Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Drl9QI1F6VOZfe-4J_My_fdnJWI.roa
File: Drl9QI1F6VOZfe-4J_My_fdnJWI.roa (raw, json)
Hash identifier: 3ZDqi6Jo4bZuNzvta5mArLrvJvc+r31yMHOXEddijb0=
Subject key identifier: 0E:B9:7D:40:8D:45:E9:53:99:7D:EF:B8:27:F3:32:FD:F7:67:25:62
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183C0E5FD79D13D65D36A50818FD6329E8F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Drl9QI1F6VOZfe-4J_My_fdnJWI.roa
Signing time: Mon 10 Oct 2022 07:57:21 +0000
ROA not before: Mon 10 Oct 2022 07:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.87.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:e5:fd:79:d1:3d:65:d3:6a:50:81:8f:d6:32:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 10 07:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eb97d408d45e953997defb827f332fdf7672562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:de:f8:87:d1:fa:a2:5d:c0:46:d0:63:4a:
ae:23:dc:cd:fb:9f:40:54:27:e8:2f:ea:8f:4e:18:
10:f3:95:14:c0:98:ea:60:68:a7:e9:c2:d7:d0:36:
f2:f6:58:6c:f2:a8:0e:ef:89:b2:d0:58:68:7b:da:
79:fc:56:d2:12:04:a2:54:2c:16:44:cf:af:9c:e9:
e9:1c:35:c0:08:7c:07:d7:21:2b:a5:b4:4e:15:70:
97:de:2d:89:fe:bf:c7:72:b4:f5:7f:e5:fc:52:1b:
4c:0e:7b:dc:1b:23:62:89:2a:cf:3b:ef:67:c0:8a:
db:08:22:59:7d:c2:47:bf:c5:39:f8:34:41:f6:5a:
42:b7:4d:7a:81:3f:4b:45:2e:d7:ab:75:47:3e:ff:
08:7b:58:74:97:ab:6c:32:41:d3:7f:9f:f7:48:57:
7b:6e:2e:fb:57:9e:fb:a1:99:09:f4:7b:25:17:11:
8d:c7:8c:7b:25:04:ac:22:f5:fe:07:01:15:9c:08:
6b:ce:91:7a:59:f4:ae:21:ec:16:01:71:d2:10:aa:
0e:0d:d5:1d:b7:5a:f2:a0:8d:8a:6f:fa:87:f7:e8:
dd:e1:ad:6d:19:16:65:f1:a3:3f:1e:5a:36:11:02:
74:27:53:73:fe:80:a3:b4:44:24:2f:3e:18:4a:18:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B9:7D:40:8D:45:E9:53:99:7D:EF:B8:27:F3:32:FD:F7:67:25:62
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Drl9QI1F6VOZfe-4J_My_fdnJWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:de:a6:58:92:0c:ad:cf:32:20:3c:ab:c5:9a:88:6e:90:0c:
3a:27:91:83:13:bc:54:8a:eb:e5:34:3d:07:fe:8b:d7:a5:09:
9f:fa:2b:2f:74:7d:70:0f:a8:39:cb:1b:de:75:56:1e:d3:25:
34:f7:60:2c:ac:90:3b:e7:9a:b6:4e:15:ed:58:ce:70:f4:cd:
f7:46:dc:dd:5d:1c:78:f9:ff:97:9e:e5:93:50:09:70:50:32:
fc:69:5a:b1:d8:b7:47:01:40:a8:4b:a3:f9:6c:63:66:ce:eb:
06:ab:ad:8c:85:d8:9d:af:37:47:dc:5c:c7:d4:33:f5:d3:66:
14:35:30:eb:75:2b:b1:34:3d:87:56:93:52:3c:b9:1b:41:b5:
aa:0b:52:9b:b7:4b:19:ee:58:c2:15:a2:b3:c0:2f:0a:1a:77:
90:c5:c6:42:54:7a:22:8d:77:b6:7b:ce:19:bb:aa:bc:b2:b8:
b0:5b:5a:5e:21:6c:b3:31:9f:82:1e:6c:bb:cc:aa:e2:07:b7:
4c:d7:cb:c9:af:fa:7c:13:6c:ef:ba:fd:7e:ad:f9:c5:f8:cd:
3d:9e:cd:b3:1f:56:fd:43:0d:b5:b0:0b:7b:40:74:9d:2f:dd:
32:52:c0:f7:42:05:b5:68:6b:61:be:ca:ca:11:e0:16:be:93:
10:d7:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org