Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/i4uiscInrnyC-SsEDSFnh3Hd7T8.roa
File: i4uiscInrnyC-SsEDSFnh3Hd7T8.roa (raw, json)
Hash identifier: awJcrxtzOtZ0NVODJYru6TU5j2ZhdaoY1gwTIlRecYI=
Subject key identifier: 8B:8B:A2:B1:C2:27:AE:7C:82:F9:2B:04:0D:21:67:87:71:DD:ED:3F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01830DD91922FF17D6AF69FD3252F700D453
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/i4uiscInrnyC-SsEDSFnh3Hd7T8.roa
Signing time: Mon 05 Sep 2022 13:31:14 +0000
ROA not before: Mon 05 Sep 2022 13:31:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 194.87.6.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:d9:19:22:ff:17:d6:af:69:fd:32:52:f7:00:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 5 13:31:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b8ba2b1c227ae7c82f92b040d21678771dded3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:9a:12:a1:23:ef:1d:cc:34:5f:21:51:32:
fc:ae:b7:c3:ef:72:9c:c8:a6:7d:7f:d1:fc:ce:24:
d3:bb:eb:35:3c:3e:14:49:1a:04:d9:ea:48:d3:72:
45:cf:5c:01:08:75:89:c4:c6:33:5f:3c:24:45:c0:
47:bb:9c:ad:1a:8f:5c:f4:34:7e:5a:33:1c:02:65:
9c:b1:2e:1e:79:90:05:aa:ac:37:8c:8e:9a:1d:08:
0b:2a:14:eb:7e:cb:26:f6:1f:fa:1f:88:55:a4:3d:
57:74:da:59:ab:ec:6d:dc:87:32:c9:20:7e:f0:d8:
7c:61:4c:78:f5:9f:9f:f6:7e:63:f5:ed:ee:8c:e0:
f6:88:bf:91:69:93:d3:93:b9:33:52:10:c4:86:52:
45:78:9d:3b:d0:be:85:17:45:3f:7d:e6:45:0e:d0:
c9:7e:71:97:ea:ec:ff:d2:f8:18:30:68:71:b0:2b:
3e:ee:7e:5f:50:6f:6b:b8:39:f4:82:01:19:0b:c3:
c2:4c:82:d3:7b:e2:da:ce:5f:1a:f0:13:d9:14:cb:
fc:d5:a9:8a:2d:e6:1f:30:e9:8a:fa:11:28:be:48:
fb:cb:af:f6:7a:45:8a:5a:e7:26:96:6e:14:f9:97:
58:2e:fc:f9:33:f6:c8:fc:d4:6d:a7:5c:d7:4e:f0:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:A2:B1:C2:27:AE:7C:82:F9:2B:04:0D:21:67:87:71:DD:ED:3F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/i4uiscInrnyC-SsEDSFnh3Hd7T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.6.0/24
194.87.33.0/24
194.87.119.0/24
194.87.222.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a7:6d:36:88:d7:46:bb:f0:13:76:72:3a:6a:6c:17:2e:97:
13:41:fc:02:52:1f:d1:75:92:84:3e:d6:30:09:f9:42:dc:a0:
f5:8e:25:ab:ac:f4:41:a0:1f:34:7c:d8:16:d4:7e:5c:c7:50:
d2:42:90:79:d9:0e:10:ac:12:35:03:0c:bc:2e:03:67:23:93:
36:fd:b3:1c:25:97:35:4c:01:de:04:4d:1f:80:6a:b3:05:97:
c8:ba:06:a5:4b:b9:dd:43:6d:2a:fb:90:e3:fc:6f:7a:da:7e:
06:ce:81:72:65:ea:8d:5f:49:ec:89:60:b6:1a:34:6f:e6:4a:
85:d3:d8:1b:30:33:1a:18:6a:d4:cf:0e:45:6f:94:5c:6b:86:
3d:e0:7f:f6:df:2b:03:d3:ad:4f:51:80:43:5d:d6:1c:47:f9:
1b:02:d2:bb:da:70:91:f0:b1:fb:d0:e1:a5:54:77:c5:e0:03:
35:f0:fc:35:b8:42:37:f1:75:ec:fa:c6:45:2e:5f:05:da:43:
a2:e6:86:2c:86:a6:81:f9:17:8e:7d:f6:9d:b8:33:0d:e2:8d:
77:b0:91:90:17:42:8c:3f:95:97:ea:8d:63:a4:34:2e:86:63:
e8:fa:b7:0b:a6:e2:ae:a1:da:27:01:da:b8:c1:18:cc:ad:0b:
d3:80:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org