Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jG0jBdH5kFdAd2Prqixi2gZi63c.roa
File: jG0jBdH5kFdAd2Prqixi2gZi63c.roa (raw, json)
Hash identifier: vxAf/Xvyut0LAQcTZV2vLeGmVn1Cs48tdTbmXCIgvcw=
Subject key identifier: 8C:6D:23:05:D1:F9:90:57:40:77:63:EB:AA:2C:62:DA:06:62:EB:77
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018562CC6B6DA7C36B2301123A0BC1F72795
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jG0jBdH5kFdAd2Prqixi2gZi63c.roa
Signing time: Fri 30 Dec 2022 11:30:42 +0000
ROA not before: Fri 30 Dec 2022 11:30:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204613
IP address blocks: 195.133.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:cc:6b:6d:a7:c3:6b:23:01:12:3a:0b:c1:f7:27:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 30 11:30:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c6d2305d1f99057407763ebaa2c62da0662eb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:54:79:a9:4c:42:3c:27:ef:7a:48:7c:3d:
9a:5b:b0:36:27:c4:54:d3:58:d2:db:ba:88:a4:74:
46:8e:9f:24:9a:9c:e6:1e:1f:17:d3:3c:fb:da:0e:
2f:2a:c2:26:4f:a1:54:83:6d:8d:7c:1a:be:6b:d0:
85:14:54:63:8a:67:a2:8a:ab:76:5f:37:7d:31:8c:
4b:1d:22:65:78:49:53:b8:35:03:b2:2e:bb:ba:24:
15:50:d3:91:3a:93:cc:90:af:f7:a2:e1:78:1a:a1:
7f:7a:18:0b:87:83:32:02:17:11:ee:b1:e9:ad:e4:
cb:92:2b:15:ab:e8:28:06:87:43:ec:6c:f0:ed:37:
5b:73:68:ec:24:b9:e1:8a:55:ad:70:e8:2e:e2:84:
f1:6e:72:9b:3f:d8:6b:2f:db:5b:2e:51:d5:eb:f8:
4e:15:75:9f:92:27:34:5e:1d:22:2d:fd:2a:3a:2d:
60:e1:ba:17:b3:fc:6c:05:35:02:12:cb:16:36:cd:
2c:9a:82:36:09:da:25:1e:43:2a:a1:34:5d:64:a9:
e4:38:37:38:5e:1a:92:ec:52:6b:5a:d2:25:f8:2b:
32:eb:40:da:90:9e:07:5b:c0:1e:cc:5c:a2:d0:fc:
9e:07:78:b6:9c:36:64:70:86:74:df:1c:9b:ab:f8:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:23:05:D1:F9:90:57:40:77:63:EB:AA:2C:62:DA:06:62:EB:77
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jG0jBdH5kFdAd2Prqixi2gZi63c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e9:41:77:59:54:05:26:db:fd:1d:53:b5:b9:75:97:85:72:
7f:fc:7c:2e:d9:65:4b:45:53:89:ec:30:d4:c9:2f:75:d4:18:
79:4c:f7:01:b3:e3:e8:e4:fe:32:e4:9e:10:b6:64:25:ee:7d:
f5:a7:d5:3c:bc:72:78:6a:f2:45:9f:17:0d:06:a9:7a:b5:8d:
05:f2:60:11:54:b0:6a:45:9b:9f:08:32:06:de:b6:5c:84:3a:
d5:8a:12:84:22:93:dd:6b:f2:0f:93:75:8f:8d:75:86:17:02:
f5:2c:e2:a7:b6:d1:5b:11:7c:97:ff:ab:0c:e8:74:32:19:aa:
5f:44:c5:23:f9:f7:46:8b:ff:19:18:9b:e3:0d:d7:00:b0:3c:
b6:f3:04:74:a6:c6:48:9f:1e:2f:45:1f:f5:25:1c:b8:6a:94:
39:87:26:41:88:ec:1e:a5:8f:68:29:4b:88:85:bc:2c:97:61:
e5:04:9c:ba:52:00:59:c5:8c:eb:95:18:b6:8a:85:bf:d4:51:
59:a8:ed:7a:b5:e9:e8:c7:9c:7d:97:14:f9:99:7b:2c:5d:0b:
91:de:dd:af:aa:6b:4e:df:58:f1:08:f9:c3:00:25:e3:dd:fd:
6a:b8:b4:0c:7e:d9:00:ad:e5:95:c0:3b:4c:ca:d7:b1:c3:45:
ad:60:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org