Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pf51pFnaZEKfPTATDnfcL7XUx4U.roa
File: Pf51pFnaZEKfPTATDnfcL7XUx4U.roa (raw, json)
Hash identifier: COr8KqU0dilq/pV5S7p3jlQb2NHks7lCKsayozhrrJo=
Subject key identifier: 3D:FE:75:A4:59:DA:64:42:9F:3D:30:13:0E:77:DC:2F:B5:D4:C7:85
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184DE22BC8C52F53D8BBB47D4BDF1EF1543
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pf51pFnaZEKfPTATDnfcL7XUx4U.roa
Signing time: Sun 04 Dec 2022 17:15:29 +0000
ROA not before: Sun 04 Dec 2022 17:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 194.87.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:de:22:bc:8c:52:f5:3d:8b:bb:47:d4:bd:f1:ef:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 4 17:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dfe75a459da64429f3d30130e77dc2fb5d4c785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:57:28:05:d1:07:88:92:be:bd:9f:c7:5b:
cb:45:f2:68:4b:dc:4e:ce:aa:47:17:c9:23:bf:81:
75:01:99:f0:aa:70:1d:74:10:cf:41:df:c6:cd:54:
4b:32:97:a6:76:8f:68:11:52:d6:b8:98:74:ea:3a:
f5:68:c2:d1:37:b3:bb:c7:34:11:76:3a:23:19:14:
d8:cf:fa:3c:62:12:0f:96:4b:16:de:ea:56:ca:90:
b1:58:a0:cb:04:5f:b4:bc:3d:d6:59:6e:2b:2f:ea:
19:90:c3:e5:6b:59:14:49:f6:3b:80:85:dd:9e:ff:
0d:af:0d:a5:c0:f7:2f:63:59:04:26:25:61:92:6b:
56:9b:36:4b:a8:d7:b8:16:37:c7:ff:65:3a:33:77:
4f:3c:23:ff:79:c8:64:e6:ee:d5:19:b2:ee:1b:b7:
5a:d9:f6:19:97:bc:10:23:9e:7e:a0:16:3b:15:b3:
67:0f:d8:d5:b1:9f:db:79:ba:73:91:59:61:87:02:
cf:0b:60:2d:8c:af:37:e5:0f:e8:c1:a1:71:1a:e8:
9e:46:3e:fe:16:20:30:dc:92:a3:d9:5d:a5:1d:55:
ae:37:fc:cf:ff:c1:74:e2:65:b8:8d:df:35:43:f7:
06:0a:1b:ec:5e:6c:8c:30:b3:ee:19:7a:b3:41:a6:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:75:A4:59:DA:64:42:9F:3D:30:13:0E:77:DC:2F:B5:D4:C7:85
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pf51pFnaZEKfPTATDnfcL7XUx4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:60:c6:02:6b:d5:61:aa:ec:dc:ca:e8:e3:5a:91:cb:6f:a7:
1f:09:82:36:5b:7e:80:06:67:f0:4a:07:f5:4a:64:23:30:9f:
4a:e7:07:d1:60:a1:6b:a5:15:09:2a:95:51:42:e7:b5:36:74:
86:db:e0:e0:63:94:e9:a8:86:cf:be:37:8d:e4:af:8f:60:4d:
6b:70:db:32:1d:a1:7a:44:3a:d0:10:c8:c7:13:88:95:a3:91:
5b:e4:de:1d:b5:63:2e:45:0f:14:7a:a2:76:a1:bf:ba:59:e3:
71:4f:46:3a:44:90:4c:2b:16:bd:fb:1b:79:53:e7:af:80:d3:
e0:d6:c1:33:0e:31:8b:54:01:4d:11:04:44:e1:d8:cb:15:8c:
22:0b:bd:e2:e0:90:41:52:d6:07:e1:0b:ad:76:00:26:a0:42:
cf:a8:81:73:ff:57:71:60:97:88:b8:9b:64:a9:64:74:6c:05:
09:3c:1b:57:b6:d5:b4:08:be:f6:2d:57:9c:58:d0:94:cb:03:
70:48:41:2d:71:66:81:72:79:77:01:4b:48:1a:ae:0d:6c:88:
15:af:24:58:c2:f2:1e:97:31:00:af:19:f4:83:7d:4f:26:9f:
43:c2:d3:b9:4d:ae:5b:bd:2a:2b:17:b4:b6:95:d2:cc:c9:eb:
30:f6:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org