Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KP14oWGWmd39vWMVVgD7MPN_ieo.roa
File: KP14oWGWmd39vWMVVgD7MPN_ieo.roa (raw, json)
Hash identifier: yCy0NqUgQh35xG5nJA9jgV48F07IVojLTG/BK/mPSj4=
Subject key identifier: 28:FD:78:A1:61:96:99:DD:FD:BD:63:15:56:00:FB:30:F3:7F:89:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01827A08A651709A03F70807E9FA3C906984
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KP14oWGWmd39vWMVVgD7MPN_ieo.roa
Signing time: Sun 07 Aug 2022 20:39:23 +0000
ROA not before: Sun 07 Aug 2022 20:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203442
IP address blocks: 194.87.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7a:08:a6:51:70:9a:03:f7:08:07:e9:fa:3c:90:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 20:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28fd78a1619699ddfdbd63155600fb30f37f89ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:cf:af:d2:ea:1d:70:a9:5f:99:e4:c3:b5:
9a:c6:c6:f3:f0:42:3e:ae:cc:e8:7e:d9:0c:46:c1:
94:96:c8:b9:33:3c:43:a3:be:7e:6b:ea:98:b2:b6:
56:1b:1e:a8:6e:83:20:1d:d2:72:48:fe:8a:93:8f:
f9:59:08:25:5d:7e:8c:6c:30:78:8a:83:eb:8d:f8:
b3:e7:8a:a0:2d:a9:86:3e:03:c4:a4:b9:20:04:77:
86:44:09:6f:2f:67:b5:72:c1:ed:48:e6:bc:ea:fc:
b7:65:f0:84:7a:8b:7d:fd:4d:13:5b:61:a9:76:89:
16:f5:0c:47:b5:c0:5a:90:70:08:cd:0b:8a:68:7a:
2c:ff:d9:ac:1b:ad:36:9b:8e:d3:54:26:92:64:62:
9b:57:4b:00:52:d1:0e:8b:46:0a:de:03:eb:80:57:
5c:69:68:76:28:57:9a:a4:ae:90:18:25:31:4b:08:
e2:ad:81:64:06:43:19:d1:6a:21:b5:43:da:8c:22:
f8:2f:e5:61:7e:d9:96:a8:9a:e3:1f:93:b4:64:77:
6a:19:bc:09:31:45:61:f5:b9:4d:e2:10:8d:dc:1e:
40:e7:a0:8e:11:4a:d5:5c:20:8f:6b:c3:a3:03:8f:
e0:10:ce:ab:48:36:66:3e:dd:bf:9e:3f:df:8b:84:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:78:A1:61:96:99:DD:FD:BD:63:15:56:00:FB:30:F3:7F:89:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KP14oWGWmd39vWMVVgD7MPN_ieo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.64.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f9:8a:30:6a:79:3f:a4:96:1f:27:bf:9e:7d:f7:8e:ea:6f:
4d:b9:ed:04:e2:20:ac:2c:c8:54:33:41:27:a6:2c:ca:8a:52:
cf:14:94:9f:6b:63:0e:db:22:5e:dc:46:73:86:b4:24:e5:aa:
2e:ff:6e:e6:26:70:08:8e:e0:65:66:b6:ad:1d:9a:fa:4e:da:
3b:c7:79:9e:df:98:15:5b:6b:80:05:f9:c2:5f:d0:24:6b:89:
dc:21:56:e8:0e:1e:87:64:fc:96:f9:0e:5e:06:6a:97:f7:5f:
fa:3f:d0:24:ef:68:8d:be:bd:5a:b8:12:5e:4d:d1:71:77:3a:
83:36:25:a9:c7:95:a3:e5:f2:a7:42:4e:66:54:56:33:f3:23:
fb:4b:ec:c9:8b:e0:fd:fb:a9:6d:f0:d0:d8:6a:44:a2:9a:84:
fa:2f:bf:5c:85:14:14:b0:89:69:cc:f4:7d:c3:e6:54:34:65:
42:0f:18:95:65:1d:3a:54:b5:a3:55:1e:c3:8f:e2:b2:c2:27:
24:62:9a:a5:f7:a9:b8:eb:04:71:05:f3:47:fa:ce:bb:65:85:
aa:98:80:a8:e2:f9:d1:22:d6:8b:64:f7:4e:f5:a3:ca:32:6b:
16:e6:28:1c:3a:ba:47:46:75:ee:e1:58:f2:ed:63:96:4b:1d:
b4:bc:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:13 2024 by rpki-client on console-fra.rpki-client.org