Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IYVoHDeF3VIZtCsB03ZR3ad7e2I.roa
File: IYVoHDeF3VIZtCsB03ZR3ad7e2I.roa (raw, json)
Hash identifier: +QGdWzjkIo3C4DQwW6OTzRjChLua7K3LjpHbu+P20Kw=
Subject key identifier: 21:85:68:1C:37:85:DD:52:19:B4:2B:01:D3:76:51:DD:A7:7B:7B:62
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0184333AEB7F17CE24CA31FA816D1773D3F6
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IYVoHDeF3VIZtCsB03ZR3ad7e2I.roa
Signing time: Tue 01 Nov 2022 12:46:50 +0000
ROA not before: Tue 01 Nov 2022 12:46:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35478
IP address blocks: 195.252.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:3a:eb:7f:17:ce:24:ca:31:fa:81:6d:17:73:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Nov 1 12:46:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2185681c3785dd5219b42b01d37651dda77b7b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:12:81:47:5e:c8:b1:29:2a:53:32:f0:6f:
2d:fa:b7:5a:ba:62:dc:ca:65:07:b9:5d:49:87:01:
d1:fe:e2:d8:bf:bb:c1:13:2a:84:90:02:1e:97:4b:
33:c9:08:d4:35:0b:05:67:52:6f:66:45:5c:a5:12:
da:6f:b2:6e:cd:95:a6:41:53:57:1e:df:0f:60:6d:
01:ba:f4:f0:ba:67:d3:22:99:e1:94:39:8c:81:28:
c3:f7:b9:72:d5:7c:80:21:e7:bf:5b:1c:63:5b:b3:
e2:6b:6e:1c:53:6b:1f:91:44:af:59:91:c9:a7:cb:
77:97:4d:ea:ee:97:bf:95:7c:9a:0e:66:cd:8e:7a:
21:7c:c8:f2:12:77:6a:bc:2d:b0:69:61:c2:ad:c6:
c4:85:2d:bc:c3:c7:73:58:9b:91:ea:3d:e0:23:2a:
dd:65:65:e4:57:93:31:b4:07:c5:35:c1:f0:53:ee:
e0:3b:7f:2d:66:b1:2e:d0:86:12:eb:66:e7:64:28:
f6:82:b8:32:2a:d2:d0:07:7e:ed:75:b3:f8:62:1f:
9a:e7:d0:4c:1b:72:17:af:b0:ac:ff:ca:45:7c:25:
15:34:e1:d5:9a:9b:19:41:f0:5f:47:79:89:10:15:
79:ae:fc:94:a6:4d:33:a3:2b:a5:0c:0a:f7:81:d6:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:85:68:1C:37:85:DD:52:19:B4:2B:01:D3:76:51:DD:A7:7B:7B:62
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IYVoHDeF3VIZtCsB03ZR3ad7e2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:4b:48:60:e3:af:ed:c3:df:42:17:af:12:6d:c3:e1:d2:45:
ea:22:25:bf:fd:a3:ee:6c:21:29:f2:a2:bf:69:4f:33:24:75:
de:a5:02:7b:ab:6e:82:76:e5:1a:df:01:8e:f1:51:e6:ff:af:
06:89:cb:a7:c0:15:24:e9:7f:42:20:61:69:d7:78:d9:f4:67:
74:25:6b:98:74:fc:9e:1a:f4:e4:9b:87:1f:cc:16:a5:3e:aa:
e4:56:6a:4c:e6:9c:85:50:72:84:7b:92:04:3f:4c:fe:61:54:
59:c6:58:f0:fd:fd:ae:71:2d:76:b4:79:26:7c:ef:4a:93:ea:
d7:8d:be:4d:ec:27:56:c6:3f:ec:5f:dc:f0:05:e8:e6:51:e0:
82:89:b7:93:c0:75:b6:ec:25:2c:fa:0e:38:2e:2f:08:e0:63:
c3:0d:9f:1e:61:f7:90:8a:1d:64:af:06:a3:fb:fb:72:43:88:
f7:ee:83:24:bb:fd:fd:9f:4b:89:64:73:d5:29:35:2a:d4:38:
91:da:38:0b:c6:08:f5:5e:28:c8:1b:65:c4:40:c3:10:1d:ac:
e9:0a:d4:11:2d:b0:dd:67:96:bd:f5:68:fa:0d:d6:5a:56:3c:
d6:48:26:a6:b0:fe:fb:4f:51:ff:6f:f8:c7:63:21:9e:1a:4c:
39:01:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org