:e8:ad:33:ad:ae:63:da:de:1c:60:6b:ee:65:
7e:6a:2b:7e:7c:b4:ff:e2:67:58:57:da:20:b6:fe:
83:42:f1:2e:22:f1:90:67:d7:56:ad:ac:3d:c5:5e:
af:cd:ce:68:85:da:df:ce:07:20:20:15:91:09:be:
c5:a8:42:b9:63:4b:ef:b8:c5:cb:81:05:c2:51:3a:
17:f9:3b:12:19:84:a0:9b:a7:53:3c:d0:02:93:73:
37:71:21:9d:39:b0:ce:e8:86:42:f3:f5:d3:19:be:
dc:94:0a:81:ef:c3:cb:10:05:74:8f:d5:8d:2d:cd:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:7A:E5:38:9C:8C:B1:7D:F8:EE:80:2A:FF:8F:27:A9:FA:4C:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5wF65TicjLF9-O6AKv-PJ6n6THI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.164.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a3:3c:9e:c6:f3:68:81:0f:93:6b:55:6e:ac:fe:ac:15:22:
f1:f4:e8:61:d1:bc:82:a7:7a:74:ad:f2:54:57:f6:16:09:90:
ad:bf:3a:00:43:7e:f1:cb:b2:50:f4:1c:1b:51:b9:de:2c:ec:
0c:fa:a2:21:51:12:37:7e:7c:8c:71:b7:a4:c8:63:bb:66:53:
d7:05:70:72:cb:54:d3:e5:e5:02:12:de:41:6e:01:20:e6:17:
ad:24:aa:29:d4:0b:ff:e0:d9:44:d5:80:55:80:a2:1c:9c:b4:
e2:31:9f:61:82:40:5d:0b:93:d0:92:f1:0c:4f:e9:96:78:c2:
2c:8c:0d:ab:b1:4a:1a:d6:b7:73:2d:44:2d:36:a4:8e:f3:35:
df:8b:31:77:61:16:d3:94:53:16:c7:a4:fc:6b:db:61:2d:85:
bf:38:5a:97:af:dd:78:ac:8e:01:4d:4d:01:fd:41:f7:86:80:
72:6b:7c:99:89:35:5f:ec:dd:ca:28:57:31:58:d7:f4:f3:c3:
73:e6:38:5c:70:4a:dc:3c:c1:96:02:67:45:9e:67:b0:91:a2:
a3:02:09:36:6a:58:ea:a2:f9:c7:5e:96:15:31:53:60:74:36:
fc:b8:3e:b0:53:9c:d5:aa:5f:4a:fb:48:64:03:0e:db:0a:31:
d4:07:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:06 2024 by rpki-client on console-fra.rpki-client.org