Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa
File: pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa (raw, json)
Hash identifier: YJdYpK2gtMfP6ompyxShV4B5oVW4dVv+2jtjumB+TPk=
Subject key identifier: A5:46:1D:DE:3D:80:2D:3F:2D:A0:BC:85:94:BA:85:B9:FD:D1:77:C6
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 0E3DB0D0
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa
Signing time: Sat 01 Jan 2022 02:52:39 +0000
ROA not before: Sat 01 Jan 2022 02:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 195.68.242.0/24 maxlen: 24
195.68.243.0/24 maxlen: 24
195.68.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238923984 (0xe3db0d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Jan 1 02:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5461dde3d802d3f2da0bc8594ba85b9fdd177c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:0a:36:f9:3d:00:78:cc:34:41:d5:ca:c1:
76:bf:99:d1:ac:8b:e3:4b:92:9c:90:7b:81:ae:07:
7d:7d:17:16:94:9f:95:27:f8:39:64:9a:3e:c0:8a:
a3:98:0b:5b:f3:2b:eb:d9:71:c1:e1:11:89:59:74:
e1:3f:8f:14:7a:d8:96:ab:e7:05:74:f6:be:0b:1d:
ed:c8:63:13:7a:01:75:14:6c:21:2f:64:97:2b:f3:
c6:ee:6e:62:d2:b7:d5:c8:c8:51:cb:a7:60:19:97:
21:b9:41:4e:c5:cf:6d:14:b8:e7:d5:7f:f9:17:4a:
e6:86:35:fb:b2:0b:b7:d0:ef:8f:94:54:ca:56:76:
ff:95:e4:ed:ac:cf:9c:47:77:76:0e:41:80:17:8c:
8c:29:d5:1c:6d:03:7f:08:90:a4:7b:4b:7d:22:da:
ea:dd:36:38:35:20:94:98:f7:67:19:3b:86:c7:c9:
a5:8d:58:66:67:ea:9e:e5:e6:3a:91:27:58:51:40:
48:30:48:fd:ee:ec:0c:d4:28:70:af:44:63:f5:7f:
38:ba:f4:71:88:b0:02:33:da:ac:b8:02:90:57:64:
95:92:a4:0f:e7:3e:2c:eb:b7:44:84:ff:08:93:ac:
20:f2:36:08:79:e4:20:35:9a:81:ec:9a:fa:4d:be:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:1D:DE:3D:80:2D:3F:2D:A0:BC:85:94:BA:85:B9:FD:D1:77:C6
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.242.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:a2:d8:d4:bc:a1:cd:56:47:4e:0c:7d:01:b0:c4:47:71:f7:
44:07:d9:b6:74:18:a8:6e:ea:41:02:b2:31:16:e2:80:f7:a2:
79:84:c0:a7:2d:f3:67:37:c9:dd:f0:0a:d1:6a:66:7f:eb:13:
61:8b:1d:72:32:48:15:73:f3:63:b7:8b:7b:8b:c8:66:df:cf:
25:c8:57:22:97:69:59:64:cf:ce:0c:4d:1a:c8:ac:f4:59:88:
54:c2:ed:a8:44:65:50:31:53:c7:4e:4e:4c:8f:bd:f1:65:3a:
3d:45:17:e3:f8:44:d1:a8:be:66:55:e1:e5:c3:a7:d6:4a:a2:
80:ce:b1:56:bc:ba:c2:81:20:82:04:53:f9:ee:bf:a5:cb:bd:
c1:49:93:f6:9c:7b:c6:71:66:bd:3c:f4:6e:3a:78:8c:a2:7d:
fa:97:ab:56:ad:da:5d:59:73:35:70:e6:d1:fc:4a:30:4f:0c:
0a:a5:ce:3f:e8:cb:61:fb:83:f2:e6:6d:73:e2:3e:91:45:6d:
ca:cb:80:dc:80:1f:73:99:0e:21:5f:9c:25:2a:97:b0:08:f7:
c3:15:b4:da:9f:51:1d:79:b5:0c:46:19:f7:81:0c:fe:77:c7:
f2:87:9d:da:2f:37:1b:0c:82:87:9e:d9:97:e6:04:f0:02:36:
08:ec:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:46 2023 by rpki-client on console-ams.rpki-client.org