Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/8aMYPTdKzYKyCm-Zj7BUX-R2K5E.roa
File: 8aMYPTdKzYKyCm-Zj7BUX-R2K5E.roa (raw, json)
Hash identifier: kjyVGQu/99cI+N1V+6znmlxfb6WyzOtflyGzskUMk8o=
Subject key identifier: F1:A3:18:3D:37:4A:CD:82:B2:0A:6F:99:8F:B0:54:5F:E4:76:2B:91
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 0D8A512B
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/8aMYPTdKzYKyCm-Zj7BUX-R2K5E.roa
Signing time: Sat 01 Jan 2022 04:58:29 +0000
ROA not before: Sat 01 Jan 2022 04:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35547
IP address blocks: 188.119.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227168555 (0xd8a512b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Jan 1 04:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1a3183d374acd82b20a6f998fb0545fe4762b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:58:f7:d5:cc:87:58:72:36:59:05:23:ec:
bd:49:64:52:1c:16:5a:a2:33:00:02:de:40:1f:de:
c2:af:35:bc:cb:8f:7c:c6:f9:90:c3:64:e3:7c:b7:
fb:a5:25:a0:6d:d7:ea:59:1f:59:c6:e5:61:94:fd:
2f:fa:9b:97:f8:75:f9:65:74:4d:cc:be:91:38:d0:
fd:26:8f:07:08:90:1b:67:a4:64:cc:87:0d:c9:6a:
1c:cc:c2:6d:ca:49:86:d9:f4:a0:3c:fd:50:3a:84:
d9:5e:4d:19:cb:e4:b0:c0:92:47:50:25:29:ca:9e:
72:01:c5:22:51:25:5a:5e:01:aa:e0:a6:e9:b6:bb:
c8:36:4b:ff:ab:9e:d6:b7:83:57:f0:ad:76:58:5a:
11:c8:e3:e2:2d:c9:d6:ec:ff:c7:d2:c1:79:b3:63:
05:24:6e:b9:ed:be:cc:6c:de:01:8b:c3:40:3f:26:
31:71:fe:7e:76:11:93:52:70:b7:d6:1e:1d:13:37:
ac:32:b2:d4:e9:fc:5a:4e:d0:73:8a:c2:88:f9:3b:
3b:5e:f3:4d:ae:41:cb:2b:97:24:8f:76:eb:6c:ac:
ca:25:33:d6:16:38:1f:91:fc:0b:d2:1c:5e:1d:c1:
76:d1:b1:84:05:b6:c3:53:e2:01:f0:ac:5a:c3:cf:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:18:3D:37:4A:CD:82:B2:0A:6F:99:8F:B0:54:5F:E4:76:2B:91
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/8aMYPTdKzYKyCm-Zj7BUX-R2K5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.35.0/24
Signature Algorithm: sha256WithRSAEncryption
92:47:2c:f2:b1:cd:ca:92:89:aa:0f:c7:44:75:6d:b0:c2:cf:
80:23:25:e9:ac:83:8a:ed:fa:f2:16:49:eb:e5:54:b9:1f:d9:
23:d4:95:e5:49:4d:70:43:c0:9f:76:34:fb:5d:dd:3a:d7:6f:
ee:1b:60:11:73:32:72:cf:4f:19:cd:cf:6e:45:39:55:71:b3:
51:ad:33:89:4a:08:a1:59:6f:4a:81:03:9f:5a:f9:72:10:0d:
65:b7:13:dc:d0:7e:72:15:6a:b2:c5:51:b0:2d:6d:6f:04:8b:
e2:39:ba:f9:c5:bc:0a:05:ed:fc:d4:3e:0e:8f:41:bb:6a:6e:
08:35:55:fe:97:05:37:4d:cc:53:19:e1:fb:92:48:13:3c:a1:
96:ef:9f:4f:e2:af:94:26:8a:a5:f9:f1:a1:43:77:94:52:bd:
f5:b6:13:a2:9f:d2:0d:34:c2:a7:fc:e1:f1:f4:87:92:73:ee:
05:89:e0:38:06:d4:21:ff:1e:36:a1:3f:95:c0:ed:9b:cb:a8:
78:b6:c7:2b:d6:f1:31:57:31:f5:4e:85:60:75:eb:16:d0:c1:
23:cc:4a:ac:92:96:63:f4:9a:8a:4a:2d:7a:99:9b:05:81:ee:
a5:31:8a:46:85:8c:5f:c4:18:09:13:81:8c:3b:53:83:c2:93:
64:e9:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:22 2024 by rpki-client on console-ams.rpki-client.org