Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZMbmvUoRgYiB2BXfgZTvGF9m0do.roa
File: ZMbmvUoRgYiB2BXfgZTvGF9m0do.roa (raw, json)
Hash identifier: 3HRMuu5Qb4QTdqJy2kR8meUdOpECeASVRrWbJTvBxNg=
Subject key identifier: 64:C6:E6:BD:4A:11:81:88:81:D8:15:DF:81:94:EF:18:5F:66:D1:DA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01831D035F2917BC039C41829AF7C04FB09F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZMbmvUoRgYiB2BXfgZTvGF9m0do.roa
Signing time: Thu 08 Sep 2022 12:11:43 +0000
ROA not before: Thu 08 Sep 2022 12:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 272686
IP address blocks: 194.87.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:03:5f:29:17:bc:03:9c:41:82:9a:f7:c0:4f:b0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 12:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64c6e6bd4a11818881d815df8194ef185f66d1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:ff:23:57:95:17:c7:bb:29:ec:f1:c6:4e:
20:81:b2:e4:b0:a0:67:f0:bf:37:e6:d1:27:69:94:
3a:eb:25:b8:98:99:f4:dc:6c:4e:a3:19:84:1c:b7:
1e:1e:c5:a7:75:d7:1d:a6:1a:ab:20:b1:d8:f1:a7:
7a:4f:83:28:34:4d:37:f9:10:83:98:8a:88:b9:47:
b4:fd:0c:48:2c:88:ca:85:8c:e1:bd:a8:6b:0a:50:
c3:72:0d:27:c0:a8:03:dc:c5:8a:32:a7:c6:d1:a9:
17:ca:af:ab:d8:51:98:f9:ad:df:82:50:21:50:91:
c2:75:2a:77:8b:c4:cc:a7:37:b8:e2:67:40:8e:ee:
4c:9e:04:f6:20:09:83:9a:81:94:40:c8:2d:56:7d:
5d:ae:03:da:c8:4b:06:c0:17:5f:b5:af:15:4a:f7:
8f:e1:21:ad:c8:25:d6:65:c1:85:c5:11:ff:40:e6:
e6:97:14:97:20:58:c4:12:23:43:8e:28:21:5d:f9:
c4:ab:ed:3f:8b:20:83:b2:85:f4:d7:20:3a:92:38:
61:bf:da:51:2c:f0:9e:ce:c7:f2:de:0c:67:d6:89:
d9:ad:78:b8:c9:9a:e5:a4:5c:53:8d:66:82:a3:6a:
33:01:f9:45:27:f3:a7:02:07:24:0d:57:ca:37:7d:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:E6:BD:4A:11:81:88:81:D8:15:DF:81:94:EF:18:5F:66:D1:DA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZMbmvUoRgYiB2BXfgZTvGF9m0do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.165.0/24
Signature Algorithm: sha256WithRSAEncryption
30:de:0c:8a:2b:b4:13:cc:03:dc:e4:e8:27:15:6e:4e:09:6f:
7e:e8:a5:d2:b6:8f:c4:ce:9a:e1:16:be:22:a9:be:b6:af:a3:
3e:ae:80:ff:60:2e:fb:5c:86:f4:8b:e4:6f:6c:4f:ca:5a:bf:
53:af:82:93:02:a4:de:f3:e8:4e:66:5b:40:e8:5b:7d:61:80:
fd:a7:8f:85:15:40:da:82:26:4f:33:d5:9b:5b:3c:cc:8e:9d:
5b:0a:ed:54:57:de:1c:01:1a:0c:ec:ef:c2:90:8c:e0:38:be:
52:4e:ed:c5:1c:b1:d6:98:11:8a:fc:d9:f5:e3:7a:60:93:6e:
c0:70:a8:71:53:a9:43:a6:be:be:12:8f:14:b0:ce:d8:d5:17:
7a:77:c9:6c:60:43:8b:38:c4:3c:90:18:73:22:bb:64:71:3e:
1c:55:9b:15:a3:2d:15:06:92:7f:6f:96:5d:de:6f:cb:52:95:
53:da:9f:cd:59:00:e4:9d:9c:a2:90:9d:30:49:bd:f1:49:5f:
ed:d5:b3:e6:5d:ba:3b:b9:ef:eb:e5:17:21:cd:d8:aa:e1:49:
98:62:1c:67:84:e3:ba:6f:48:c9:2d:99:d1:d6:9b:42:e1:ac:
2b:34:45:65:8e:c2:35:63:7a:72:e2:ee:ca:72:bc:9d:96:b4:
c5:bf:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org