Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vt8ZD0qwM_0u9CrZixBVFJXQoEM.roa
File: vt8ZD0qwM_0u9CrZixBVFJXQoEM.roa (raw, json)
Hash identifier: +ekJMSOQ23KPw9SYW8EL0CLDVwwFrieWblifENS8SFk=
Subject key identifier: BE:DF:19:0F:4A:B0:33:FD:2E:F4:2A:D9:8B:10:55:14:95:D0:A0:43
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F4E7892
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vt8ZD0qwM_0u9CrZixBVFJXQoEM.roa
Signing time: Thu 31 Mar 2022 17:16:48 +0000
ROA not before: Thu 31 Mar 2022 17:16:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3170
IP address blocks: 195.133.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256800914 (0xf4e7892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 31 17:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bedf190f4ab033fd2ef42ad98b10551495d0a043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:13:f2:a6:9f:1c:ff:c4:08:18:c6:d8:d2:
d5:d8:a6:88:51:e7:93:47:77:7d:4b:2b:fd:9b:3b:
53:07:72:d5:98:bf:6e:53:17:3d:a1:6e:55:a3:9d:
b2:6e:60:84:fa:08:94:54:c2:f8:32:1c:a1:b6:16:
91:b5:25:38:17:3e:4c:64:05:80:ab:62:8c:be:43:
61:db:ad:76:f3:68:24:0b:85:bf:c5:43:d0:9f:bd:
74:2b:df:85:7c:ec:68:23:08:42:3c:1a:18:75:e2:
09:22:f3:94:0c:87:99:89:28:08:74:8d:77:a6:06:
a2:60:00:03:88:e3:1e:a7:64:70:8b:f9:c7:51:bb:
0a:fa:94:6c:86:d8:b7:f5:a0:dd:f6:8f:91:41:66:
26:1d:29:27:8d:a6:60:01:89:e5:90:f6:4f:f2:66:
5a:ce:01:58:55:c5:e5:a2:f8:4a:03:36:ad:32:f5:
c8:a2:b2:26:fb:46:ac:2b:5e:1e:f6:ae:df:a5:04:
73:9e:9b:76:c1:6f:92:07:72:db:2f:95:54:15:03:
74:1b:52:c0:09:47:0f:7f:5d:5f:52:90:f3:14:60:
21:64:ed:60:bd:84:09:d4:bb:90:b9:a1:6a:07:69:
54:14:aa:db:c0:14:9b:46:18:a9:90:1f:b9:a2:d3:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:19:0F:4A:B0:33:FD:2E:F4:2A:D9:8B:10:55:14:95:D0:A0:43
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vt8ZD0qwM_0u9CrZixBVFJXQoEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
96:97:13:98:65:a9:6b:7a:3c:49:22:70:ab:88:57:16:c4:2b:
8e:a5:79:c9:4c:f1:93:fa:81:23:0f:32:10:45:a5:42:ec:1f:
3d:0c:4f:e7:9e:fa:cd:54:7d:8f:d8:16:26:bc:aa:2f:d9:dd:
d9:f2:4b:f8:c0:08:ff:7d:d5:a2:22:51:ad:c0:f4:81:1b:3c:
e0:09:d8:c3:df:1a:86:e3:5f:a2:a6:e1:e1:6f:2d:ea:92:a2:
53:37:fb:a7:5e:19:6c:40:43:14:32:d5:43:39:fc:b6:32:a3:
b9:95:3a:f0:5a:c3:63:60:75:ea:c1:87:01:d2:66:94:bb:48:
6f:a9:4d:00:db:a5:37:27:8d:a0:ca:0f:96:a9:34:13:07:ee:
7b:5d:a4:c5:6c:65:b8:50:93:4d:40:66:f6:b9:35:f7:eb:3a:
f6:86:dd:5c:35:e8:5f:70:b1:53:24:cc:b0:de:d5:6a:b0:f9:
bf:42:a8:0d:5a:c4:4b:a3:d0:f0:0a:7e:ad:08:dc:19:93:98:
56:42:b1:82:94:c4:05:f7:73:33:7d:e2:ba:aa:63:a6:85:2e:
44:2e:6f:1a:04:c0:39:d3:b7:b7:8b:99:7e:69:01:b5:1d:64:
73:35:2a:63:06:a0:eb:19:e6:66:4a:a1:58:9c:34:9d:73:57:
72:b3:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-ams.rpki-client.org