Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/7m_b9l3y6geAsqc06tg890lVGxY.roa
File: 7m_b9l3y6geAsqc06tg890lVGxY.roa (raw, json)
Hash identifier: nP0x04sl9A3FEk26m7lg2zxl39cGSoU9XNieEgUkBVg=
Subject key identifier: EE:6F:DB:F6:5D:F2:EA:07:80:B2:A7:34:EA:D8:3C:F7:49:55:1B:16
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 15B1C86F
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/7m_b9l3y6geAsqc06tg890lVGxY.roa
Signing time: Sat 01 Jan 2022 05:03:09 +0000
ROA not before: Sat 01 Jan 2022 05:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198612
IP address blocks: 195.49.160.0/22 maxlen: 22
194.116.156.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363972719 (0x15b1c86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Jan 1 05:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee6fdbf65df2ea0780b2a734ead83cf749551b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:45:92:5e:a9:75:fb:fa:14:74:55:4d:c4:
55:a2:25:86:cb:16:a9:45:3b:f6:a6:a8:a1:46:fa:
df:26:60:21:f1:77:6c:30:25:1e:bb:94:87:97:92:
2a:8c:a3:be:c9:96:ef:0c:cd:73:bb:12:26:77:eb:
2e:94:a1:53:d9:19:3d:77:9d:8d:f2:2a:dc:86:33:
38:3d:d6:40:3f:80:86:3b:ee:72:dd:9e:d7:33:6c:
b7:aa:00:89:80:0c:62:9c:2d:d5:e5:59:7f:94:9a:
1b:ad:26:c1:57:dd:d9:2f:3c:b3:4e:e1:7b:05:ed:
3d:82:43:e4:bd:f7:9a:cf:db:28:37:14:d9:1d:0c:
be:4d:ca:15:20:fa:7d:a0:8b:e1:11:6f:6e:4a:a3:
69:9b:69:a3:f7:99:9a:3e:9e:48:ae:45:93:35:af:
23:d6:19:b9:5e:66:58:9a:8e:d5:04:1f:e0:e7:81:
cc:6d:ad:de:cf:0e:43:a6:85:ae:cd:ed:84:1c:7f:
b9:57:7e:11:c8:a6:1e:31:7e:1d:25:f6:94:0c:92:
50:d5:5a:92:ae:ad:53:c5:37:02:1d:f3:35:2a:e9:
b5:98:96:09:86:a1:5b:32:d1:da:17:1e:9a:6c:54:
bd:1a:51:b6:af:5d:cb:23:d6:df:ea:b8:64:26:aa:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:DB:F6:5D:F2:EA:07:80:B2:A7:34:EA:D8:3C:F7:49:55:1B:16
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/7m_b9l3y6geAsqc06tg890lVGxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.156.0/23
195.49.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:8d:91:c0:d1:45:2b:61:86:36:74:a2:6a:dd:e5:f7:1b:eb:
7a:cb:e7:1c:97:9f:36:67:78:e9:cd:dd:fa:19:24:b5:bb:8f:
98:d5:fa:d9:5f:67:b4:c5:69:1b:40:5e:c2:32:d4:49:9a:8d:
e4:ea:72:e3:90:23:88:97:10:72:5c:05:e2:6c:b1:53:14:2a:
1e:80:57:12:fd:dc:34:01:09:6f:e9:03:4b:9f:dc:81:0b:74:
33:1a:96:41:bd:ba:4c:d8:d1:40:26:11:19:e8:df:ac:a6:81:
1d:cf:00:69:d8:2a:ae:27:a7:9f:81:4c:05:03:d1:ee:ee:e8:
20:d0:a9:fc:2d:d7:06:e5:49:bb:a8:84:b9:b8:31:4b:bb:39:
23:02:7b:e5:6d:4b:98:93:05:96:f4:78:d6:b0:72:ee:cb:3b:
11:0e:54:8e:31:ae:84:35:cc:31:45:16:e3:a0:10:a1:ee:fc:
63:2c:80:a1:9d:13:8a:9c:49:16:59:84:79:1c:26:25:ee:97:
b1:14:bb:6e:b3:f5:9a:1f:b2:ef:94:d5:e1:a6:23:e2:e5:8b:
00:37:0f:33:a0:7a:dc:db:e5:b1:f5:f8:75:4d:9a:a1:ff:48:
6a:99:53:5b:23:87:d3:fa:78:f3:96:76:72:c1:3c:f0:fc:86:
58:33:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:55 2023 by rpki-client on console-fra.rpki-client.org