Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8YeDQBYjzn_QRYe9Pb5N3t7wiEE.roa
File: 8YeDQBYjzn_QRYe9Pb5N3t7wiEE.roa (raw, json)
Hash identifier: XVBchxKXw3RCg9ZleNrMwrNoNjGar95zSiHG6bI5orc=
Subject key identifier: F1:87:83:40:16:23:CE:7F:D0:45:87:BD:3D:BE:4D:DE:DE:F0:88:41
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0EBFB998
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8YeDQBYjzn_QRYe9Pb5N3t7wiEE.roa
Signing time: Wed 16 Feb 2022 14:17:51 +0000
ROA not before: Wed 16 Feb 2022 14:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48614
IP address blocks: 195.133.68.0/22 maxlen: 22
194.87.112.0/23 maxlen: 23
194.87.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247445912 (0xebfb998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 16 14:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f18783401623ce7fd04587bd3dbe4ddedef08841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:2d:db:1e:40:a3:64:a7:59:16:ce:7c:85:
04:5b:71:3f:33:bc:86:99:cd:d0:54:e8:b7:16:35:
bf:e0:12:a4:d4:64:88:e9:5a:df:7b:00:e4:9d:ed:
18:85:d8:4a:e1:0a:11:07:08:2b:d2:cd:ed:2f:78:
cf:0c:ea:f7:d4:5f:ec:d6:72:12:5b:da:79:de:0b:
0c:0e:21:04:ef:f4:a1:be:01:79:b1:0c:c9:d8:19:
e8:57:b3:31:5f:94:fa:1d:25:33:66:ba:e7:b9:8f:
70:fe:68:23:e8:20:f0:16:09:e8:11:57:96:07:96:
17:1b:33:e1:eb:8d:b4:a7:43:0d:e2:c6:c5:32:bb:
db:3e:10:92:9b:f3:43:55:02:59:e4:47:9b:f2:4d:
fa:4b:84:26:6f:7f:d7:6e:78:50:6e:c5:8b:3b:e1:
ab:3e:3a:aa:14:ba:57:3f:65:76:ce:93:93:bb:00:
4b:57:4d:7e:9e:d1:13:e8:79:cb:cc:10:f2:da:b7:
e1:57:25:c9:7d:ad:49:d1:ac:30:50:ab:15:b6:0f:
57:1b:89:e9:ba:4d:9a:7f:3b:00:63:b8:42:25:ba:
25:02:3f:25:c6:79:c3:b5:8a:8e:b8:d9:4c:24:5c:
b7:46:ee:78:79:15:6d:cd:b9:e6:b7:c7:51:59:c8:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:83:40:16:23:CE:7F:D0:45:87:BD:3D:BE:4D:DE:DE:F0:88:41
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8YeDQBYjzn_QRYe9Pb5N3t7wiEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.32.0/22
194.87.112.0/23
195.133.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:59:05:c7:ba:96:86:63:5a:7f:46:18:01:fe:05:b2:0c:d4:
2e:1b:c6:5c:d9:f6:21:39:2d:5c:f9:ee:4d:89:56:33:6a:22:
d0:03:d1:c8:d5:48:1a:bd:72:74:65:ed:b2:33:50:68:bc:49:
a2:a1:93:1d:51:4f:31:dc:f5:9e:68:b5:d4:b2:9a:13:e5:c4:
a2:08:c1:07:fc:96:d6:d7:7d:2b:15:29:a5:1e:af:70:19:e4:
dc:3d:70:04:7b:8f:49:87:7d:db:1b:df:c7:b0:72:fd:73:7b:
b2:8d:2e:5b:d0:0d:03:bd:39:95:fc:bc:e5:9d:f7:e8:80:5b:
1a:ea:9f:60:88:a0:76:d7:24:cd:6b:ec:4b:73:fb:bd:3b:dd:
6a:65:9d:e3:19:49:46:99:1d:d3:5e:7d:1d:f1:55:15:d6:a1:
ec:05:cc:46:51:45:d2:da:bc:90:32:ce:e8:c7:7a:bf:be:c2:
87:59:f9:a4:ab:cb:cf:35:64:57:2d:1d:48:11:bc:25:6d:a9:
11:73:56:25:9a:0f:09:01:47:c4:a3:5b:d9:28:7c:28:ae:9f:
f6:f7:5e:82:df:6f:fe:d0:31:d7:11:dc:83:0f:9d:31:bb:87:
da:a8:eb:b5:23:b0:d1:09:e9:c4:c0:63:10:c2:4b:48:f0:4c:
c7:f9:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org