Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/_q5mEwr1gqovOgTAIC9MqO8CK7U.roa
File: _q5mEwr1gqovOgTAIC9MqO8CK7U.roa (raw, json)
Hash identifier: VWisvCpKiXTLw6ksoxuIZpxIuKsH50LhELRWO1gBEHI=
Subject key identifier: FE:AE:66:13:0A:F5:82:AA:2F:3A:04:C0:20:2F:4C:A8:EF:02:2B:B5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CC8EFA2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/_q5mEwr1gqovOgTAIC9MqO8CK7U.roa
Signing time: Wed 06 Apr 2022 06:29:23 +0000
ROA not before: Wed 06 Apr 2022 06:29:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 266050
IP address blocks: 195.252.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214495138 (0xcc8efa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 6 06:29:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=feae66130af582aa2f3a04c0202f4ca8ef022bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:d9:40:0e:f1:ad:2f:83:21:e7:6e:43:52:
5e:ea:6b:39:41:35:8d:79:f6:91:c2:e0:b7:cd:34:
b1:ef:da:d6:4e:5f:a4:03:a1:69:10:b6:33:7c:0f:
5c:e8:78:28:bc:3b:e6:42:ec:50:26:cb:f9:ea:c0:
3a:11:1d:b0:ef:0a:28:dc:07:78:65:aa:fd:11:21:
11:5f:92:98:fa:fa:e7:13:23:5b:8d:37:62:e7:66:
9d:fc:4d:84:47:f3:2f:ef:50:e3:4f:bc:32:5c:db:
56:17:04:a0:92:6d:7c:34:4b:3b:5e:c2:f8:8e:36:
9b:75:69:4b:97:0a:40:ec:eb:58:20:35:81:51:15:
ef:e2:83:83:09:8b:51:f2:17:49:dd:17:26:38:b0:
54:5a:63:c9:70:6e:eb:94:56:e4:0f:55:fc:9e:b0:
bf:0d:67:80:52:b7:b3:41:11:a9:41:df:25:5b:2d:
2f:d4:68:3e:a7:a0:3e:c9:68:22:a8:b2:a2:41:a6:
ae:6d:f4:1a:eb:bd:c2:3e:03:8c:8f:00:b1:d3:a4:
91:5a:59:6c:99:d7:f5:2e:92:85:55:e3:c0:74:48:
2a:b0:d3:8f:75:81:05:66:6a:f1:93:aa:2d:b6:80:
0a:7a:2a:46:85:24:fc:3e:65:47:b0:83:9e:1b:d7:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AE:66:13:0A:F5:82:AA:2F:3A:04:C0:20:2F:4C:A8:EF:02:2B:B5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/_q5mEwr1gqovOgTAIC9MqO8CK7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ca:76:be:51:e4:6d:0b:f7:ad:4d:c1:ae:d4:c2:98:e5:4f:
7c:b4:a0:57:c2:a3:2a:95:48:56:34:51:35:02:13:5e:49:4a:
70:de:93:b0:35:a6:b6:8b:39:9f:d8:fd:ae:33:d0:49:09:86:
48:97:9c:5a:f1:28:7c:40:e2:6d:44:05:f1:5c:1e:89:1b:5a:
80:b7:92:44:e5:38:74:20:d0:c4:a9:0f:ed:b5:58:e1:bd:26:
d1:41:7a:10:51:6b:da:09:b8:cf:dc:2e:8a:5f:3c:aa:37:15:
63:98:d4:d3:c6:14:00:b5:42:62:31:9d:e0:61:47:95:2d:0c:
6d:5e:e8:7a:ae:08:3d:e1:6a:c7:0b:06:9d:8c:b6:22:83:28:
47:01:e6:7c:4a:81:f8:ad:d1:5b:20:cd:b2:88:8c:09:50:45:
65:16:f5:48:92:1b:33:ee:29:46:af:32:30:a4:8d:2c:9d:f6:
ef:6a:10:8f:c9:62:2b:67:08:cf:52:a0:13:35:88:73:e1:ef:
5e:66:09:d3:46:98:f4:ef:0b:a5:4c:5a:d5:3a:47:9b:e9:8a:
3f:e1:f1:dd:a0:3c:13:ab:de:98:4e:1b:a1:57:60:dd:d1:f7:
12:89:66:ba:75:a6:91:f2:f4:93:b1:6b:3e:b3:95:20:d9:99:
e1:f9:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org