Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IbDD85TRiKliyDxZimQfsFTAB1o.roa
File: IbDD85TRiKliyDxZimQfsFTAB1o.roa (raw, json)
Hash identifier: EQpkbtUcSPtqhB6iEBtKKYsoLXKLV5x0pB+yb+pSbyo=
Subject key identifier: 21:B0:C3:F3:94:D1:88:A9:62:C8:3C:59:8A:64:1F:B0:54:C0:07:5A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183A22DFC0DE09FE46FABA93A077DDCDEFD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IbDD85TRiKliyDxZimQfsFTAB1o.roa
Signing time: Tue 04 Oct 2022 08:47:46 +0000
ROA not before: Tue 04 Oct 2022 08:47:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211138
IP address blocks: 195.58.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:2d:fc:0d:e0:9f:e4:6f:ab:a9:3a:07:7d:dc:de:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 4 08:47:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21b0c3f394d188a962c83c598a641fb054c0075a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:fe:c8:9c:b6:71:0c:8e:06:34:7b:8b:ed:
64:1b:7f:02:96:47:f6:c6:04:8b:98:97:36:dc:69:
cb:8c:1e:bc:59:6d:23:1e:49:45:f5:52:9a:6e:a1:
bf:38:92:9d:04:8d:f3:76:cd:0f:ab:cb:52:aa:b4:
94:9e:24:e4:20:35:92:fe:a9:0c:77:df:86:db:34:
62:d9:a5:8c:2d:99:e9:62:97:d6:80:07:6b:ae:62:
b9:94:a1:ec:61:76:a8:15:8c:6b:91:b1:16:49:5f:
8c:d4:cb:d7:32:f5:df:4b:e3:13:37:70:a5:c1:0d:
8c:fd:7d:53:17:9e:ce:a0:4e:a3:2a:5e:37:1c:90:
01:bb:d5:dc:db:a4:30:9a:75:10:07:07:11:f7:37:
5c:f3:c6:bd:8b:83:92:7a:e0:87:74:2b:60:36:13:
26:07:07:0d:7f:5d:d2:0e:09:77:81:84:cf:65:dd:
aa:8e:8d:5c:27:3f:37:17:6b:7c:43:8b:9b:d7:7c:
4e:8b:1f:5b:3f:3a:aa:8d:c9:34:f5:cd:d0:a3:8c:
46:17:36:b7:fc:4b:24:e4:2d:9a:0a:09:06:5a:95:
23:34:b8:e3:11:33:6e:b9:da:f6:a8:75:5e:00:82:
fa:18:30:de:73:bc:17:ef:2f:9f:2f:dd:fa:46:16:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:C3:F3:94:D1:88:A9:62:C8:3C:59:8A:64:1F:B0:54:C0:07:5A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IbDD85TRiKliyDxZimQfsFTAB1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:24:99:7e:da:f2:6b:e4:1c:39:e1:7c:10:df:61:12:2c:33:
11:c2:9c:3e:22:37:26:bd:cc:33:e5:49:c4:50:79:e8:4e:da:
f1:94:30:88:b9:94:11:d3:6f:20:02:61:a4:04:17:eb:06:a8:
25:72:ae:59:57:7d:f3:49:6d:a5:1e:24:62:48:40:56:8e:05:
cd:8c:4b:a2:3f:86:8b:ae:4f:27:a7:2b:a0:84:77:84:4c:5e:
6b:58:82:49:54:5f:2e:08:f1:ee:0a:2d:51:6f:17:b5:1a:41:
8b:fd:fc:6f:57:4b:36:53:e6:05:4e:93:00:a3:4f:d4:83:d7:
ff:08:6b:f8:01:16:54:c0:e7:01:d5:15:0e:df:d0:2a:ac:dd:
4f:80:e9:3d:ec:f2:ac:4e:a1:54:df:10:0b:38:cf:f1:45:7a:
e3:a8:7b:4a:8a:4d:f8:20:71:ae:8f:7b:e9:d5:4e:1d:4a:11:
8f:d8:cc:97:26:d8:b9:6a:08:f1:6f:89:16:24:b4:e6:93:be:
80:71:cc:90:8c:23:07:ef:3e:4a:85:1a:a3:1e:dc:ba:4e:df:
4d:b7:f8:a8:4a:07:49:aa:4b:18:d9:4a:3b:ab:07:b7:ed:1f:
99:22:4b:d0:12:af:e5:ca:eb:65:41:d7:34:ba:dd:00:c6:f4:
52:6b:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:00 2023 by rpki-client on console-fra.rpki-client.org