Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rHupm7bkgYpohB3FI15wSVp-qxc.roa
File: rHupm7bkgYpohB3FI15wSVp-qxc.roa (raw, json)
Hash identifier: zva3hFXiUFGJ86/X9TBpAybjQdOKzPdyVA1+z0UQZ8c=
Subject key identifier: AC:7B:A9:9B:B6:E4:81:8A:68:84:1D:C5:23:5E:70:49:5A:7E:AB:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E289563
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rHupm7bkgYpohB3FI15wSVp-qxc.roa
Signing time: Sat 01 Jan 2022 01:58:27 +0000
ROA not before: Sat 01 Jan 2022 01:58:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213373
IP address blocks: 195.133.192.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237540707 (0xe289563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac7ba99bb6e4818a68841dc5235e70495a7eab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:eb:11:73:ef:d5:c0:44:f0:79:60:47:85:
b0:f9:0d:41:7e:8b:ea:ce:4f:2e:a3:4d:80:50:1f:
bb:3a:c8:c3:12:7b:28:6f:65:49:3e:48:e0:a1:e0:
01:04:85:7b:f2:bd:64:b3:1a:23:13:0b:c4:93:44:
a1:0b:33:5b:3e:0a:94:c9:5a:c7:fc:f8:d0:5d:f6:
13:aa:e3:01:e4:e6:e7:ad:51:e8:d6:9d:41:bf:6e:
a7:45:74:ed:a3:73:54:fd:f2:87:63:ed:a6:04:c0:
7e:43:93:ac:5e:3d:cb:00:7c:6d:d8:c6:85:dc:98:
ed:f2:68:5e:ab:e9:06:40:69:48:fb:3e:3a:d9:cf:
de:a7:0f:90:7d:49:11:5a:00:84:60:b6:e4:cd:b3:
21:74:a9:bb:5a:f4:fa:94:bc:00:c1:e1:55:46:0b:
49:cb:36:6f:4a:41:c3:0c:67:05:54:7f:9f:3f:9f:
e8:a4:0d:78:30:51:fb:b6:9a:e9:1d:19:04:e3:6d:
07:ff:c6:2a:14:59:de:67:19:ba:37:66:d9:cc:f6:
41:c6:0e:74:02:c8:4b:c0:cf:c4:89:f9:c8:47:52:
89:05:0d:19:ca:ca:31:13:44:d5:71:4f:05:21:97:
4f:01:89:2c:ad:93:5a:7c:dc:7d:4c:18:bd:a8:56:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7B:A9:9B:B6:E4:81:8A:68:84:1D:C5:23:5E:70:49:5A:7E:AB:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rHupm7bkgYpohB3FI15wSVp-qxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.245.0/24
194.135.33.0/24
195.133.192.0/24
Signature Algorithm: sha256WithRSAEncryption
73:93:9b:55:99:f5:6b:8d:79:25:83:e5:84:59:a8:46:fb:74:
a5:11:ed:c5:99:1c:37:c0:03:da:bb:3b:6e:a9:86:d1:d3:6c:
cf:df:79:68:76:3a:b2:81:aa:8b:38:9b:a9:a8:9c:e8:24:cd:
f7:47:b4:6c:eb:84:ef:85:22:0b:f0:48:82:5a:e5:c9:ae:99:
08:a9:df:66:a7:81:93:6e:fb:e8:94:60:17:13:f4:c1:4d:85:
12:c9:40:0c:a8:2e:e0:d1:26:04:36:cd:28:c9:19:6a:b8:85:
bd:78:fe:0d:a1:fc:db:c7:9e:64:60:9b:7e:b3:d1:a5:91:43:
dc:1b:4b:16:40:47:f1:ac:e8:56:24:10:91:23:9b:c9:ea:02:
bd:01:fd:c6:e6:3e:a3:89:4c:1c:80:36:7a:de:19:de:3d:67:
7e:0a:c6:b5:1d:ef:63:2f:ae:36:10:e2:0b:d1:93:4b:ca:6e:
9a:c6:cb:17:7b:e8:bf:3d:39:88:d0:6d:a2:a8:d4:47:ce:81:
b4:e3:1e:db:e8:6a:d6:70:e3:e9:17:d6:7a:11:98:a0:1b:87:
59:54:49:00:87:25:bc:a5:a1:fe:b5:d6:81:e6:b5:05:d7:69:
f2:8d:9e:f9:98:0f:cd:d2:bc:be:7f:90:cb:50:01:82:b0:67:
07:67:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org