Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J0BHFk1hQSFq8dVDLT3faYHfYJI.roa
File: J0BHFk1hQSFq8dVDLT3faYHfYJI.roa (raw, json)
Hash identifier: g2rPI06JK5LoPhi/2I5XqLjQ5YxciTkOGODyLY8wf+I=
Subject key identifier: 27:40:47:16:4D:61:41:21:6A:F1:D5:43:2D:3D:DF:69:81:DF:60:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184F0E2A70E1A3141B75BB5C1DB649EA5BE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J0BHFk1hQSFq8dVDLT3faYHfYJI.roa
Signing time: Thu 08 Dec 2022 08:38:16 +0000
ROA not before: Thu 08 Dec 2022 08:38:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203172
IP address blocks: 194.87.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:e2:a7:0e:1a:31:41:b7:5b:b5:c1:db:64:9e:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 8 08:38:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=274047164d6141216af1d5432d3ddf6981df6092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:25:17:e9:5d:76:9d:6d:7d:5d:9d:0e:fc:
ed:5f:84:83:66:49:8f:bd:cf:65:39:a5:0c:1f:83:
32:89:64:56:98:98:2a:99:2e:91:05:f0:3f:ea:20:
d2:81:2b:26:90:de:25:1e:76:64:01:cf:e9:7b:8e:
02:95:84:ca:55:3b:a4:93:4b:0b:59:51:78:fa:4f:
8a:c4:dd:83:06:a4:64:60:8f:09:2c:f1:f7:46:94:
e6:c8:84:35:1a:8f:f0:78:ea:ab:0e:75:dd:2a:78:
a7:ee:1a:34:d9:dd:87:0a:67:11:81:1c:26:c4:73:
68:2c:e7:79:f7:3b:f0:62:08:7d:56:33:0c:d0:58:
b0:c2:f8:c8:12:41:a8:9a:da:a1:6a:7f:5a:26:25:
d3:e7:86:8b:98:06:c3:f1:51:60:9a:c4:8a:1a:f4:
be:57:64:bc:be:86:10:33:42:a6:3d:02:44:80:af:
8e:f0:31:92:93:07:53:4f:15:48:41:13:24:a5:95:
a5:e8:af:85:7f:aa:20:b6:0a:5b:a8:ce:89:ae:68:
ae:d6:cf:31:4c:8f:6f:de:bf:2a:43:5a:da:3e:dc:
8e:12:ae:ef:4a:6c:e6:31:6e:74:e0:1d:e1:5e:27:
7f:4c:69:0c:3e:8a:86:17:06:e6:cf:ee:c6:c6:2a:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:40:47:16:4D:61:41:21:6A:F1:D5:43:2D:3D:DF:69:81:DF:60:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J0BHFk1hQSFq8dVDLT3faYHfYJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b4:7a:86:1a:51:0e:41:83:f9:d7:0a:3b:3e:db:b6:f0:d6:
fc:06:28:8c:93:0a:1f:9c:49:e5:a2:fd:c4:6a:52:90:f4:a5:
62:23:a4:8a:10:0f:5c:bb:95:aa:45:8b:26:bc:0f:47:f1:72:
23:7e:3c:aa:1c:80:c1:96:73:12:4b:7b:17:f7:31:7a:72:bf:
75:e9:fd:95:7e:cc:12:dc:ce:c1:43:2a:27:d3:9a:43:a7:63:
ab:ec:26:3f:29:c3:18:5d:69:e3:00:10:09:97:01:e9:4f:59:
64:fd:5c:97:c9:3a:d6:df:86:8c:e8:b5:7b:b0:b3:5d:8e:33:
1a:8c:08:99:ad:46:ef:a9:64:c5:c0:83:9c:82:28:45:4f:5d:
43:33:58:4b:ec:f0:55:11:45:12:db:16:c8:6e:31:b2:8c:a0:
df:6e:4e:b8:6d:3d:0e:9f:09:9d:9b:20:98:64:1d:82:12:ec:
b7:80:62:24:29:5e:ae:d1:f2:38:81:e8:e9:27:2f:7b:75:5e:
23:d7:03:38:ea:a9:00:f0:c4:9e:4d:38:d3:46:dd:ae:9e:c5:
f2:28:04:1b:2b:c3:2a:a7:0c:15:ce:9c:91:ad:8f:e0:82:cc:
cd:fe:31:13:d9:42:18:88:db:ae:d8:c1:99:79:72:ff:2f:d2:
bd:c9:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org