Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/guz7x4iAY1EweAMTnYWx7EJGwLM.roa
File: guz7x4iAY1EweAMTnYWx7EJGwLM.roa (raw, json)
Hash identifier: hKn7FfF9Yb5hnwNEM0v3ptvbpryFn3aQwHMhUJn1wcw=
Subject key identifier: 82:EC:FB:C7:88:80:63:51:30:78:03:13:9D:85:B1:EC:42:46:C0:B3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0FDDFA98
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/guz7x4iAY1EweAMTnYWx7EJGwLM.roa
Signing time: Fri 13 May 2022 08:02:02 +0000
ROA not before: Fri 13 May 2022 08:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 194.87.24.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266205848 (0xfddfa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 13 08:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82ecfbc788806351307803139d85b1ec4246c0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:eb:9b:3d:f4:a6:07:76:54:71:67:ba:da:
49:cc:8e:e7:73:a9:33:4b:b9:0e:45:4f:f9:09:e2:
75:0a:25:ef:62:79:5b:ad:4a:02:c2:2e:05:ef:95:
28:e4:31:d5:21:c8:c4:96:13:9f:c6:48:04:bf:5d:
e7:b5:33:85:15:82:4c:86:df:09:05:04:99:d2:52:
63:a8:a1:05:88:32:bd:10:de:37:ac:d2:ad:09:07:
6f:c9:cb:0a:d5:96:68:8c:24:42:c9:d8:94:ed:89:
1a:de:36:a7:f5:2c:f9:06:9f:12:93:4a:9c:46:5e:
df:8d:74:4a:88:e5:44:aa:4f:7d:04:e5:ff:54:5b:
7f:9e:fa:9d:ef:6e:91:4a:e7:e1:1d:b6:d6:83:0e:
71:59:c5:ef:71:da:d6:af:0e:a9:7b:aa:5b:a0:e2:
14:16:37:29:92:63:d8:de:d8:9e:c3:92:d5:6b:6f:
65:d0:1f:04:c3:0e:b5:7d:93:94:94:31:2a:fb:de:
c1:15:81:3e:64:5e:05:f3:0f:7a:a0:ab:65:28:aa:
cd:d3:ff:21:a8:3c:b2:ae:a4:22:b8:7e:92:69:70:
b1:79:51:90:76:27:1d:b2:8f:97:dc:9d:14:84:d2:
3c:f7:7c:69:6c:f9:b2:a3:18:8d:19:7e:46:3b:d9:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EC:FB:C7:88:80:63:51:30:78:03:13:9D:85:B1:EC:42:46:C0:B3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/guz7x4iAY1EweAMTnYWx7EJGwLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.24.0/22
Signature Algorithm: sha256WithRSAEncryption
56:2f:28:28:d1:15:64:95:bd:19:03:ff:22:fc:3c:f4:8a:7f:
77:41:8f:bd:25:31:f6:15:bd:c2:29:4e:2f:6d:52:32:05:75:
ba:15:32:40:5e:69:19:a9:a2:32:dc:b9:43:3b:31:1e:4a:a5:
d3:4f:f2:6e:b8:6f:b6:f4:83:82:61:67:00:ef:3d:58:54:c8:
0d:02:cd:f2:25:24:25:2f:d6:76:fc:cb:a7:89:49:6f:6d:7d:
fc:3b:99:7e:84:22:61:d2:2d:3e:87:e4:86:af:bf:64:00:34:
87:b4:10:35:a9:a4:6d:d2:c9:be:81:8f:f3:da:a9:e3:a3:4a:
e1:6f:da:a6:18:15:05:b3:8b:c5:3c:ea:8f:ac:9c:26:e9:f6:
0f:06:9c:be:dd:9e:82:22:34:88:05:fd:ad:0f:ec:33:2a:e0:
cf:aa:f0:d7:ef:66:fb:1e:f4:71:34:5c:39:18:23:49:5f:7c:
9b:5c:e3:30:fa:a9:02:08:15:3e:26:98:ca:36:93:3d:d1:b9:
39:85:a0:e2:4c:9b:08:26:4b:78:c7:d8:c8:00:e9:af:ae:e0:
4c:0c:0d:52:eb:e3:d0:50:af:0c:54:a0:54:70:d5:36:8c:56:
78:ff:bc:59:45:69:1c:a0:f9:54:2b:88:ed:42:6a:c0:78:d3:
3f:66:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org