Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wdvqefB3v20QzadrJBMj66dSnxE.roa
File: wdvqefB3v20QzadrJBMj66dSnxE.roa (raw, json)
Hash identifier: Nnl5pV8dfvbzn7yTLQ1DM4JAXUWb1AIIPoSZKUL8XwM=
Subject key identifier: C1:DB:EA:79:F0:77:BF:6D:10:CD:A7:6B:24:13:23:EB:A7:52:9F:11
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01846272D6191FEE6057308749311781C010
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wdvqefB3v20QzadrJBMj66dSnxE.roa
Signing time: Thu 10 Nov 2022 16:50:03 +0000
ROA not before: Thu 10 Nov 2022 16:50:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:72:d6:19:1f:ee:60:57:30:87:49:31:17:81:c0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 10 16:50:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1dbea79f077bf6d10cda76b241323eba7529f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:34:98:4f:a6:e5:32:97:9b:e6:6e:bd:c5:
03:22:a9:1e:44:72:f0:cd:36:2f:b3:07:64:42:14:
83:91:a4:30:05:2e:94:bd:6c:23:02:89:d4:2c:8f:
ea:a2:96:58:91:8e:12:7a:f9:a4:60:fa:95:54:cf:
2d:49:34:ba:45:d1:20:c2:78:8d:a3:4f:2e:14:47:
33:2a:39:1f:4e:09:3d:1f:36:9e:e6:d6:9d:5d:1f:
31:22:f5:16:3b:51:09:59:13:54:99:8a:fb:4f:c8:
17:5f:d6:46:d0:ab:b3:95:a1:a8:7c:dc:b4:8f:9e:
7c:45:ae:98:24:9b:65:32:03:90:bf:5b:c3:d4:35:
cb:5c:e1:0b:cb:14:1d:e9:ed:2e:2c:be:43:07:46:
a1:d7:e1:7c:9d:d4:b9:ef:92:fd:be:d2:d0:11:5a:
cc:72:d3:a5:dc:bc:3e:45:6b:11:20:28:81:2e:42:
37:28:be:29:f3:e2:e6:57:6c:11:b1:8d:f6:1a:4b:
de:29:2a:2a:ca:f2:d0:f6:80:f7:71:b5:db:1c:31:
60:5b:41:5c:b2:e6:2f:0a:8e:fd:a6:43:6a:c8:fd:
db:d7:a1:d5:f7:b3:5c:b1:36:02:27:c4:24:a3:8a:
0b:cd:1f:5a:80:10:93:14:06:9f:0d:26:71:76:a3:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:EA:79:F0:77:BF:6D:10:CD:A7:6B:24:13:23:EB:A7:52:9F:11
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wdvqefB3v20QzadrJBMj66dSnxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ff:96:4a:87:e6:10:38:56:63:be:a4:6d:c7:57:d1:3b:74:
83:d4:cc:a5:ee:76:12:d0:6a:95:60:aa:cf:61:11:40:cd:52:
d2:27:f9:3a:16:aa:33:39:cd:42:92:7b:d2:02:7c:9e:5d:d7:
7b:72:35:05:8e:3a:53:86:8b:8a:5b:c0:11:46:3e:d0:e0:96:
04:1e:d7:17:c1:bd:1d:82:4b:39:c0:20:8b:6d:e1:a0:ad:84:
7d:c7:02:bd:61:a9:8c:66:6a:51:02:54:4a:27:08:cd:2f:8c:
e0:02:60:2d:2d:24:2f:8d:79:02:65:35:7c:de:92:dc:e4:22:
13:11:78:02:a2:0a:86:cd:06:7e:37:2c:f1:d7:d1:67:df:de:
dd:70:ce:1f:7a:76:07:4b:e7:b1:de:3f:79:d0:94:e6:dd:7b:
95:93:07:f7:d0:fe:f3:bb:1c:a8:e4:17:a3:2c:7c:fd:b8:a6:
0a:fb:2b:24:45:c6:7a:14:65:cf:aa:70:a0:d2:3d:1b:cb:e8:
7a:4a:86:d6:35:40:0e:c9:eb:ef:a7:fc:4b:a1:d3:00:8a:92:
66:ae:2d:7f:1f:bf:37:ba:62:8f:1c:28:17:68:ef:06:a5:70:
c9:79:04:a9:9f:63:55:72:46:9e:a0:5a:1a:e2:cf:ae:52:3b:
bd:1b:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-ams.rpki-client.org