Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E_f5c1mAwt1kCgQwtBTrOtiTg-k.roa
File: E_f5c1mAwt1kCgQwtBTrOtiTg-k.roa (raw, json)
Hash identifier: /BPn64daEKg/4K2Pqcrzot0f7LQLl8x7cE/7DmCJhyg=
Subject key identifier: 13:F7:F9:73:59:80:C2:DD:64:0A:04:30:B4:14:EB:3A:D8:93:83:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184E75C64C91286BD26811AFF67241D1A2D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E_f5c1mAwt1kCgQwtBTrOtiTg-k.roa
Signing time: Tue 06 Dec 2022 12:15:02 +0000
ROA not before: Tue 06 Dec 2022 12:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 195.133.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:5c:64:c9:12:86:bd:26:81:1a:ff:67:24:1d:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 6 12:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13f7f9735980c2dd640a0430b414eb3ad89383e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:3c:3b:27:b7:31:ca:98:65:ad:d5:c6:32:
5b:db:64:db:33:2e:d9:c7:03:04:0a:bf:16:d0:4f:
b1:b6:e0:a0:7c:c9:22:a0:b6:52:42:2b:b7:14:33:
aa:74:dd:0a:83:09:61:8d:f2:02:51:f2:c1:12:23:
04:39:d1:16:06:d5:4c:c8:21:00:2d:57:24:04:fb:
11:6a:0b:21:48:32:00:97:0c:1f:9d:8a:78:bf:46:
4d:ef:62:d7:13:bc:48:4f:67:40:6e:06:12:f5:52:
0b:72:ee:e5:fb:3a:1b:55:dd:c9:4b:df:5a:48:2a:
ab:be:b0:81:0f:ca:2b:c5:7e:f2:ed:f7:47:eb:6a:
3d:86:cb:d3:12:95:b5:24:dc:de:63:38:dd:d4:d2:
ef:70:a5:d4:ba:fc:75:02:3a:a9:49:fa:5e:ed:eb:
cd:26:b3:83:32:0c:ae:49:4c:58:00:fa:6c:8f:1e:
c1:03:c5:eb:89:fb:4c:76:45:f9:78:83:55:49:af:
8a:ac:20:73:b0:08:2a:66:70:c3:ce:7f:cc:db:7f:
0d:cb:29:a2:0e:91:c8:9d:45:cd:49:27:d1:f2:0f:
be:2e:0f:fd:ca:2d:a0:15:94:97:81:a9:f2:5a:52:
06:c6:f0:0f:3a:c7:8f:94:24:66:59:eb:5b:86:cc:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F7:F9:73:59:80:C2:DD:64:0A:04:30:B4:14:EB:3A:D8:93:83:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E_f5c1mAwt1kCgQwtBTrOtiTg-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.28.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a4:86:ee:d1:88:30:18:4a:51:ba:35:28:09:29:1f:2f:3b:
c6:b9:3f:60:0b:b3:18:cb:c3:3f:c2:f0:ac:76:a1:20:53:36:
f9:8d:1f:2d:4f:46:8c:ed:e5:5b:86:3b:84:69:46:cb:be:3e:
c6:6c:5f:4c:0e:9b:ec:31:32:5c:03:13:70:34:b3:ae:7d:5d:
05:a0:bc:25:a9:af:88:05:38:53:65:72:d3:e1:66:06:c7:6e:
7f:8c:5a:23:91:db:59:cf:a6:3c:c2:89:13:fb:83:ae:36:aa:
97:23:b9:33:b1:c3:0b:c6:a4:ba:5d:08:29:ad:df:e9:6c:66:
ee:ed:b0:fc:5f:dc:f4:b1:28:d0:47:6b:b7:20:4a:a6:bc:02:
4d:3b:95:7e:bb:93:1b:e1:78:a9:91:8c:d9:f0:ba:3d:a7:67:
f2:c2:10:e3:6e:e2:06:9e:39:b6:c2:fc:b2:34:e9:be:c6:4a:
f6:e2:bb:12:4b:d5:3a:2c:05:b4:2d:80:9c:54:1f:38:65:5d:
ed:65:cd:81:ed:77:88:1a:72:0d:bc:92:3e:95:0e:c6:9b:b8:
db:a2:9a:bd:7b:74:d8:99:01:fe:1e:e2:92:86:12:d8:04:ce:
d8:87:76:aa:52:78:ae:42:21:49:38:f9:90:d1:4d:94:a1:da:
fb:a8:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org