Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fL7I2XCC7qgmdxbGr29xiUgCf58.roa
File: fL7I2XCC7qgmdxbGr29xiUgCf58.roa (raw, json)
Hash identifier: Vbz5mKRk/OHen0EuIRGb0uytadLrk0zGNBXZdfzx1UY=
Subject key identifier: 7C:BE:C8:D9:70:82:EE:A8:26:77:16:C6:AF:6F:71:89:48:02:7F:9F
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 388EDB23
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fL7I2XCC7qgmdxbGr29xiUgCf58.roa
Signing time: Tue 17 May 2022 05:11:31 +0000
ROA not before: Tue 17 May 2022 05:11:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21337
IP address blocks: 195.34.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948886307 (0x388edb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:11:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cbec8d97082eea8267716c6af6f718948027f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:bd:8c:ff:ca:73:6c:cc:4e:54:34:d2:1d:
cd:c0:0d:9b:21:12:f9:d5:31:c9:b0:10:f1:c0:e3:
86:10:18:d5:c3:ec:50:32:45:11:1c:db:22:a6:cf:
8b:eb:e3:ef:02:7e:95:a2:b8:10:e1:4d:c5:8a:c9:
f8:03:64:7f:54:b6:6d:40:39:e2:a2:d5:be:f4:9c:
68:d9:2c:6b:3a:0c:c6:ea:a2:d8:50:16:f5:03:9b:
17:99:17:9f:6a:48:68:b5:b2:14:4a:2e:b3:38:7a:
b4:58:0b:f5:7e:10:69:df:46:d1:d1:7e:0d:5d:d6:
d8:f4:47:12:20:a7:00:a0:21:28:f1:78:dd:33:b0:
e2:ca:12:fc:65:38:33:3c:fe:b5:45:36:37:17:17:
63:cf:87:fc:4e:10:a1:88:65:85:2f:c1:47:ac:7b:
d2:b4:8f:5a:df:d0:84:a5:c3:05:dd:6c:37:54:e1:
50:28:2e:dc:f2:2b:2a:d5:02:65:63:56:1f:11:bd:
9a:4f:37:1e:31:36:68:33:03:96:b9:bd:df:31:47:
45:69:0d:a0:3e:25:61:5e:63:38:67:8c:04:60:40:
66:62:8a:7c:70:c2:42:d1:cf:f1:a7:cc:3a:69:de:
d2:b0:7a:1c:ea:18:85:ae:38:94:f3:17:f4:d5:76:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:C8:D9:70:82:EE:A8:26:77:16:C6:AF:6F:71:89:48:02:7F:9F
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fL7I2XCC7qgmdxbGr29xiUgCf58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.112.0/24
Signature Algorithm: sha256WithRSAEncryption
89:dc:7d:cf:00:4d:57:0a:c3:cf:f4:39:68:80:d1:f5:e6:82:
8f:ce:ca:43:82:3c:cf:ee:b0:4a:c5:c5:df:f4:89:20:db:d6:
bb:4f:55:a3:d9:92:8a:0a:d2:6a:4c:cd:9c:99:20:b1:c1:58:
dc:0c:70:7a:ad:d4:08:1a:24:34:d9:3f:01:90:f8:2f:15:b5:
04:21:50:d9:62:d4:97:b6:f8:14:2c:9d:00:89:2b:8d:bb:44:
31:97:81:51:2f:3c:72:08:19:83:87:da:71:72:2b:d3:f0:e7:
a5:c0:be:00:1a:44:99:73:90:ef:09:3f:32:ef:3d:3c:db:47:
3d:ab:b8:c2:60:5d:ba:96:35:b4:47:a6:b7:6c:cc:76:6c:b9:
53:d4:ed:b1:51:af:eb:97:7a:46:eb:5f:d1:08:de:80:a4:8a:
a3:f8:cd:2d:5e:89:16:f3:cc:26:d2:57:55:93:3b:78:ac:d4:
6d:b3:db:8e:30:a5:d1:8e:2a:6c:cc:f7:34:e0:fb:74:f8:a5:
0f:a1:17:30:9d:9e:e9:71:d9:30:15:b8:73:52:38:98:91:d1:
56:25:44:58:7a:4c:2a:a8:c0:4a:0c:44:ad:fa:97:10:1e:6b:
04:30:55:38:e5:f8:94:42:8b:08:e9:3c:36:7d:3b:df:49:35:
a7:e7:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-ams.rpki-client.org