Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DE71lYV_QKEcBaLQQKX04G_Gjqo.roa
File: DE71lYV_QKEcBaLQQKX04G_Gjqo.roa (raw, json)
Hash identifier: SwWGRmBCNojX4VUMk+MNT4VveVhmBjXMXr756amrhl4=
Subject key identifier: 0C:4E:F5:95:85:7F:40:A1:1C:05:A2:D0:40:A5:F4:E0:6F:C6:8E:AA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F82CA8F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DE71lYV_QKEcBaLQQKX04G_Gjqo.roa
Signing time: Thu 21 Apr 2022 13:52:15 +0000
ROA not before: Thu 21 Apr 2022 13:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211112
IP address blocks: 194.135.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260229775 (0xf82ca8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 21 13:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c4ef595857f40a11c05a2d040a5f4e06fc68eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:89:7f:2d:2b:bb:0d:f6:70:14:a9:a9:1a:
5c:7b:55:ee:09:b0:99:74:87:8c:70:c1:3e:90:04:
47:31:92:d2:13:67:ea:e9:fa:b3:e6:07:31:5e:90:
33:94:f7:44:e6:3b:dd:c9:bf:a9:bf:44:c4:87:b6:
eb:15:0a:26:8a:a3:3f:26:f5:14:3b:72:1b:58:dd:
4d:82:07:3e:cc:0b:88:1f:f9:b5:51:c6:c5:24:ff:
d6:ab:17:fa:06:43:74:c1:44:5e:59:8d:3c:ae:7b:
ae:1b:bd:7b:e6:c3:7f:01:db:9a:5b:1a:8a:9c:fb:
82:1b:f3:c5:be:b9:0d:8c:41:08:35:b9:f1:3c:ca:
d9:28:07:a8:02:5c:e4:46:40:d9:1b:fd:cf:86:6c:
ae:71:30:86:69:ca:da:ed:d7:c1:09:da:6d:28:b9:
31:f1:d5:6c:7f:c7:f3:3c:34:53:44:31:ab:01:1b:
82:0f:d1:75:8e:34:49:a5:07:ac:7b:2b:79:79:47:
36:92:92:ab:96:bb:ca:e9:08:b3:c3:38:1e:25:18:
69:79:07:b7:d4:b1:26:67:22:78:3b:df:69:24:71:
94:00:84:e3:be:03:5b:e3:b3:3a:72:e6:b6:6e:2e:
2f:22:18:c1:a6:cb:81:c8:fc:f8:2a:3f:63:b2:d5:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4E:F5:95:85:7F:40:A1:1C:05:A2:D0:40:A5:F4:E0:6F:C6:8E:AA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DE71lYV_QKEcBaLQQKX04G_Gjqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0b:4b:bf:90:7d:65:09:c6:a0:78:23:3b:4f:ec:cf:04:fd:
35:9a:f8:3b:cd:f3:40:b2:6f:ae:a9:88:59:1a:96:61:ae:60:
4e:e6:6d:bb:92:1f:f6:4e:3f:69:85:a6:95:66:bc:aa:de:6a:
ba:c9:0a:08:14:94:88:ff:e9:f7:ec:ae:ca:36:98:55:6d:e0:
b7:24:eb:71:64:80:08:0e:47:48:f7:5f:36:96:82:b7:66:2f:
3d:ca:35:4b:4c:3c:2e:0b:15:b8:85:88:4e:75:1e:33:f2:1c:
99:3e:17:4a:f0:0d:98:a6:3c:72:84:dc:4f:a2:e7:d6:73:20:
f0:99:2e:27:04:25:12:f4:e0:bb:d8:6f:eb:ac:66:7b:ac:e4:
97:71:4e:26:61:b5:e9:60:06:34:d4:6e:30:27:a9:20:17:c8:
5d:99:c1:11:20:f8:b0:ff:d4:3e:7d:22:d9:b0:24:0b:75:b4:
44:84:21:c6:c4:04:15:e3:54:9d:c2:47:48:77:f2:05:26:6f:
e4:e1:75:b0:38:8c:c8:b9:ac:7f:08:af:25:c7:21:01:33:b7:
11:fc:2a:47:01:bf:8a:77:01:94:9d:4c:3e:14:27:4a:f6:77:
72:9b:ef:0f:2d:3f:82:54:30:61:ca:34:3d:05:1c:86:9b:e8:
ea:ec:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org