Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/z5H8r1vXvGsg_wK9tvnSRXPFhAo.roa
File: z5H8r1vXvGsg_wK9tvnSRXPFhAo.roa (raw, json)
Hash identifier: uqKAfncFmmegalYPZYA6b+60nrOqZb/FjWwL+JpjCpY=
Subject key identifier: CF:91:FC:AF:5B:D7:BC:6B:20:FF:02:BD:B6:F9:D2:45:73:C5:84:0A
Certificate issuer: /CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Certificate serial: 0185625AE3746E23C072081BE73FA8E0CEE2
Authority key identifier: AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/z5H8r1vXvGsg_wK9tvnSRXPFhAo.roa
Signing time: Fri 30 Dec 2022 09:26:41 +0000
ROA not before: Fri 30 Dec 2022 09:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42356
IP address blocks: 195.200.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:5a:e3:74:6e:23:c0:72:08:1b:e7:3f:a8:e0:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Validity
Not Before: Dec 30 09:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf91fcaf5bd7bc6b20ff02bdb6f9d24573c5840a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:fd:d2:eb:e1:64:6d:23:f1:ab:68:17:90:
46:00:d1:bb:8c:32:a9:4d:12:3f:3b:5d:a1:64:73:
1c:42:a4:97:24:60:7d:3d:95:cf:e2:76:f9:c1:9b:
ea:70:4f:18:0e:27:c4:b4:66:fe:fa:c3:47:2a:e1:
5d:f0:2a:07:6a:09:2d:b0:f9:da:a0:76:d9:c4:e1:
c0:e7:36:5d:57:6f:86:f0:5f:d4:84:c3:82:76:c0:
a1:37:62:81:bd:c7:c3:9e:3d:8b:8e:46:38:b9:8f:
6b:93:f3:0a:f8:33:2b:b1:04:b0:32:ec:4a:e3:39:
28:9d:d0:2c:7e:ef:b8:18:f5:9a:34:3f:3e:af:2d:
8c:33:b6:69:93:f1:44:a3:df:bd:04:a4:64:e5:ad:
3d:da:46:1a:72:cf:ae:0f:b5:69:be:ba:5d:2b:27:
f0:46:07:b1:42:77:17:0c:d7:94:f9:c3:54:35:dc:
7c:26:4f:56:a8:28:3d:ef:32:09:4b:de:99:a0:15:
a2:9b:7e:e1:31:04:da:10:ca:3a:1c:bd:70:a8:a1:
90:97:e5:9b:b2:8d:7f:bc:9b:13:ea:bc:e9:e7:98:
fd:28:1e:c3:9d:7e:db:0c:7f:08:96:70:47:ab:8a:
00:8e:b8:9c:63:33:1f:7f:ce:65:39:e8:8b:32:65:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:91:FC:AF:5B:D7:BC:6B:20:FF:02:BD:B6:F9:D2:45:73:C5:84:0A
X509v3 Authority Key Identifier:
keyid:AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/z5H8r1vXvGsg_wK9tvnSRXPFhAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.208.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b5:ae:71:f8:e2:f4:3b:9e:af:3b:58:c4:67:e6:e4:0c:b8:
15:4d:8e:bd:9f:43:44:c6:f4:af:a7:76:b2:26:13:81:d9:57:
ef:5f:b4:3c:8c:83:86:40:32:51:d8:a1:b0:08:f5:9d:55:fb:
5c:e0:d7:11:65:8c:33:8a:8a:84:f8:ad:6f:79:8d:21:f9:b6:
7a:05:39:3d:11:92:3b:a4:12:60:79:82:f1:9f:d7:bf:61:90:
2b:7a:cd:d2:da:85:4c:74:29:a2:18:f4:8e:d2:07:aa:0a:51:
cf:f3:e4:ba:bd:71:3d:a9:5a:a5:d7:71:94:08:35:23:88:28:
78:f5:22:cd:7b:c0:e5:34:fc:97:a5:7f:e9:51:a9:2c:3e:74:
e6:85:7d:0d:c7:1b:e6:5f:fa:a6:36:51:b8:5d:1d:dd:8d:cf:
da:e7:e1:a3:a4:27:e5:a3:c3:40:8e:76:96:9c:82:f2:eb:1f:
4e:2c:f4:e3:7f:e4:2f:70:bd:e1:ef:d2:29:64:f2:4d:09:3c:
e4:24:9e:32:1f:c3:85:cb:d9:16:98:9f:d5:15:a8:4d:78:0f:
0c:3d:77:17:aa:f6:f7:68:a9:6d:53:3d:bb:4b:f3:34:bb:21:
a2:cd:1c:94:0b:e2:b8:54:13:7e:d6:b8:14:98:09:53:20:71:
b4:f9:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org