Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/UlXEsEj9RRjQHKVyNP7-beSF8Rs.roa
File: UlXEsEj9RRjQHKVyNP7-beSF8Rs.roa (raw, json)
Hash identifier: AFD/0dtU62LDCTRd/gWPjZqC53FjgT9hcPEFgRIwl3Q=
Subject key identifier: 52:55:C4:B0:48:FD:45:18:D0:1C:A5:72:34:FE:FE:6D:E4:85:F1:1B
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 021DEC94
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/UlXEsEj9RRjQHKVyNP7-beSF8Rs.roa
Signing time: Sat 01 Jan 2022 13:05:26 +0000
ROA not before: Sat 01 Jan 2022 13:05:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32787
IP address blocks: 195.225.135.0/24 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35515540 (0x21dec94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Jan 1 13:05:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5255c4b048fd4518d01ca57234fefe6de485f11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:75:24:5f:4e:90:ae:92:aa:6c:4f:9c:5a:
81:13:ee:2e:f2:d7:b3:1c:68:9f:a4:13:e6:6e:55:
e7:49:b1:d7:58:44:71:50:14:96:77:ed:65:ac:13:
a9:09:d6:96:a3:c5:f9:4b:22:dc:24:9a:be:f0:aa:
98:cb:06:81:83:25:ca:f3:ce:5b:eb:5d:f7:24:e2:
7e:aa:a3:11:a2:27:82:df:23:c2:03:da:74:f8:5c:
c3:a8:b4:ee:fd:f1:b3:7d:18:37:12:e4:52:47:e9:
58:e0:d4:3c:08:62:5f:7c:a9:65:3e:f4:c2:05:27:
cf:ff:59:04:67:5e:e4:a7:b0:26:da:45:7a:21:9e:
f6:af:45:65:97:a0:44:e6:5d:53:fa:e5:1c:db:af:
f7:0b:4d:43:1e:f2:e9:ae:72:19:37:80:88:30:05:
7c:89:df:de:2c:0e:2f:96:07:52:05:52:1f:f1:46:
b1:46:8e:c4:ed:04:58:a6:2a:fb:cc:0e:45:d3:be:
03:a0:1d:1b:93:58:19:b4:36:2d:c7:be:b2:66:0a:
85:57:5c:2e:d5:bd:f5:91:8f:96:af:61:f5:10:47:
c4:45:1b:2f:00:14:5e:7c:98:63:23:99:31:ca:28:
5f:09:fc:69:d8:db:aa:34:66:4a:30:0a:d9:51:9d:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:C4:B0:48:FD:45:18:D0:1C:A5:72:34:FE:FE:6D:E4:85:F1:1B
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/UlXEsEj9RRjQHKVyNP7-beSF8Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.135.0/24
Signature Algorithm: sha256WithRSAEncryption
48:af:80:d3:47:00:37:44:ea:d0:5a:e5:2f:21:9b:bb:91:8e:
c3:bf:82:74:2e:5d:aa:91:c4:f7:30:48:3b:2c:65:bd:e4:58:
4d:66:db:52:47:13:14:90:a6:0e:24:e0:b8:e3:c2:1b:2b:70:
10:3f:06:94:9d:9d:46:3f:06:4d:49:fb:bf:7a:15:a9:5a:c9:
73:39:d2:cf:19:4e:e5:23:5b:e8:6e:70:fb:23:1a:5e:64:ce:
dc:b1:18:bf:7b:a2:de:d2:67:53:0f:30:7b:f9:c3:6c:d0:6c:
a4:55:17:01:03:6a:e1:d2:ec:a5:ea:9b:48:aa:f9:de:a2:bd:
3e:e6:0c:f3:5f:fc:ad:82:77:b1:6b:0f:db:36:c8:ce:09:b4:
38:71:00:b6:03:e9:7f:18:11:e9:2a:8f:f1:55:0e:1a:66:78:
97:bb:07:d7:c8:2b:70:22:31:8d:31:f9:1e:27:5e:17:d1:b2:
22:96:e9:c0:73:c4:12:2c:a3:fd:36:a5:e1:44:59:a1:e1:a6:
88:33:3e:4d:78:63:a5:aa:d4:f9:18:11:6d:d6:2e:2d:a0:da:
49:e7:d3:f9:51:42:61:dd:07:df:51:57:78:4c:25:b1:df:31:
ca:d5:d7:35:14:31:6f:0d:f1:70:b2:88:5c:c6:cf:45:eb:4c:
06:ac:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:45 2024 by rpki-client on console-fra.rpki-client.org