Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LouFpxhdLq2kf-HNfKjFCYGpu7o.roa
File: LouFpxhdLq2kf-HNfKjFCYGpu7o.roa (raw, json)
Hash identifier: wdu1IQFKm+S6gJ1SX5nUzArBOknCpp0gMcw+EXO4SSk=
Subject key identifier: 2E:8B:85:A7:18:5D:2E:AD:A4:7F:E1:CD:7C:A8:C5:09:81:A9:BB:BA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E92E242
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LouFpxhdLq2kf-HNfKjFCYGpu7o.roa
Signing time: Tue 01 Feb 2022 14:15:58 +0000
ROA not before: Tue 01 Feb 2022 14:15:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244507202 (0xe92e242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 1 14:15:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e8b85a7185d2eada47fe1cd7ca8c50981a9bbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:50:67:f6:f8:83:a8:1b:05:a5:6c:44:e4:
6c:7b:fa:c3:ad:c8:e4:87:ec:3b:a7:30:cd:84:8d:
9a:ee:1e:6a:96:04:c6:ac:54:16:0e:f6:ab:e1:b8:
6e:d7:87:b5:59:3a:de:8e:65:aa:f4:f0:68:85:6d:
5f:06:45:62:f7:49:5e:3d:b8:50:ee:96:52:40:84:
96:30:d5:49:b6:20:6c:8f:fc:90:5c:66:85:e1:3c:
27:ed:03:f6:5b:12:95:af:f4:be:5b:82:a6:59:9b:
38:45:26:51:be:c4:c5:d3:17:09:aa:05:2c:ff:c1:
6d:c7:07:6c:a0:80:64:38:aa:2a:f8:c8:05:14:d3:
eb:ac:ce:0f:a8:84:de:de:35:37:3d:1d:37:17:cb:
c6:f2:9e:17:cd:0b:27:96:6d:bc:b6:e0:66:fa:da:
c1:f1:70:0b:29:26:73:a5:58:38:22:b2:88:ba:8f:
53:61:e3:88:77:db:b9:a7:7a:d6:42:99:b3:6c:17:
9e:a5:bd:01:29:72:40:f8:df:9a:8d:5a:31:e1:73:
7c:d4:56:6f:95:eb:cc:31:82:b9:36:d3:ba:f0:02:
51:fc:fd:16:bc:6c:64:5f:5f:47:22:5d:9b:bc:9d:
aa:c3:18:85:ce:a4:29:8a:c5:24:2b:ed:03:df:11:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:85:A7:18:5D:2E:AD:A4:7F:E1:CD:7C:A8:C5:09:81:A9:BB:BA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LouFpxhdLq2kf-HNfKjFCYGpu7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.52.0/24
194.87.54.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d4:f8:43:9d:d3:99:50:36:ac:2d:4c:69:73:a4:56:13:05:
03:d1:9f:29:a9:60:72:62:d8:41:69:6e:13:bb:1e:d9:bc:98:
eb:f8:3d:43:e1:8e:7f:9a:56:77:1c:b3:9d:37:6a:10:34:87:
07:69:fa:66:da:4f:e3:2c:26:1b:8d:66:92:9c:68:8b:c8:3a:
82:79:d0:ea:0b:49:d7:0d:c6:77:63:a8:3d:e9:ad:76:09:e8:
e7:e8:ac:3d:68:52:e6:4e:c5:5e:fb:67:27:60:37:30:3e:d0:
67:09:ef:2c:ff:f8:77:40:aa:7b:e7:c2:c9:4c:44:69:e0:07:
00:56:8c:8e:9b:7a:9a:a3:ad:3f:65:f8:d7:05:37:d0:cb:62:
40:57:80:4e:82:f4:60:fa:ac:3c:d2:4c:90:ab:13:db:6c:64:
fb:f0:6f:ed:3f:46:b7:68:08:9d:0c:e6:97:fb:80:b7:a1:00:
fa:92:10:75:5e:79:2b:ee:7e:6f:30:07:ed:9f:f6:ec:c8:6f:
63:74:2d:4e:cd:c6:43:50:be:bc:59:9e:9e:3b:8c:d6:41:9a:
76:93:50:d5:51:75:c9:cf:df:bd:7e:34:b7:5c:ef:80:04:09:
41:63:07:f7:ff:72:48:14:2e:dc:a2:40:82:e4:58:4e:08:45:
24:46:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org