Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wK-B_Hsa1gWmUGS40Ocg_EaMxys.roa
File: wK-B_Hsa1gWmUGS40Ocg_EaMxys.roa (raw, json)
Hash identifier: BymAINqybJgyiQBI7DcX3SBE9bpr0ppreIbQmAEuvWs=
Subject key identifier: C0:AF:81:FC:7B:1A:D6:05:A6:50:64:B8:D0:E7:20:FC:46:8C:C7:2B
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0107F854
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wK-B_Hsa1gWmUGS40Ocg_EaMxys.roa
Signing time: Sat 01 Jan 2022 00:59:30 +0000
ROA not before: Sat 01 Jan 2022 00:59:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51699
IP address blocks: 194.28.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17299540 (0x107f854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0af81fc7b1ad605a65064b8d0e720fc468cc72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:6f:b9:f6:3d:cb:3b:8d:7e:99:cd:aa:a9:
c8:74:a2:44:c1:0b:9a:af:94:8e:00:0c:ac:70:2d:
71:6e:48:a6:1c:35:52:30:66:c2:79:c4:9c:c8:f3:
fb:1a:3b:16:a4:9b:f5:9f:db:e5:a7:df:49:9b:08:
d2:cd:1d:31:1f:fb:c9:71:48:f5:d8:f9:c6:3a:97:
c9:e7:62:6e:09:71:b4:0b:0c:9b:92:21:ce:c0:f9:
72:cc:14:45:b7:b0:75:ef:74:f5:c8:d7:1b:ec:41:
d3:58:c3:1a:ad:6d:b9:f4:62:03:1c:55:52:33:e7:
09:20:8b:93:40:8a:b2:fc:7e:2e:91:ef:c8:a1:7c:
bb:72:b7:df:9f:cb:69:1a:13:49:96:25:39:21:c4:
33:13:ce:28:5b:71:3d:d1:f9:be:cf:ca:33:6c:dd:
fe:9b:f5:63:f8:a8:f1:e0:88:59:4e:2b:44:cf:5f:
e6:17:15:69:51:c4:77:4d:05:96:89:19:c0:ca:d2:
96:1e:ac:8e:6e:60:87:30:cc:8d:49:bd:fb:a7:60:
45:60:8e:cc:dc:e1:21:08:8b:7a:f8:96:4b:88:54:
dd:d6:da:7f:f0:dd:42:cc:ba:af:22:43:f7:3b:31:
1a:14:9d:bb:0b:19:7b:2b:1c:11:02:6d:d1:b7:0d:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AF:81:FC:7B:1A:D6:05:A6:50:64:B8:D0:E7:20:FC:46:8C:C7:2B
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wK-B_Hsa1gWmUGS40Ocg_EaMxys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.96.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1d:a0:c5:43:6a:0f:e3:17:6d:21:23:31:40:8d:ac:b4:55:
58:60:35:48:46:86:a8:e1:4b:41:37:eb:95:a3:86:e0:45:25:
b5:f2:1b:b3:f7:c9:0f:15:c0:1a:bd:8f:96:a3:4a:b6:d9:87:
b5:9c:a7:16:75:55:50:7c:da:4c:73:67:f7:c2:1f:42:e6:43:
31:79:ce:4c:3c:ff:9c:67:8d:ea:a2:ed:c9:eb:ca:34:69:96:
c2:31:45:f1:76:be:2a:08:da:0b:f9:21:a9:5a:26:7d:40:0f:
05:ab:5c:a1:78:5a:7e:90:0a:6f:b9:07:85:4d:f2:9d:f8:7f:
0d:94:31:65:e5:e0:1a:65:0b:eb:6d:b7:e9:8b:a5:aa:41:64:
4f:4f:d5:df:47:81:b6:53:10:d0:73:f1:e9:9d:4b:03:32:0a:
32:2c:69:b5:04:4b:b8:f5:43:df:bd:05:b4:b7:2c:e7:8e:8e:
48:b2:48:1f:d6:e2:07:1e:2c:bb:2b:ba:3d:1c:fb:12:93:c5:
9d:37:4b:2e:1b:64:e3:82:c1:90:cc:19:37:01:f4:59:f5:d6:
f8:1f:23:0a:a4:84:83:d0:fe:af:9a:0d:27:9d:76:c7:f1:18:
b0:5b:02:6c:52:6b:19:dd:8a:4c:54:08:c0:3f:86:45:7d:62:
8b:1d:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:37 2023 by rpki-client on console-fra.rpki-client.org