Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AS66al6mkRsnuypiY45xwFk5yVM.roa
File: AS66al6mkRsnuypiY45xwFk5yVM.roa (raw, json)
Hash identifier: keB65shDmxRpB899w13WSqvZnhT8c3JgO9QIg1FM1ss=
Subject key identifier: 01:2E:BA:6A:5E:A6:91:1B:27:BB:2A:62:63:8E:71:C0:59:39:C9:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018519BB2E21CC3D26CFF19533011D3895D9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AS66al6mkRsnuypiY45xwFk5yVM.roa
Signing time: Fri 16 Dec 2022 06:59:35 +0000
ROA not before: Fri 16 Dec 2022 06:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:bb:2e:21:cc:3d:26:cf:f1:95:33:01:1d:38:95:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 16 06:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=012eba6a5ea6911b27bb2a62638e71c05939c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:d8:11:d1:8a:98:3d:b0:0b:53:02:21:38:
bf:57:1a:f6:6d:43:e2:d2:7c:2c:21:26:c8:8f:53:
68:e2:f7:0f:06:d4:5c:32:e8:87:2a:f6:82:8f:42:
9a:7d:38:e1:80:e5:9e:9e:8a:ef:c3:62:f0:f5:51:
39:5f:e7:5a:92:ab:73:be:d9:e7:9c:f2:55:ab:73:
a3:01:10:e8:78:e9:7b:a1:21:49:17:f3:1e:a0:eb:
b6:dc:8a:0b:e4:01:75:47:d0:c7:1e:79:df:19:43:
76:3b:12:a6:ae:a3:a2:70:43:08:bd:4b:d7:d1:17:
26:58:c0:3e:04:bb:ad:51:04:e7:ea:8f:10:0f:a0:
9f:f7:2a:5b:0b:e2:b3:e0:ba:46:09:1d:08:b4:2d:
c7:ff:6e:d3:ab:c8:8c:a5:10:24:a6:38:21:41:63:
65:c7:0f:4d:b0:6c:4e:97:c4:0c:0a:e7:41:70:ab:
71:f7:12:4e:79:68:7d:96:5f:6a:a1:80:3c:3a:7b:
eb:2c:0e:8d:5c:db:c4:4f:c3:97:5f:e0:9b:37:18:
0f:f8:55:25:56:be:ad:69:de:6c:75:8f:fa:79:12:
21:00:d5:d9:ce:ce:05:c0:ac:f0:db:60:7e:25:ff:
b7:07:c9:88:07:16:82:b2:b1:6b:a7:19:ee:f8:3f:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:BA:6A:5E:A6:91:1B:27:BB:2A:62:63:8E:71:C0:59:39:C9:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AS66al6mkRsnuypiY45xwFk5yVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.207.0/24
Signature Algorithm: sha256WithRSAEncryption
62:19:4d:7e:5b:04:35:e8:8b:6d:a0:7d:8c:0d:b2:13:ba:6b:
c4:80:66:46:71:d6:06:76:e1:22:47:0d:4a:3b:af:5d:4e:f6:
49:2b:5b:9b:74:2e:83:01:dd:e1:3b:81:c3:f8:32:6d:ad:d1:
61:5f:5f:7b:b2:e8:67:92:22:53:06:a8:4a:7f:61:89:b7:66:
9a:85:b4:b9:01:41:9b:f0:83:9b:c4:2d:4c:dc:15:b0:83:aa:
3d:da:ee:0f:a8:1a:05:57:a7:7b:db:6b:e9:71:c2:b8:50:72:
9b:17:38:55:30:cf:fe:28:ca:50:09:b4:31:ae:3d:4d:64:0b:
f2:6d:d3:d7:42:3e:20:45:fb:c1:16:16:d8:30:af:7a:9a:ea:
06:7b:ca:52:5b:14:67:cb:31:2e:dc:07:17:4e:64:b2:43:af:
03:90:b0:db:59:ec:ea:a1:00:e0:55:12:11:83:e2:7c:61:17:
e9:d0:d3:6e:97:97:9b:e0:0d:fc:fb:65:59:66:25:76:d2:57:
55:ca:15:37:9d:79:84:be:b1:aa:27:ff:16:5a:af:34:6f:b6:
dc:05:98:5b:c0:94:f6:c3:0a:bd:dd:9b:d7:6f:15:33:2a:ac:
b2:b9:22:37:fc:94:62:5b:7a:e3:d2:b9:a7:55:0b:6a:75:65:
64:e7:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-ams.rpki-client.org