Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EPxVM6XoaRQRpey0Z7UMfVK6jeY.roa
File: EPxVM6XoaRQRpey0Z7UMfVK6jeY.roa (raw, json)
Hash identifier: Upvf3LzvVXWI4PLiPTA/AP3GNL0n/VgRXj0OyfafB0k=
Subject key identifier: 10:FC:55:33:A5:E8:69:14:11:A5:EC:B4:67:B5:0C:7D:52:BA:8D:E6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184EBA9BF05BC96803CA12DEA447175D7FB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EPxVM6XoaRQRpey0Z7UMfVK6jeY.roa
Signing time: Wed 07 Dec 2022 08:18:00 +0000
ROA not before: Wed 07 Dec 2022 08:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 194.87.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:a9:bf:05:bc:96:80:3c:a1:2d:ea:44:71:75:d7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 7 08:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10fc5533a5e8691411a5ecb467b50c7d52ba8de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8b:5f:2a:95:63:43:d3:65:b3:99:ea:0d:a6:
74:7b:80:28:16:da:96:48:15:c1:72:6e:ac:24:6d:
ec:71:27:35:95:79:86:a4:7b:b6:d2:c6:f8:f3:99:
e9:ee:bb:96:e9:45:50:03:42:1e:77:08:9a:c1:04:
3f:b1:c0:1f:8d:5a:2a:df:db:06:60:ff:e1:b1:84:
2b:2f:eb:99:c4:f7:38:d7:fe:64:bd:3a:b8:55:06:
94:b9:74:04:89:ad:90:9e:3a:a4:10:96:70:74:f4:
f3:ed:0a:ff:94:bd:2a:0a:56:a4:38:65:43:ae:fa:
79:37:a1:56:75:51:b8:b6:a0:2f:e1:dc:18:5b:0d:
2b:78:c8:ed:87:60:56:e4:e1:34:66:ac:4f:2a:a7:
9b:bb:d0:39:49:1d:7c:1d:20:4a:8d:eb:93:8c:73:
1e:0e:c8:07:1f:d9:ff:dd:ad:61:3d:2b:4e:0e:e3:
4d:5d:88:39:75:d6:69:b6:fc:c5:f2:c3:76:d8:41:
75:e8:0f:0c:34:04:98:80:00:93:52:a0:fb:3a:2f:
e7:b1:22:54:e3:6c:74:4f:c4:a2:08:da:3d:07:e3:
60:0b:ce:3c:80:a4:4a:29:a7:3e:d0:f6:5f:4b:b2:
07:ca:b6:b1:a2:07:b5:6b:45:bd:7e:d9:a2:6d:62:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FC:55:33:A5:E8:69:14:11:A5:EC:B4:67:B5:0C:7D:52:BA:8D:E6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EPxVM6XoaRQRpey0Z7UMfVK6jeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.209.0/24
Signature Algorithm: sha256WithRSAEncryption
99:71:f2:60:d8:9f:26:ce:ba:60:d4:92:da:a5:91:ed:ef:ee:
1a:8a:56:89:7b:1b:44:5d:c7:c3:6a:e0:3d:07:a7:3e:c1:8a:
85:cd:0d:cd:60:0d:82:c3:e5:40:fc:d3:9a:24:0f:37:e4:36:
e6:f2:a9:3f:06:9b:08:1c:71:22:85:59:03:ff:f3:9b:69:8c:
0a:ac:b9:da:ef:b4:67:3d:4c:f9:22:fe:80:d9:29:c7:26:4b:
db:d8:9f:f9:2f:26:aa:e3:c8:39:cf:5e:96:81:09:8a:ff:02:
1a:73:af:ce:29:11:fb:34:24:13:8d:b7:38:df:3f:47:e5:42:
d0:97:d1:4c:8c:8d:2d:7a:db:fe:06:b4:50:91:c6:5a:64:c8:
27:a8:b9:4a:5a:c2:42:18:82:23:14:06:ba:81:a8:fd:d3:f8:
69:b0:c0:d3:7b:ed:50:dc:85:6e:f9:48:20:23:f1:44:e4:c9:
fc:fa:92:f8:ee:52:e1:fa:bf:d6:92:97:a2:73:07:27:56:10:
e6:ef:ab:5e:8c:f2:c0:86:b3:71:f2:f9:66:34:9a:21:a8:14:
d5:38:9c:b5:c1:7c:7e:83:0c:cc:ba:4e:43:8a:02:69:2d:8d:
e4:95:cb:d1:65:6f:9f:75:ee:0d:36:8c:06:f9:c2:ed:66:8c:
de:77:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org