Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/coXFGnZH5m5KtOfpIz5i-zWCs1c.roa
File: coXFGnZH5m5KtOfpIz5i-zWCs1c.roa (raw, json)
Hash identifier: A1LZdqbsEgwwDleQ2MJEzfcrHo2HgG4QSug7HgWdhO8=
Subject key identifier: 72:85:C5:1A:76:47:E6:6E:4A:B4:E7:E9:23:3E:62:FB:35:82:B3:57
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018495ADF3C8937AB649E1BCDC439EAAA841
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/coXFGnZH5m5KtOfpIz5i-zWCs1c.roa
Signing time: Sun 20 Nov 2022 15:35:16 +0000
ROA not before: Sun 20 Nov 2022 15:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201671
IP address blocks: 194.58.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:95:ad:f3:c8:93:7a:b6:49:e1:bc:dc:43:9e:aa:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 20 15:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7285c51a7647e66e4ab4e7e9233e62fb3582b357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:d7:b9:1f:a2:89:2f:90:2a:50:37:62:82:
0d:51:9b:44:1f:70:0e:01:75:f7:f6:97:16:6a:43:
8a:a1:e4:35:05:59:b7:66:27:98:69:ba:a6:b2:00:
2f:32:6d:e0:42:8e:94:2c:76:5d:18:69:1d:95:db:
3d:94:43:bd:0f:17:e8:39:9e:df:de:70:04:2e:7b:
7b:68:5a:63:6c:ca:92:fe:1d:ed:bc:8e:40:41:91:
f7:c1:11:b2:10:f9:c9:3c:0a:23:fa:d5:63:d2:a1:
bd:47:bc:a4:f4:ee:ba:38:56:6b:8a:33:00:a4:94:
3f:77:9d:c9:07:8a:80:0f:76:13:5a:ca:ee:a0:30:
1d:df:05:32:b5:39:73:41:26:ab:e1:cc:40:cb:b8:
69:06:69:00:6b:95:e0:dd:d9:2e:43:e3:d1:85:3c:
94:dc:6f:f8:48:a5:60:d2:0a:11:83:52:58:41:ee:
01:5e:6c:6b:05:0b:c3:00:b2:42:de:46:1e:2d:1c:
59:b0:c1:1d:53:a4:32:df:cb:d2:e7:5a:3c:c1:78:
4c:1c:ee:76:a7:2a:3c:c5:c7:a3:62:ad:f9:3f:25:
76:01:65:44:99:03:4e:32:c0:9b:34:46:f2:1c:20:
ff:28:d4:26:79:85:8f:70:2a:bc:d2:4d:94:b5:9f:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:85:C5:1A:76:47:E6:6E:4A:B4:E7:E9:23:3E:62:FB:35:82:B3:57
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/coXFGnZH5m5KtOfpIz5i-zWCs1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9b:ea:b9:65:e7:1c:67:a5:04:7a:5a:22:ef:2e:a4:92:bb:
20:57:a1:9e:06:fb:40:74:9e:9c:df:dc:38:d0:48:d4:d9:24:
33:db:68:d9:33:0e:82:1d:57:d0:9c:fc:6e:e2:4c:15:06:f5:
95:8a:97:a0:db:f7:74:db:01:63:68:e5:2a:ff:19:d6:2f:9d:
c6:d5:51:5f:a3:b6:49:91:95:73:1b:70:77:60:1e:1b:ac:e7:
99:0e:c0:79:0a:74:9c:b2:d4:66:f4:99:01:69:95:fb:e3:43:
2d:af:5b:02:88:ba:e4:c3:e3:e6:83:e5:63:a1:ef:0a:89:dd:
88:f0:aa:2f:33:b9:d6:8a:04:6e:8e:d1:4f:59:7a:95:e3:d4:
c2:1f:91:04:dc:69:a0:d4:9d:fb:4f:bb:5e:02:95:44:7e:f0:
4e:49:e7:39:42:b1:44:ce:d1:ba:af:5d:0b:2e:87:39:50:62:
7b:9f:ae:a6:69:5e:06:55:e7:1b:c7:d0:e1:a4:a5:bd:56:65:
76:2a:52:01:ef:70:14:68:d4:00:f3:b4:43:ec:4a:cf:b0:e9:
bf:da:8c:0b:21:20:8a:93:30:57:ae:cc:6b:e3:3a:85:e8:6a:
68:f6:7f:c0:9a:7e:41:3a:92:d5:62:41:21:78:d8:6a:24:3f:
c7:42:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org