Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/I3-WiFKX7om_jvDwePCint5miGc.roa
File: I3-WiFKX7om_jvDwePCint5miGc.roa (raw, json)
Hash identifier: vhPZoi+GStmCWbABMXTdvO+1Z2RimSp/OiBmh7iGfvc=
Subject key identifier: 23:7F:96:88:52:97:EE:89:BF:8E:F0:F0:78:F0:A2:9E:DE:66:88:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01840FDF2C89A7C1CF0510233CDE2E6F2FBC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/I3-WiFKX7om_jvDwePCint5miGc.roa
Signing time: Tue 25 Oct 2022 15:59:54 +0000
ROA not before: Tue 25 Oct 2022 15:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 194.87.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:df:2c:89:a7:c1:cf:05:10:23:3c:de:2e:6f:2f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 25 15:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=237f96885297ee89bf8ef0f078f0a29ede668867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:6f:91:18:1c:a6:88:17:99:4a:41:7a:80:
ac:71:77:0d:7b:ec:c8:d3:b6:01:ee:12:59:34:86:
9a:54:0e:16:a0:cc:30:2f:a8:ff:01:f5:f5:52:7f:
08:28:31:b8:51:ba:bf:8f:db:d8:1f:cd:78:8e:70:
a2:35:ed:ed:21:ea:36:99:31:5d:d4:4f:a8:b2:ce:
75:63:7e:41:e0:b1:aa:37:1d:e8:cf:78:18:00:cc:
cc:c3:4f:f2:b6:b2:0f:01:64:8a:fc:53:f1:69:02:
5a:dd:85:c2:42:83:1f:4f:a8:6c:95:bf:d1:e0:24:
34:42:fd:74:fa:5c:2c:91:9f:84:b8:ff:2c:a7:f9:
3d:04:cd:1e:f0:59:ea:2e:f4:50:68:36:85:e1:99:
59:fe:6f:cb:31:e8:54:54:d8:6e:94:a9:98:a6:a4:
e6:fb:64:b6:c0:59:e6:df:27:eb:a4:02:e9:7c:60:
60:71:15:55:0e:e3:64:c1:a7:ca:65:e2:26:d8:94:
5e:71:66:a4:7f:16:4d:bf:06:1c:3c:9e:02:14:4b:
cb:30:e0:3f:73:08:09:10:b1:c1:1b:af:8a:45:1f:
bf:9f:ef:f6:b0:88:29:7e:65:cf:69:18:23:3c:2b:
af:e1:eb:0b:eb:4e:70:75:eb:b4:7c:af:19:b4:90:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:96:88:52:97:EE:89:BF:8E:F0:F0:78:F0:A2:9E:DE:66:88:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/I3-WiFKX7om_jvDwePCint5miGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:79:a1:a4:f6:b2:6c:a8:0c:54:f1:68:e6:19:56:d2:af:71:
95:91:52:24:ff:33:24:f2:c0:98:36:bf:58:04:70:03:d8:63:
c8:a1:0f:b9:73:91:51:54:43:ef:09:9f:0f:36:02:d2:49:12:
e4:35:eb:45:0b:64:27:53:1f:83:7e:8c:73:a2:e3:ff:6f:9b:
47:52:09:a2:a9:6c:6a:21:c4:1f:1c:bf:76:32:00:ff:45:2d:
c4:7b:df:e3:ed:ab:55:07:43:f6:ac:72:3a:36:2a:03:23:f5:
11:00:b8:11:de:dd:d7:0a:b5:c9:5e:22:d3:e2:f2:c5:aa:7c:
f8:d8:de:2b:b9:72:34:f8:7e:31:e5:f7:8e:38:f4:56:99:71:
e9:3d:84:a5:c6:aa:cb:21:2b:33:9e:36:0e:da:b8:a1:46:44:
b9:fa:ea:54:bb:18:1d:90:b1:a4:d8:e8:64:77:f6:cd:24:a6:
09:aa:3e:06:85:ea:55:85:14:c6:3a:ee:37:69:64:23:99:68:
b7:d9:89:66:c5:a8:81:69:b6:4f:e9:cc:7e:12:c0:3a:53:19:
ee:52:6f:f4:82:78:29:5e:05:30:a7:f6:8d:9a:d6:14:cc:94:
f4:87:61:f2:0a:20:35:8a:c3:5d:87:f9:81:f9:0c:bd:b5:89:
d7:b5:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org