Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/We4t3BStSAWAEeh-uyYLewN02kk.roa
File: We4t3BStSAWAEeh-uyYLewN02kk.roa (raw, json)
Hash identifier: 34I16j620IXZqZnrFvPDK3/wB1AYDpuzgjGoX+Vq+dw=
Subject key identifier: 59:EE:2D:DC:14:AD:48:05:80:11:E8:7E:BB:26:0B:7B:03:74:DA:49
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B652967
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/We4t3BStSAWAEeh-uyYLewN02kk.roa
Signing time: Sat 01 Jan 2022 08:58:41 +0000
ROA not before: Sat 01 Jan 2022 08:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58203
IP address blocks: 195.87.18.0/24 maxlen: 24
195.87.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191179111 (0xb652967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59ee2ddc14ad48058011e87ebb260b7b0374da49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:fc:ed:7e:85:30:7c:93:80:2b:55:50:09:
23:ce:d8:5d:b9:03:3a:33:49:02:fd:95:91:ac:ff:
15:c2:9f:e3:75:fe:12:7d:32:80:92:32:11:82:11:
f3:66:81:61:7a:d8:2b:f5:24:bb:7e:31:13:19:73:
b5:b8:a2:72:95:1e:7c:e0:9c:33:21:38:3c:31:d8:
3d:3a:92:38:f1:23:e5:be:47:5b:ef:6f:d7:74:c4:
37:b0:7c:54:42:20:0b:3a:6f:e0:6a:cd:28:5b:5b:
92:1e:eb:b7:d3:e7:20:ca:db:3a:82:2c:5a:59:57:
9c:84:33:f9:a0:1e:76:19:de:af:34:a0:14:d0:72:
cb:38:40:3c:e7:c2:49:20:f0:27:9d:48:d3:e9:4a:
d3:7e:31:4b:65:fd:4a:3a:ab:05:48:54:46:c5:c5:
e6:31:8a:54:36:43:b3:18:d0:41:6d:19:1e:32:c0:
4f:73:c0:03:38:a7:8e:8d:e2:fa:d8:91:3c:76:d9:
77:2a:6d:68:57:b2:41:db:a8:86:ad:ba:ff:ea:3c:
a3:8e:3a:df:6a:b7:84:88:73:8f:21:1f:e8:51:0b:
91:25:49:50:28:76:85:87:af:54:a8:de:16:a3:1d:
2d:ea:de:ab:79:4b:07:39:dd:ab:f9:21:e6:bb:2f:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EE:2D:DC:14:AD:48:05:80:11:E8:7E:BB:26:0B:7B:03:74:DA:49
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/We4t3BStSAWAEeh-uyYLewN02kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.18.0/24
195.87.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:3c:5b:c8:05:51:69:f2:ee:b6:0a:5a:3b:5b:7c:e4:1d:76:
57:48:53:62:ef:f0:5c:ec:e3:ac:b1:d1:ff:40:43:ad:d5:7f:
6e:75:fd:77:33:91:60:9e:48:cd:45:71:44:66:69:31:5f:dc:
3e:75:5d:aa:35:6c:85:1b:e1:19:0e:0b:2d:d9:af:f4:8b:d8:
9b:08:18:e0:5e:ca:4c:24:ac:3b:dc:fb:6b:99:b7:fb:e7:31:
aa:aa:59:78:9a:84:9a:a1:33:03:c7:82:91:49:2b:4b:d9:db:
88:09:c1:17:78:cd:88:76:ba:7e:d1:b0:8a:76:a3:bb:6f:ae:
30:40:6c:7a:34:ae:7d:93:d2:e2:44:aa:62:65:e9:82:ea:c6:
8f:8c:ca:1a:11:9c:63:81:33:87:0f:4e:32:8e:a0:38:b1:1d:
39:81:3b:8a:c7:07:d9:e8:59:7c:54:84:3f:70:56:25:fe:63:
45:2c:14:49:1a:f8:f7:99:56:67:9e:a9:5c:9c:f2:a9:6e:74:
55:20:74:06:f5:b9:16:a2:ff:df:05:a0:f4:5f:23:9b:f4:42:
3c:8e:ee:bc:68:34:e3:f6:5e:cb:ab:65:6e:9d:38:c5:d4:0e:
2a:cd:81:66:0b:3a:53:c0:72:dc:91:f3:d6:b0:b0:fd:63:bb:
c1:ce:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:03 2023 by rpki-client on console-ams.rpki-client.org