Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ElTljN6VBfEvg1xbjVDW8Xa1eMQ.roa
File: ElTljN6VBfEvg1xbjVDW8Xa1eMQ.roa (raw, json)
Hash identifier: 5TMevSj841WOL4QhOQ0pyfkfBsd46uEYW/BIn5d8XeM=
Subject key identifier: 12:54:E5:8C:DE:95:05:F1:2F:83:5C:5B:8D:50:D6:F1:76:B5:78:C4
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 080C6B22
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ElTljN6VBfEvg1xbjVDW8Xa1eMQ.roa
Signing time: Sat 01 Jan 2022 15:04:38 +0000
ROA not before: Sat 01 Jan 2022 15:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15642
IP address blocks: 194.125.232.0/24 maxlen: 24
194.125.232.0/22 maxlen: 24
194.242.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135031586 (0x80c6b22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Jan 1 15:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1254e58cde9505f12f835c5b8d50d6f176b578c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:eb:3d:8a:bf:6f:77:0f:c8:e5:61:58:ff:
90:9d:00:af:0f:f9:bd:ae:36:c1:91:c2:6e:b9:30:
8e:af:f7:fc:69:a4:7f:2f:67:f9:11:4e:f4:23:4d:
1a:d3:8b:a4:03:0f:ca:e3:2b:3c:12:91:a9:a3:75:
bc:4e:c6:3d:12:5e:f5:25:15:b3:38:be:df:f1:b5:
72:dd:41:90:f6:12:16:06:1b:7c:7a:5a:a1:d8:1d:
b3:7c:23:f3:13:c1:c8:fe:3d:f2:90:28:95:25:47:
ef:4e:86:97:62:d8:4e:02:25:3d:49:37:e2:bb:89:
fd:30:5b:bd:6d:fb:11:45:13:c2:2d:38:68:fa:cf:
82:fa:53:f5:86:46:4d:94:38:7a:c7:71:2e:3d:4f:
ab:14:f1:00:39:19:a8:94:66:4d:b0:e1:af:50:68:
9c:db:e1:20:06:69:46:88:df:7f:d3:6d:17:19:c5:
ec:0f:bf:20:4f:94:01:40:68:f8:76:21:f2:d6:44:
d1:a7:01:01:b6:0c:b7:0a:b7:11:33:8e:55:3a:9d:
84:03:aa:94:a6:85:96:80:e6:5f:ea:4b:3d:d2:7f:
ab:01:45:2e:cc:cb:a7:85:f2:8c:69:3e:6e:c6:9f:
3d:00:23:ef:63:7f:ae:57:5d:a4:25:0b:87:2e:59:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:E5:8C:DE:95:05:F1:2F:83:5C:5B:8D:50:D6:F1:76:B5:78:C4
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ElTljN6VBfEvg1xbjVDW8Xa1eMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.232.0/22
194.242.32.0/24
Signature Algorithm: sha256WithRSAEncryption
31:29:e9:bf:0d:2c:a1:a2:30:0f:47:94:dd:be:37:39:4f:24:
af:41:ef:6e:ea:c3:43:31:73:99:65:f7:4e:b7:3b:8e:6c:bb:
a0:33:e1:fa:72:c4:03:0d:13:b7:a7:c8:32:0b:82:bd:a9:90:
90:29:ea:a1:e3:4b:92:de:47:09:86:26:07:aa:57:ac:f5:7d:
c5:49:c6:1e:df:f1:a9:ad:94:a9:b8:b9:6f:d1:3a:5f:d4:ef:
06:00:1b:24:52:7e:1d:58:72:b8:43:e7:5e:06:f9:50:07:92:
68:a5:62:be:7a:1c:59:92:39:29:14:c8:bf:53:5b:f9:9e:01:
fe:56:7c:c2:7b:0b:14:ec:a4:18:03:09:0d:0f:30:86:6d:0a:
1a:7f:d0:eb:13:a0:46:54:24:9d:d7:37:f0:fe:02:51:ba:9c:
22:6c:9b:7c:6e:4f:1c:81:b8:b2:13:bc:b3:60:cb:0c:35:51:
ee:35:c6:c3:8f:21:5e:75:af:22:96:c7:d1:4a:0f:8e:75:e2:
e4:a1:eb:7b:7e:0c:c0:f8:a0:71:d8:25:26:56:fa:1a:42:e3:
59:cf:43:cf:59:ed:90:fd:3a:fc:dc:a2:07:96:d0:2d:a8:8b:
85:e5:f5:19:cb:c0:42:b3:5b:a4:b2:98:fd:1e:7e:96:c6:9f:
0f:d2:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-ams.rpki-client.org