Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6lJWKAoQwsmLrtv9iflgratwYxY.roa
File: 6lJWKAoQwsmLrtv9iflgratwYxY.roa (raw, json)
Hash identifier: CPyfHOvyqXPjSklEW4OPevO6UUikAaECUYalteDEVZQ=
Subject key identifier: EA:52:56:28:0A:10:C2:C9:8B:AE:DB:FD:89:F9:60:AD:AB:70:63:16
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183BE54A6B367934D1F0D6EDC9D7EA4BD66
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6lJWKAoQwsmLrtv9iflgratwYxY.roa
Signing time: Sun 09 Oct 2022 19:59:22 +0000
ROA not before: Sun 09 Oct 2022 19:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 194.87.25.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:be:54:a6:b3:67:93:4d:1f:0d:6e:dc:9d:7e:a4:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 9 19:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea5256280a10c2c98baedbfd89f960adab706316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:5c:be:81:89:c0:bb:7b:67:87:74:69:55:
4a:6b:a9:83:fd:1b:d5:e4:c1:26:b7:3c:38:52:34:
64:6e:49:6d:4c:2d:60:cc:9f:8f:7f:1f:70:4f:1f:
19:0b:20:ce:98:37:bc:ef:2c:f9:4f:04:83:12:6f:
5e:3f:94:ec:df:4a:19:31:e2:ce:18:d8:e1:e9:10:
3b:aa:96:03:53:7a:55:3c:5b:c4:ab:19:22:1a:b8:
1e:30:1c:35:e2:8e:7c:24:1d:45:0e:81:cc:83:86:
7e:9d:e2:41:52:77:09:11:56:71:eb:86:d6:27:13:
42:97:72:bc:8b:7c:1a:74:6a:f7:df:d5:b8:4b:1e:
80:19:98:46:fe:ce:24:9c:68:bc:43:9d:e0:ad:c2:
bb:9e:b9:4f:12:b2:4c:c8:89:5a:0a:53:60:c8:02:
15:db:68:06:6e:27:d3:f5:79:56:9c:5c:69:e5:cb:
7e:d3:8e:47:65:cc:79:a4:32:f2:84:20:e1:04:59:
f4:f2:45:88:fc:42:6c:cb:b3:ab:a0:37:4e:04:d7:
3f:1f:fe:fa:98:81:f8:b7:c8:b8:fe:a3:51:ab:ea:
0a:d2:b4:f0:67:28:b9:d6:f7:88:a5:94:b1:a7:dc:
22:15:f8:ed:9c:b9:1e:8e:72:bb:12:0c:ce:38:82:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:52:56:28:0A:10:C2:C9:8B:AE:DB:FD:89:F9:60:AD:AB:70:63:16
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6lJWKAoQwsmLrtv9iflgratwYxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.25.0/24
194.87.27.0/24
Signature Algorithm: sha256WithRSAEncryption
55:80:33:85:ee:e6:79:b1:7e:88:75:b4:75:ec:15:d5:2d:71:
89:61:26:dd:e6:58:e5:ce:84:a7:cb:f8:4b:68:5b:05:62:50:
0e:0c:d2:ee:cb:ea:47:56:54:c3:53:05:7e:04:36:37:e7:b4:
bb:f3:57:d4:84:67:90:10:90:60:9e:b4:bd:c9:1a:ba:da:83:
4d:28:70:93:39:c5:9c:08:05:92:02:7c:c8:3a:df:35:60:db:
a0:ee:e5:e0:71:d4:1f:81:f8:fd:56:5c:c6:c9:aa:4d:76:57:
c3:0f:30:30:ad:ca:72:c6:9a:ca:d4:6a:44:c2:50:5b:ae:e6:
68:da:77:08:e5:41:3b:8d:1d:20:53:94:e8:ed:1a:28:55:ab:
39:1c:82:7e:f3:97:55:cb:27:6e:f7:0a:d7:54:ed:37:68:d6:
09:9b:5d:5e:0f:5b:f9:4e:08:43:02:e4:b1:66:6e:84:5e:7b:
75:82:7b:d3:a2:d5:67:4a:57:ac:99:bb:a8:a9:da:db:71:08:
0d:49:9a:b8:78:b3:9d:e6:c5:ef:2c:93:6f:03:cb:63:60:52:
63:66:fd:34:a4:fc:68:9c:98:39:4c:35:bb:eb:3a:c3:28:af:
51:d3:16:e7:74:27:86:6c:87:10:4d:84:90:f7:2b:86:5f:ae:
ec:30:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:56 2023 by rpki-client on console-fra.rpki-client.org