Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/jDcHFPU8tfg2Zy-ZWFF5n1UIcKU.roa
File: jDcHFPU8tfg2Zy-ZWFF5n1UIcKU.roa (raw, json)
Hash identifier: VnPyiS76DWFTodoFv83inoRiWtwoDOi5/NwLGvzOWTo=
Subject key identifier: 8C:37:07:14:F5:3C:B5:F8:36:67:2F:99:58:51:79:9F:55:08:70:A5
Certificate issuer: /CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
Certificate serial: C825A5
Authority key identifier: D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/jDcHFPU8tfg2Zy-ZWFF5n1UIcKU.roa
Signing time: Tue 26 Apr 2022 14:45:32 +0000
ROA not before: Tue 26 Apr 2022 14:45:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13116837 (0xc825a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
Validity
Not Before: Apr 26 14:45:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c370714f53cb5f836672f995851799f550870a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:59:d5:19:cb:82:2d:0e:50:97:8a:cb:e7:
d3:a9:98:1d:15:d9:3b:e2:af:18:b0:62:7f:ef:97:
11:45:77:7f:fb:93:c6:0e:3a:f2:4e:ec:88:7d:1f:
7b:6b:19:91:57:0f:ca:35:b5:14:68:3f:55:d9:b7:
ac:9b:3d:da:4e:86:c6:be:fa:37:6e:57:96:78:a3:
43:5d:da:d3:4c:28:62:c7:ab:89:04:75:67:7d:32:
5b:2f:9d:f4:1e:9e:33:94:ab:f8:22:57:92:61:40:
d8:b9:21:7c:57:a4:51:97:76:a1:9c:5b:db:93:71:
d5:e3:53:27:db:a7:0e:2f:13:0f:6c:02:8b:0e:3a:
2f:75:81:03:77:87:92:b9:8d:a1:e8:59:c2:31:6f:
93:09:9c:e8:54:00:65:e9:fe:e1:e7:09:d8:ba:c0:
e8:9c:cb:20:c2:16:b6:f2:73:e2:c2:72:3a:63:25:
fb:5a:ed:79:f4:61:42:4f:f1:9a:f5:c7:e1:b7:e4:
0a:5c:5b:8f:e5:6b:a9:4c:ff:80:33:5f:32:b6:09:
9a:61:9b:4d:57:bf:54:c1:c4:26:25:11:a0:db:17:
f7:8d:aa:e7:04:38:49:ad:d5:10:a2:32:77:70:16:
db:b6:ee:65:bb:41:a6:b3:bb:d4:32:8b:e4:7a:a6:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:07:14:F5:3C:B5:F8:36:67:2F:99:58:51:79:9F:55:08:70:A5
X509v3 Authority Key Identifier:
keyid:D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/jDcHFPU8tfg2Zy-ZWFF5n1UIcKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.117.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:08:ff:f6:fd:c6:06:a1:c9:c4:a6:d2:9c:be:36:50:bc:7d:
9c:ec:11:6c:f7:08:34:dc:64:45:c6:5e:86:24:20:bf:9f:72:
93:68:60:01:e9:c8:76:17:f3:78:19:d5:15:e1:33:74:7d:21:
17:11:91:a5:cc:ab:41:0d:8d:03:0b:c6:dd:bf:0e:be:e3:1b:
24:b7:ea:81:96:8c:bc:f4:17:70:c8:d5:ac:2a:ba:a8:58:eb:
a7:0f:53:73:c7:92:a2:88:5d:f2:c3:0f:b8:9f:f5:6b:f7:0f:
2a:70:a7:a4:37:ac:eb:c4:17:6f:47:77:c6:b8:3a:2f:04:25:
de:c3:de:7c:b0:0c:90:be:fc:06:7a:03:6b:8e:64:52:fd:aa:
9a:df:64:fa:21:49:0a:55:d2:6f:6b:09:8a:13:73:11:f0:42:
d2:df:41:fa:c8:b6:42:8c:e8:d8:4e:88:b0:13:34:2f:ba:3d:
1d:a5:b4:84:7a:43:3d:b3:52:f1:21:e0:de:32:89:da:a9:9d:
10:f5:04:87:ff:e5:14:24:65:b8:fb:f4:2e:e3:39:d7:bb:3b:
09:7e:f2:47:1f:fd:71:6a:15:1b:9c:f1:09:bf:96:1b:de:a4:
a6:9c:c0:84:20:0a:07:c9:cd:c7:48:6b:85:0c:a3:1e:41:f0:
66:00:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:05 2023 by rpki-client on console-fra.rpki-client.org