Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eDOhtTk51kFbdgWf1kTn6hLjJMg.roa
File: eDOhtTk51kFbdgWf1kTn6hLjJMg.roa (raw, json)
Hash identifier: OAhCVsfrm0GhhFKw8OJdsGqVS7kovxLfr1jwU4PJ2Mc=
Subject key identifier: 78:33:A1:B5:39:39:D6:41:5B:76:05:9F:D6:44:E7:EA:12:E3:24:C8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182911581287579AD8636B526D0D8B0BA8D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eDOhtTk51kFbdgWf1kTn6hLjJMg.roa
Signing time: Fri 12 Aug 2022 08:04:41 +0000
ROA not before: Fri 12 Aug 2022 08:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 194.87.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:15:81:28:75:79:ad:86:36:b5:26:d0:d8:b0:ba:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 12 08:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7833a1b53939d6415b76059fd644e7ea12e324c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:dc:0f:f4:49:e6:4b:43:3f:d0:c1:77:23:
d1:b5:72:08:9b:84:18:30:74:d6:15:fa:b7:e8:e5:
92:0d:23:56:22:8f:cc:b8:0f:70:41:8a:cf:82:2a:
36:c1:b7:bd:28:07:34:ac:20:a5:6c:50:89:d0:2d:
28:0d:c4:42:1e:b1:b5:b5:7b:9e:bd:1e:03:77:71:
49:11:fd:e8:2b:04:21:d2:99:91:5f:8d:72:47:b2:
9a:ee:f4:cd:69:14:eb:47:ff:00:0b:4d:76:94:c9:
9c:29:55:56:07:27:85:94:6b:ec:49:e1:94:33:ae:
eb:64:32:4a:11:52:01:ce:1d:bb:fb:7f:b8:e1:89:
68:14:c0:c5:dd:da:98:c8:f3:a9:23:14:29:d1:2d:
8f:40:ce:15:6d:88:91:e9:91:4a:0b:0b:57:aa:bc:
94:ce:90:0b:42:4a:7c:71:94:fe:8a:10:2c:15:15:
f5:4b:82:d9:d4:92:05:6e:20:bc:67:50:11:98:35:
ec:05:f6:8d:1c:0b:06:24:69:f6:ec:45:b3:b9:51:
3a:69:91:50:11:0f:75:85:0c:a3:62:34:4c:46:94:
74:cb:ef:bf:08:c9:09:fc:1e:94:69:1a:33:cf:06:
ee:51:7f:08:09:b1:b4:75:c7:11:61:51:a8:c0:2d:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:A1:B5:39:39:D6:41:5B:76:05:9F:D6:44:E7:EA:12:E3:24:C8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eDOhtTk51kFbdgWf1kTn6hLjJMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.33.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5c:ad:f2:d7:6a:8c:b9:2f:4e:61:29:8b:dc:88:70:b2:f2:
ff:67:4f:81:e1:3b:15:f9:ea:81:90:d3:8d:08:db:b3:fb:61:
27:24:c5:f0:33:dd:84:6d:c9:13:4e:62:cb:bd:8d:b1:fd:d7:
fd:03:22:3e:f6:6a:58:ff:c0:b4:e6:8d:1b:97:b6:ea:48:f8:
9b:09:be:6a:fb:17:12:af:9e:6a:72:63:66:14:a5:b7:fb:15:
d9:54:4b:51:c4:e1:1d:10:85:ee:2a:b8:24:95:4e:33:e7:b2:
d8:8d:eb:ae:f4:15:0f:37:6f:cc:d7:e8:7d:12:89:77:29:87:
c7:72:cd:9e:b6:f8:fb:b8:3e:84:e9:36:36:db:2b:4a:da:57:
df:7e:25:0e:ca:d0:5f:37:5c:9f:7d:c1:95:d3:93:d9:33:68:
3c:ed:c0:88:eb:49:d1:c3:35:bc:52:8e:e9:f5:a3:f4:75:fe:
6c:e3:95:50:81:66:ed:84:1f:78:cb:a2:e9:5b:ba:53:83:05:
72:38:d5:94:63:40:69:be:f5:30:e8:f4:f3:56:c1:18:b9:ac:
df:74:4f:83:cd:7f:85:1d:ae:d6:4a:84:01:7f:db:26:c8:9c:
f8:83:f5:23:dc:d4:a5:7f:f3:62:96:1f:54:80:41:cf:49:6b:
9a:be:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org