Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pYX5s-6Vk658xKaJBCr64KIE2A4.roa
File: pYX5s-6Vk658xKaJBCr64KIE2A4.roa (raw, json)
Hash identifier: V3Jb9Tre9/B9G7iLtNbYxtzgVcHsf5vB1OppHH6pWrg=
Subject key identifier: A5:85:F9:B3:EE:95:93:AE:7C:C4:A6:89:04:2A:FA:E0:A2:04:D8:0E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852AEA7696BD75FF00AC0644B2276B2805
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pYX5s-6Vk658xKaJBCr64KIE2A4.roa
Signing time: Mon 19 Dec 2022 15:04:46 +0000
ROA not before: Mon 19 Dec 2022 15:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 266169
IP address blocks: 194.87.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:ea:76:96:bd:75:ff:00:ac:06:44:b2:27:6b:28:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 19 15:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a585f9b3ee9593ae7cc4a689042afae0a204d80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:a4:65:3b:2a:fc:75:93:3e:d7:f9:2c:b7:
c4:b2:5c:25:86:dd:1a:fd:6a:b3:3a:46:90:0f:d9:
fa:23:0c:c3:d9:a8:b4:db:7e:b8:36:06:27:a0:ec:
f0:29:15:3b:9f:7b:0a:5a:b4:da:05:1a:15:88:d8:
c2:f0:c2:81:f0:8a:6a:bf:15:c9:7e:be:03:c5:c7:
4b:c3:fe:f6:6e:a3:28:54:53:33:c1:dd:85:b6:3b:
72:3f:f3:6b:d5:ea:8b:29:ca:60:67:b2:c1:ad:eb:
dd:2c:cc:b8:27:38:07:67:19:b8:35:15:7c:97:d3:
99:00:c0:c1:8a:1f:86:76:63:3f:28:56:d4:0c:0d:
09:15:12:3a:61:83:a4:dd:8a:e5:4d:40:54:aa:65:
e8:4c:b4:a8:fe:45:25:67:ec:9c:91:c3:60:90:f6:
5e:81:a1:66:15:af:20:31:d8:71:ad:af:bd:7d:d6:
95:b2:2f:35:a4:4f:65:4e:2d:ef:5a:e0:c6:61:dd:
f2:a9:dc:be:be:d8:81:d6:8c:34:08:93:70:c0:c7:
4f:c2:31:cc:be:97:bd:29:9f:e2:7f:be:60:14:16:
1d:5f:6b:9a:3a:a6:13:9a:bf:bf:ee:59:97:80:46:
b0:f6:aa:d4:bf:11:79:75:c7:48:74:49:0c:fc:77:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:85:F9:B3:EE:95:93:AE:7C:C4:A6:89:04:2A:FA:E0:A2:04:D8:0E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pYX5s-6Vk658xKaJBCr64KIE2A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.164.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f2:1e:73:41:48:16:62:d3:46:16:c2:60:27:1a:3c:11:4a:
9d:ef:19:d1:5e:23:3f:6b:0e:e7:a9:9c:7a:fc:70:63:95:b0:
1d:76:cf:b5:05:77:19:f8:c4:d8:d4:7f:9a:2f:ba:1e:c4:e7:
f4:9c:8e:16:59:6d:55:ab:4b:bd:ad:7c:9a:1c:34:74:64:e3:
dc:98:e1:18:d5:d2:e1:f8:f4:aa:ee:2b:af:1f:3a:06:e6:d8:
2a:7f:05:15:09:a7:01:b6:6d:d7:ac:88:74:5b:dd:d0:a2:67:
0c:de:b9:79:40:61:00:39:76:77:07:8d:78:49:aa:5d:68:fa:
d4:12:25:dd:49:2a:3b:43:6e:49:53:1f:28:c3:fe:03:74:e7:
01:9f:f1:2c:a8:5b:1f:74:5f:17:9d:5d:79:c0:05:9b:bf:30:
39:0c:17:d8:65:2a:3e:cd:f1:37:aa:ff:44:3f:e8:36:16:c0:
d7:91:b7:f4:23:a6:8e:15:44:ef:ae:f7:31:d1:bb:34:32:93:
5b:dd:4c:7c:29:59:79:72:db:ae:39:6c:0c:57:c6:43:95:9c:
de:54:d4:13:b3:19:f7:e3:64:c6:73:84:01:23:ac:1e:6f:e4:
8c:d7:96:12:51:7a:3d:b5:23:c5:f6:ce:74:96:a2:49:08:f2:
9b:b4:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org