Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VAmU30MjBufDgI_BANil49wWmLk.roa
File: VAmU30MjBufDgI_BANil49wWmLk.roa (raw, json)
Hash identifier: mojWsJ+l8ZTpnu38FqYi+qTeSXHKShJ6cBagFxikmiQ=
Subject key identifier: 54:09:94:DF:43:23:06:E7:C3:80:8F:C1:00:D8:A5:E3:DC:16:98:B9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01831DD9996EF778002088065639D5F550FF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VAmU30MjBufDgI_BANil49wWmLk.roa
Signing time: Thu 08 Sep 2022 16:05:43 +0000
ROA not before: Thu 08 Sep 2022 16:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 194.87.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:d9:99:6e:f7:78:00:20:88:06:56:39:d5:f5:50:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 16:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=540994df432306e7c3808fc100d8a5e3dc1698b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:04:82:bc:48:31:7e:17:30:5c:41:c0:64:
f4:68:b1:90:4b:24:e8:74:37:66:80:ea:f1:12:6a:
fd:32:73:0a:75:83:20:a0:c5:cc:4c:a1:5e:97:f1:
b2:8c:22:83:03:48:16:61:02:0d:de:a4:0d:6f:c3:
03:46:b5:56:ea:99:32:cd:08:90:73:c4:05:78:9c:
72:0f:95:9d:d8:93:5a:fd:26:f4:ee:cd:74:5e:c1:
62:10:57:88:91:48:a1:15:6a:7d:eb:f2:71:13:9e:
65:af:32:67:22:8e:19:a2:4b:4b:82:98:f8:53:da:
71:a4:8f:5b:c3:2f:55:35:97:b0:60:0e:7c:8d:8f:
a8:2c:14:25:dd:11:e0:f4:88:2d:db:2f:2a:00:77:
11:f0:e6:17:0d:99:8c:18:73:f5:b0:fd:7d:a1:32:
56:2d:4b:a4:b3:0c:cb:6d:9d:65:de:7a:1b:69:eb:
ca:d1:11:45:2d:0b:1a:f0:5e:da:b9:dd:98:f6:6d:
44:c5:20:28:e2:5b:e5:34:c5:01:d2:04:0c:e8:de:
7c:42:74:83:da:7c:6d:b0:4d:24:15:29:39:83:85:
5d:88:b1:e2:bc:d0:17:13:65:a1:8b:7e:c7:ab:cf:
67:26:1e:d4:56:ef:7e:73:cb:35:eb:af:30:66:49:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:09:94:DF:43:23:06:E7:C3:80:8F:C1:00:D8:A5:E3:DC:16:98:B9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VAmU30MjBufDgI_BANil49wWmLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.148.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4f:ca:9a:28:e4:4b:17:ee:ba:ec:66:bb:e0:4a:d5:ee:83:
9e:ea:f6:02:b1:77:8e:5a:13:be:7b:b4:bf:4d:67:ab:0b:e4:
bc:c6:f5:94:d0:2a:a8:4e:d4:64:6e:fc:1f:88:89:29:7f:40:
f7:9c:a1:c7:31:fc:03:b9:ac:c7:c2:65:3f:11:15:ec:6f:e3:
40:90:05:f6:eb:72:03:0e:35:c6:67:84:a1:86:76:f6:14:cd:
d8:6f:1e:f8:ab:c2:d4:f8:d4:a7:f0:f9:91:e3:9f:fd:fc:52:
c0:0b:7e:bd:5d:62:23:95:1a:08:88:2f:c9:84:f5:63:5c:5d:
8d:03:06:0d:cc:54:12:9b:47:7b:ec:10:dd:f3:e8:32:94:6e:
66:fb:31:6a:74:e6:f2:71:80:97:5d:1e:3c:9b:6c:96:4a:3e:
f6:3a:cb:75:d7:19:21:1b:f4:90:9e:9c:e6:1d:36:3e:36:f7:
28:12:7e:5f:cd:87:d7:a1:9c:aa:14:c8:6b:5e:92:6d:03:7c:
87:ec:f3:d6:41:fe:5e:fd:57:2e:50:fd:19:1e:7d:76:3b:ca:
95:48:1f:27:42:bb:eb:0d:a8:7e:db:9e:27:2d:7d:7b:0b:65:
a4:9f:75:72:ef:b4:00:be:8e:1f:07:fb:48:38:cb:87:ce:f9:
34:45:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org