Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/yPtwAUS49VCKwjiMSQT74addjrQ.roa
File: yPtwAUS49VCKwjiMSQT74addjrQ.roa (raw, json)
Hash identifier: DNfUt6WcrWsRyqTxiSGOq1e417VKYpj/MSEDkXgtfyg=
Subject key identifier: C8:FB:70:01:44:B8:F5:50:8A:C2:38:8C:49:04:FB:E1:A7:5D:8E:B4
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 051C08C1
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/yPtwAUS49VCKwjiMSQT74addjrQ.roa
Signing time: Wed 08 Jun 2022 16:32:02 +0000
ROA not before: Wed 08 Jun 2022 16:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210073
IP address blocks: 195.7.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85723329 (0x51c08c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jun 8 16:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8fb700144b8f5508ac2388c4904fbe1a75d8eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:96:8e:6b:c0:24:85:9f:dc:ed:b3:5c:06:
8b:27:d7:d8:20:a8:5d:f3:3c:ae:d6:f9:14:f6:10:
bf:cb:c6:b0:05:d1:80:52:0f:16:d2:66:67:5e:23:
15:76:b6:a0:e7:9f:1c:2e:a1:9b:e1:1a:c1:ea:48:
9a:83:82:a5:f2:b2:c7:c4:b3:23:f7:36:90:7d:20:
b7:3a:94:21:b8:1f:2d:df:e1:98:95:87:28:01:4e:
52:4a:9c:7d:b7:d0:40:72:5c:b6:63:ff:9a:93:a4:
ac:1f:f9:64:06:f9:44:b6:13:61:f3:9a:05:bb:4f:
9b:d2:60:81:19:f4:e6:8e:23:fd:19:92:cc:30:4a:
68:db:36:3a:06:37:e4:85:fe:e1:69:98:34:ea:e0:
87:8f:c8:ce:72:b0:e3:b8:55:07:be:3a:33:14:01:
91:2a:9d:88:0e:68:8f:42:0e:5f:a4:d4:52:9b:ea:
46:af:6e:76:b9:6d:b5:60:6d:8e:6b:bf:96:79:b9:
a5:63:e5:18:b0:f2:fe:95:ac:d2:65:fe:2b:c0:4c:
1d:aa:c1:83:20:c9:3a:5c:45:66:33:5f:a2:87:4d:
09:c4:d2:0a:3b:c2:40:97:47:8a:8b:c7:ef:98:01:
79:60:d0:0f:bc:fb:2e:05:b4:e9:10:b3:fc:08:02:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:70:01:44:B8:F5:50:8A:C2:38:8C:49:04:FB:E1:A7:5D:8E:B4
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/yPtwAUS49VCKwjiMSQT74addjrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.14.0/24
Signature Algorithm: sha256WithRSAEncryption
29:31:51:5f:5a:dc:b9:99:46:3b:7b:8e:44:f7:c0:6d:3d:78:
46:a5:2d:fe:7a:68:9d:10:f6:cc:42:fb:df:c0:18:87:29:71:
13:94:cd:8f:63:f5:81:c7:33:ae:c5:8c:0d:45:7d:74:25:ac:
53:99:66:2d:7b:a3:10:77:e0:83:15:c8:ab:07:d2:fd:f4:9e:
9a:05:3a:10:27:bc:d6:6c:84:b2:a7:c4:34:cb:c9:97:12:98:
d7:fe:5c:29:f1:82:2f:b9:1f:ed:9e:77:7b:f4:27:05:6c:c5:
fd:26:01:56:fa:df:f4:7b:f6:8e:33:bc:2f:a5:75:59:d9:10:
10:43:58:b2:f9:dc:bc:ea:f2:8c:04:a7:47:ef:e6:dd:bf:6a:
c8:1e:50:cd:a8:bb:ac:3e:a3:f1:11:2d:f8:21:46:f3:8b:3e:
91:c5:24:53:9c:f2:89:7e:43:e4:1d:0f:8d:64:98:c0:62:5f:
51:3d:80:92:5d:c1:f4:4f:cb:90:7b:e8:88:30:29:28:54:eb:
ee:62:89:f2:bf:b2:0a:6e:9d:d0:dd:b6:c7:f2:d2:d0:3d:8d:
6f:0f:90:b8:0e:75:c4:d8:1b:cc:85:cc:e9:c3:d1:77:cb:46:
61:a2:0b:ad:7e:0a:1d:4c:ed:64:86:e2:32:a1:aa:37:20:35:
6a:12:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org