Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ET_L4udxWoAsKBVcsa0o3v0fbAM.roa
File: ET_L4udxWoAsKBVcsa0o3v0fbAM.roa (raw, json)
Hash identifier: pZeeLqW2L/AqOYCDSQa7SwQOoXPXE8bwai2Snu5LdHw=
Subject key identifier: 11:3F:CB:E2:E7:71:5A:80:2C:28:15:5C:B1:AD:28:DE:FD:1F:6C:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E611E0A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ET_L4udxWoAsKBVcsa0o3v0fbAM.roa
Signing time: Tue 18 Jan 2022 23:10:27 +0000
ROA not before: Tue 18 Jan 2022 23:10:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46844
IP address blocks: 194.87.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241245706 (0xe611e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 18 23:10:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=113fcbe2e7715a802c28155cb1ad28defd1f6c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:2d:f7:c7:72:b4:8a:a1:13:1b:5c:f3:63:
eb:c0:cf:3e:45:7c:7d:4c:ea:a5:65:2d:1f:27:2d:
be:07:4c:ab:fb:ae:02:b5:9d:67:ff:ba:04:d7:1b:
93:60:15:4e:e8:58:89:be:39:15:d7:60:f2:a7:1b:
84:3c:ba:fe:3c:2a:37:62:5e:cd:2f:bf:3f:14:e1:
07:f4:f8:b7:b8:d9:d2:78:37:72:48:e9:24:2c:18:
bf:3d:f7:02:b0:47:7d:4c:53:13:e4:de:28:94:86:
3b:69:24:4d:f6:d0:d9:b4:1d:e0:1c:bb:1f:5d:71:
ba:7a:b4:0d:1a:ff:9b:62:65:6b:60:3f:55:dd:ed:
ce:43:a8:8d:70:90:71:6d:5c:dd:4a:9b:74:01:e1:
5c:58:45:12:46:ca:a4:16:cf:28:af:04:84:32:6b:
e5:32:9d:bf:e2:ac:50:5e:e1:c7:18:64:51:2e:a4:
d5:31:0d:84:8a:2b:bd:f9:5b:ce:69:13:44:61:c3:
6b:53:ab:b0:57:fa:36:ca:78:d3:40:60:d4:47:45:
55:3b:fd:80:29:80:97:76:82:7e:51:3f:d7:16:2d:
76:4a:7f:b3:90:a6:fb:ef:63:0e:6f:33:32:4e:2b:
bc:1e:e2:3e:9c:4c:fc:8f:0d:5b:16:be:b5:8a:ef:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3F:CB:E2:E7:71:5A:80:2C:28:15:5C:B1:AD:28:DE:FD:1F:6C:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ET_L4udxWoAsKBVcsa0o3v0fbAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:07:0e:3c:d1:a8:65:b7:43:1d:ed:a8:7d:f7:90:30:70:90:
4a:53:61:33:4a:4d:aa:de:01:60:79:2e:b8:34:39:9c:76:9f:
3b:42:c6:27:83:33:b1:d8:47:74:ca:23:d1:f2:a1:2f:82:2b:
67:ac:7e:93:6e:d2:72:f6:59:bd:7f:4b:cc:92:8e:15:97:b6:
c2:41:44:84:43:2d:d3:64:b0:31:79:f4:f4:60:54:c5:b6:a7:
2b:68:a5:77:7e:85:ad:7f:d6:ef:ee:75:64:d7:14:78:74:96:
d8:6f:d3:b4:f7:23:1d:dd:e3:b9:10:4e:45:0a:7d:68:c8:f5:
4b:ae:f5:12:eb:57:31:e3:62:f4:46:ae:4c:cb:55:78:f1:aa:
80:61:72:0d:2e:70:67:b0:48:55:90:da:ec:c2:e9:c5:dc:44:
a1:f0:f6:d3:a0:19:c0:f8:3b:16:b8:c0:54:c2:12:9e:ec:9c:
23:c0:1f:42:a9:a5:3e:23:c9:72:29:42:e9:ed:0e:f7:67:4c:
5a:09:58:05:c9:37:ea:b2:29:7f:87:d6:ad:f0:82:03:5d:bc:
5c:c7:cd:bc:05:3a:69:0f:80:e8:4f:40:16:fb:86:ad:f9:91:
86:04:6e:c6:c6:02:dc:c4:8a:51:a8:79:50:f1:4c:11:42:d9:
51:d5:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:59 2023 by rpki-client on console-fra.rpki-client.org