Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RQQ8jQY4DxIYwMkQ_-Lem9WPzDs.roa
File: RQQ8jQY4DxIYwMkQ_-Lem9WPzDs.roa (raw, json)
Hash identifier: NfNv5E+4J8KhttzGTmSXtgTRh7J8CfZfKl3IG9zZi8E=
Subject key identifier: 45:04:3C:8D:06:38:0F:12:18:C0:C9:10:FF:E2:DE:9B:D5:8F:CC:3B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01821F6EAEFA238EA7C2D9E68F8BB447F6E6
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RQQ8jQY4DxIYwMkQ_-Lem9WPzDs.roa
Signing time: Thu 21 Jul 2022 06:25:23 +0000
ROA not before: Thu 21 Jul 2022 06:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 195.180.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:6e:ae:fa:23:8e:a7:c2:d9:e6:8f:8b:b4:47:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 21 06:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45043c8d06380f1218c0c910ffe2de9bd58fcc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:78:4c:de:00:e0:e9:0f:ac:cb:82:73:b6:
d1:5b:35:5f:7e:75:9a:83:8e:9d:07:56:3e:d9:68:
b3:48:d3:5f:9b:3e:46:89:72:c4:db:97:6f:7a:82:
ca:ee:6e:2b:50:80:54:f7:76:04:01:0c:1b:2d:27:
b1:61:a3:f9:b0:2b:2d:39:9b:49:4d:9a:55:6f:04:
9d:dc:38:86:34:a0:65:4c:6d:37:e9:9f:bf:a6:93:
ae:c6:86:a0:4c:61:12:fc:02:e4:1e:a6:df:98:21:
11:d7:ae:ce:da:67:ba:bf:d4:62:e0:0d:2f:e7:2e:
80:33:f4:c2:d2:9c:19:56:93:bc:91:bd:a3:17:80:
76:45:8a:5d:23:c8:c7:be:3a:e8:c7:ba:9a:21:61:
3d:3c:e7:04:07:0f:5a:b9:fa:f2:29:4c:a2:7f:81:
64:5e:99:44:b1:90:69:1f:f4:71:7b:29:54:8e:32:
cd:fb:78:e6:3d:29:c2:59:d5:74:5a:d4:45:3e:32:
9a:e7:4a:30:e9:dd:52:e1:92:89:31:cd:f0:8c:fd:
45:70:b8:cb:e5:f4:0b:43:8a:d5:52:c9:bf:93:0d:
43:4d:58:e8:06:5e:bc:b0:fe:d7:0f:f2:52:98:ed:
df:3d:e8:73:32:6c:1b:09:18:80:1b:25:5d:38:0c:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:04:3C:8D:06:38:0F:12:18:C0:C9:10:FF:E2:DE:9B:D5:8F:CC:3B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RQQ8jQY4DxIYwMkQ_-Lem9WPzDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.191.0/24
Signature Algorithm: sha256WithRSAEncryption
10:be:35:a5:e0:72:a5:d0:f0:e4:b1:f4:aa:55:4e:1a:e0:b4:
77:1d:4e:3f:5b:66:8a:59:26:4f:af:94:4c:7c:8f:13:e6:50:
08:09:d3:cc:c6:05:a6:ff:00:41:45:c4:f6:86:6e:03:43:2a:
ce:b1:5d:47:a7:84:cc:19:be:4a:aa:8d:75:80:fc:19:d2:80:
3b:14:08:b6:24:41:5d:af:b6:07:b6:57:e6:af:c0:47:1a:85:
95:00:df:a3:c8:b0:01:75:f7:c4:30:84:7e:74:b6:9e:e1:46:
87:86:01:28:37:aa:95:c5:f3:dd:a9:60:af:fb:6e:cf:26:57:
ee:6b:ba:ea:65:03:01:a9:4e:fe:7d:99:2b:ae:73:5f:ae:ef:
bb:e9:6c:13:c6:94:30:39:9d:7c:d9:ed:1f:c9:ca:1e:49:e9:
49:43:30:67:54:9a:2b:a9:ae:9d:bd:fa:d3:8c:46:cd:e4:dd:
64:b3:b7:62:31:19:ae:f5:c7:eb:34:e8:45:34:d6:c0:18:17:
21:89:17:9a:ee:fd:ed:26:6b:83:3e:a2:6b:fa:ce:e3:bc:4b:
f6:73:27:68:36:3a:e3:4d:79:51:cd:e7:67:3c:ef:a8:ab:ee:
ec:c4:b4:a2:e2:58:01:9b:90:82:9f:85:1f:7d:e9:7c:a5:47:
55:d1:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org