Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IM4fxrE7ub0viu1Tx9TMkioP41k.roa
File: IM4fxrE7ub0viu1Tx9TMkioP41k.roa (raw, json)
Hash identifier: D+mnjemkGlTDZa0WAfGyLtVmmAvBZLBdHUfxWX9a2Js=
Subject key identifier: 20:CE:1F:C6:B1:3B:B9:BD:2F:8A:ED:53:C7:D4:CC:92:2A:0F:E3:59
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E10113B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IM4fxrE7ub0viu1Tx9TMkioP41k.roa
Signing time: Sat 01 Jan 2022 01:58:11 +0000
ROA not before: Sat 01 Jan 2022 01:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10010
IP address blocks: 194.87.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235934011 (0xe10113b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20ce1fc6b13bb9bd2f8aed53c7d4cc922a0fe359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:0c:ad:00:d1:e9:f3:d5:46:6c:3e:90:56:
f7:ec:34:ce:65:54:89:13:58:8a:72:d5:f9:80:1e:
9b:ee:7d:b0:1a:70:15:fa:9d:40:e9:66:48:06:5e:
f0:c0:70:58:83:d1:7a:2e:2d:f2:54:e7:fa:07:24:
19:62:2b:1f:2c:84:1a:69:2a:ae:68:78:a0:49:bc:
c6:df:66:a3:d8:28:0d:09:f7:1d:63:f2:89:c7:20:
93:93:b6:d1:3f:75:50:89:14:51:d5:b0:ca:88:76:
8c:6c:e6:35:5c:a0:50:c1:90:66:b9:73:41:f2:cc:
18:bb:c1:48:7a:82:02:36:3d:6a:59:b9:5b:bc:21:
af:c2:f6:ea:64:77:49:55:04:b2:43:8d:9c:31:ff:
ee:cd:6b:55:8c:59:5f:9a:4e:de:b5:61:46:d7:a3:
1d:ff:f2:b8:3d:93:0b:a4:27:60:71:13:32:f8:51:
f9:97:6a:4d:6e:bf:c0:81:26:04:a4:d6:f9:a8:fb:
b4:81:27:c9:c8:5f:c6:14:ea:17:80:49:e5:ce:9a:
f7:1a:96:41:4e:7e:37:65:13:f4:05:40:66:f6:11:
0a:43:ac:78:e9:f6:7c:a1:a4:19:31:81:ef:56:9d:
17:a6:cd:94:e3:57:cf:38:d2:2f:38:d0:4b:a7:24:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:1F:C6:B1:3B:B9:BD:2F:8A:ED:53:C7:D4:CC:92:2A:0F:E3:59
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IM4fxrE7ub0viu1Tx9TMkioP41k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.225.0/24
Signature Algorithm: sha256WithRSAEncryption
69:78:d2:d1:65:ba:b6:f9:46:55:22:2c:79:a1:b3:bc:87:ed:
53:5a:6b:67:e3:ea:7f:ce:c6:c3:c9:6a:75:5a:96:b0:a9:9d:
51:fe:fb:b2:ed:28:44:06:71:c6:c9:f0:df:62:b1:94:99:43:
01:84:b1:38:f6:ce:af:06:f6:29:8c:13:18:06:4a:f3:94:c3:
49:af:0b:88:b2:3a:9b:85:7a:b0:b1:26:90:7f:9f:52:81:6f:
cf:de:47:4c:53:be:76:a8:3d:ec:bd:df:20:ad:d5:96:c5:d6:
29:0f:23:18:0e:c9:53:8d:07:81:68:21:e7:87:5b:cf:10:69:
2f:46:dd:27:8e:1d:8f:cc:58:ed:5d:9c:37:32:e8:37:cd:33:
17:db:f6:0d:75:46:75:f7:4a:0e:40:48:76:3b:aa:13:cd:bd:
90:de:74:16:88:49:44:86:b5:88:ff:d5:32:73:69:a6:d9:4a:
4a:78:f7:26:d4:f4:23:de:83:ff:cf:87:3e:c6:66:76:61:f5:
6b:2f:fa:13:0b:a3:1e:83:f1:01:a9:cc:18:6e:63:3e:e6:51:
2f:93:3f:18:34:04:75:ff:d1:cf:7c:67:51:34:22:19:a0:dc:
1f:6a:e3:c0:16:a4:60:37:ca:a1:00:76:d3:aa:6c:a6:ca:e8:
d7:8f:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:00 2023 by rpki-client on console-fra.rpki-client.org