Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7q8gPMiC_ARuux6RjvQ6oPtA4qE.roa
File: 7q8gPMiC_ARuux6RjvQ6oPtA4qE.roa (raw, json)
Hash identifier: FAhcaw8GAHAwHz6lqPGc9eVFfR9bN/lI97+pQwHxe0I=
Subject key identifier: EE:AF:20:3C:C8:82:FC:04:6E:BB:1E:91:8E:F4:3A:A0:FB:40:E2:A1
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CCA75BB
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7q8gPMiC_ARuux6RjvQ6oPtA4qE.roa
Signing time: Wed 06 Apr 2022 20:11:31 +0000
ROA not before: Wed 06 Apr 2022 20:11:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 195.252.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214595003 (0xcca75bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 6 20:11:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eeaf203cc882fc046ebb1e918ef43aa0fb40e2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:8c:82:16:ce:87:e8:b6:3f:a1:5f:a4:f1:
2f:78:da:80:49:e8:12:fa:3c:3f:27:ce:2b:35:05:
f3:0f:fb:82:31:5b:fb:41:5b:61:9f:7b:3c:e4:f1:
35:19:a9:26:17:b0:0a:c6:9f:80:df:2f:3b:eb:10:
94:94:26:32:88:d9:e5:29:08:a0:1c:98:f3:59:80:
1d:e7:73:e1:b3:1a:7b:e7:d9:2c:62:43:d8:46:e7:
5c:a3:41:d7:26:b0:5a:c1:04:cf:45:68:fe:87:a1:
f2:fa:04:47:28:95:16:d4:e7:8d:c1:ea:66:bd:b9:
dc:7e:04:db:cd:d7:e8:61:b9:a6:3d:8e:42:9b:51:
58:b3:bc:4c:b7:e2:f8:9d:06:fb:4e:73:5c:2f:48:
b8:60:bd:b7:cc:24:74:af:86:76:6d:32:b5:1d:a4:
43:41:e7:67:03:d7:57:d9:de:70:c0:e3:8c:f1:34:
64:0a:3d:62:02:e6:2f:11:da:55:3b:77:65:bd:c2:
bd:25:67:d5:d7:28:87:59:3a:40:6a:49:b2:14:ae:
5f:e7:c8:18:6b:80:2c:a6:83:a5:4c:73:7e:f5:32:
98:26:35:7a:3d:6c:02:fc:53:7c:db:6e:29:b0:7e:
e9:ed:64:72:8b:d3:dd:2a:be:48:4d:4a:4e:1e:b7:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AF:20:3C:C8:82:FC:04:6E:BB:1E:91:8E:F4:3A:A0:FB:40:E2:A1
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7q8gPMiC_ARuux6RjvQ6oPtA4qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:f2:ce:11:2e:b2:7e:fc:e2:42:16:77:28:d4:2b:b2:78:52:
9c:80:34:6e:26:43:6d:e4:cb:34:c7:35:68:6f:b8:02:30:0e:
69:31:68:4c:ec:d8:ca:21:b7:5d:21:f8:89:1a:28:56:68:d4:
7f:e6:f3:1f:38:7e:07:2e:3c:87:74:c4:3c:4a:09:4d:14:f2:
3c:5e:74:79:8b:f1:f0:c6:f1:f8:f4:c3:53:4a:26:b6:4f:32:
a1:65:8b:e9:3b:45:41:98:0e:ec:3c:5e:8d:63:a0:2b:c1:56:
a2:aa:be:e5:84:60:7a:93:d4:5b:cf:3b:4a:c2:95:53:a3:57:
32:7e:5c:39:49:47:03:e2:22:74:b1:54:97:ec:ac:03:0e:17:
3e:5a:b2:a2:5a:af:40:d2:f3:5d:41:04:aa:43:17:4c:67:44:
2b:0e:6c:09:35:d9:aa:1f:aa:80:4b:ac:1a:91:87:c9:9a:86:
a0:b3:b6:7b:0b:2b:3e:59:1a:3b:91:d3:e1:9a:14:c9:5b:8b:
da:65:c6:ab:dd:70:84:aa:1e:cf:cf:0c:1c:9d:09:2e:d3:71:
e2:d1:a6:ea:cf:1d:2f:b2:1c:7d:02:1c:98:dc:a8:01:1a:3a:
14:f9:8a:63:a8:02:50:77:87:97:04:1d:12:b6:6f:be:ec:c7:
a5:95:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:41 2023 by rpki-client on console-fra.rpki-client.org