Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/eSLoJ2ZcxlrzLx5fFOEHnqn342o.roa
File: eSLoJ2ZcxlrzLx5fFOEHnqn342o.roa (raw, json)
Hash identifier: Va7+lFeLRaCJQfgPtu1WQbFwE8i324jW+Zs/pRGor+0=
Subject key identifier: 79:22:E8:27:66:5C:C6:5A:F3:2F:1E:5F:14:E1:07:9E:A9:F7:E3:6A
Certificate issuer: /CN=01807b6740a6341bffaff46f165b5881f660d619
Certificate serial: D48B
Authority key identifier: 01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/eSLoJ2ZcxlrzLx5fFOEHnqn342o.roa
Signing time: Fri 11 Mar 2022 23:53:49 +0000
ROA not before: Fri 11 Mar 2022 23:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 195.96.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54411 (0xd48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01807b6740a6341bffaff46f165b5881f660d619
Validity
Not Before: Mar 11 23:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7922e827665cc65af32f1e5f14e1079ea9f7e36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:d5:20:fd:d4:e2:9f:6e:18:25:c6:fd:a7:
44:2b:22:3f:fd:5f:7e:b8:96:8a:c2:98:2a:af:e8:
bc:a0:a8:5e:23:ae:b5:29:95:3f:a2:a5:f5:04:c0:
54:10:5b:df:a3:11:12:2b:06:43:5f:2c:6c:00:12:
83:be:ef:09:d3:12:4b:9d:96:04:99:88:61:39:e2:
94:ce:fb:14:81:dd:6a:38:5f:4e:d6:01:fd:b0:a3:
5d:0c:b2:c5:e3:57:3a:b2:f3:2b:89:9a:07:65:08:
70:e4:ac:39:c4:9f:3e:d0:a9:96:5d:05:96:e0:01:
30:13:5b:a1:a6:0c:fa:d4:57:66:7b:90:cd:82:01:
3c:c0:d5:94:34:4b:bf:f9:e2:cd:57:42:74:f8:9f:
7d:16:ee:6a:da:7b:a1:f7:f3:af:3a:3d:7b:52:7c:
87:25:f9:63:59:eb:7d:21:03:d7:85:07:9d:9d:a4:
13:d3:8f:57:3a:79:76:7c:af:da:4f:b2:34:00:e3:
f3:37:f3:f8:e9:1c:d4:88:ab:fb:ab:2d:97:99:9f:
57:a8:a4:f9:f2:cc:b9:7b:30:d3:eb:79:03:30:0b:
e8:b3:29:37:bf:8d:d6:34:0e:b0:b6:2d:32:3e:6e:
52:fc:67:14:a7:03:4f:39:2b:0b:1c:23:e1:ed:cb:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:E8:27:66:5C:C6:5A:F3:2F:1E:5F:14:E1:07:9E:A9:F7:E3:6A
X509v3 Authority Key Identifier:
keyid:01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/eSLoJ2ZcxlrzLx5fFOEHnqn342o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a1:75:89:5a:aa:08:aa:d6:e2:79:c0:21:87:48:0d:93:34:
4b:09:99:52:fb:6d:39:d5:af:93:6a:9d:27:34:7f:ae:a4:ab:
f1:f0:84:b4:aa:56:b3:b7:df:42:50:c3:8e:8a:91:77:6d:9c:
9d:a5:3f:4b:06:ea:35:ce:2a:d2:cc:0c:6b:ef:db:94:1b:e1:
9a:bf:4a:e2:79:39:28:e4:a3:5c:f2:bc:00:e4:07:fa:f6:37:
18:7a:1b:c2:9f:60:d8:f7:e6:79:13:8c:71:31:c6:fe:d6:06:
9a:47:b4:fd:82:3d:b1:a5:c0:80:e5:5e:03:66:75:4f:3a:d7:
b5:78:55:36:15:7d:ae:86:2b:a9:5d:21:6f:d5:de:a0:b1:8b:
5b:cf:15:65:38:1b:dd:1d:27:63:45:32:ae:da:ca:38:b0:46:
26:c1:a5:e4:00:0b:52:a6:13:6b:a5:6d:46:c1:cb:ec:f2:f7:
c4:87:6c:65:c6:08:8e:97:03:a3:73:8d:70:f2:c1:26:a1:2b:
91:43:2c:bb:1b:36:9a:8c:3a:7d:bf:36:2c:6f:90:a7:58:bd:
20:02:c9:b2:8c:d7:ab:2d:75:79:75:a0:0b:87:92:36:94:d6:
09:3a:d5:c5:1b:a0:bd:34:45:fd:bb:7b:9b:ff:35:2a:0b:90:
0a:37:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-ams.rpki-client.org