Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N7oQi1eucKazcb3rPSmyrdg7OLE.roa
File: N7oQi1eucKazcb3rPSmyrdg7OLE.roa (raw, json)
Hash identifier: bjFJ+gyhgeYyM3sGD++jUkghs/TC2tiVVMUoMT34LbE=
Subject key identifier: 37:BA:10:8B:57:AE:70:A6:B3:71:BD:EB:3D:29:B2:AD:D8:3B:38:B1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E2154AD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N7oQi1eucKazcb3rPSmyrdg7OLE.roa
Signing time: Sat 01 Jan 2022 01:58:20 +0000
ROA not before: Sat 01 Jan 2022 01:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208685
IP address blocks: 194.87.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237065389 (0xe2154ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ba108b57ae70a6b371bdeb3d29b2add83b38b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:d8:7d:44:c5:d9:89:02:e3:03:59:7b:11:
31:1a:f2:1c:69:d6:8c:e1:76:e2:1f:9c:18:dd:f8:
7a:f7:16:54:d5:2c:5b:b0:b4:35:d7:a6:a7:43:2c:
35:97:d5:ce:ed:f8:94:e0:97:5f:ec:b4:95:b6:0f:
d6:89:d7:8e:f7:f0:6c:bb:d7:01:05:c1:9d:f3:b2:
87:65:7d:49:57:7d:fb:41:94:98:c3:b3:ab:53:20:
f9:f2:be:ad:55:d2:dd:7a:46:a0:9f:23:15:8a:e6:
a8:cd:e7:5a:9b:75:b2:fd:72:4f:2c:82:e4:9c:07:
67:63:ae:3a:13:8b:01:c1:4a:ff:bf:5a:7d:f4:30:
27:a4:11:73:cf:9d:1c:0b:81:77:a0:37:3c:47:28:
08:41:d8:12:a0:7f:9c:0b:86:26:1c:a1:c1:02:7a:
49:6d:89:68:4e:fb:91:52:2c:65:28:36:96:50:6d:
e2:34:31:fd:9e:b9:e7:d4:50:06:b4:21:2e:7b:ec:
8e:94:db:9d:66:fd:c9:17:86:6b:d9:30:c5:82:6f:
f4:9b:41:30:46:6e:35:90:a5:48:e1:0a:5a:6a:22:
23:f2:e9:ac:d8:48:f7:ca:fa:eb:1c:b9:57:a4:11:
ea:45:8a:5a:94:fc:c7:1f:4b:66:d7:d4:ed:8d:28:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:10:8B:57:AE:70:A6:B3:71:BD:EB:3D:29:B2:AD:D8:3B:38:B1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N7oQi1eucKazcb3rPSmyrdg7OLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
30:12:d1:82:ee:bf:0a:cb:1d:00:d6:8c:5f:52:13:21:1d:b7:
cc:81:71:f9:20:47:7e:80:aa:04:ec:26:16:71:ba:41:3a:47:
d6:0c:b8:c9:b3:92:33:2c:60:74:fa:b0:f2:e6:e2:c0:ab:c3:
92:26:c3:da:d0:93:91:34:96:16:e4:b9:53:f9:e1:ca:97:56:
96:3d:01:5e:94:05:3d:6b:ed:af:d3:1f:40:06:ea:4b:bd:d1:
7a:6f:45:28:ab:3b:f1:7b:18:6e:8c:87:ee:cd:2d:06:2c:e9:
de:65:99:7e:96:d3:47:23:a6:bd:a8:be:93:52:ef:7f:a1:e3:
a8:be:a3:db:6d:f7:1a:f4:2b:6f:de:4f:12:df:4a:cb:71:8e:
9a:02:c8:2b:b9:0f:81:8e:02:21:8d:ff:a3:19:bc:a1:21:2c:
bd:65:81:f3:59:9a:e2:d4:1b:16:ea:ff:d7:f9:4c:b3:f3:38:
a5:a0:2d:ec:5b:84:ef:32:a7:3e:a7:74:f0:75:34:29:e6:f7:
71:e6:cd:93:66:96:ea:92:dc:c6:07:1e:fb:d3:f4:83:6b:f9:
f1:80:f6:95:a3:cc:9a:73:df:f1:90:35:3c:6c:16:06:9a:c0:
94:ab:bd:a1:17:2b:d5:fa:2c:ac:23:f5:56:96:00:16:19:11:
d0:50:79:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-ams.rpki-client.org