Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/tMkpRtCr4kfPJXRypNxYVERaYLU.roa
File: tMkpRtCr4kfPJXRypNxYVERaYLU.roa (raw, json)
Hash identifier: 43C1UfjgK0/kisIsZBOSs91pB5P4fzA8UpuxS+g6oWI=
Subject key identifier: B4:C9:29:46:D0:AB:E2:47:CF:25:74:72:A4:DC:58:54:44:5A:60:B5
Certificate issuer: /CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
Certificate serial: 023A7DA1
Authority key identifier: FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/tMkpRtCr4kfPJXRypNxYVERaYLU.roa
Signing time: Sat 28 May 2022 06:47:13 +0000
ROA not before: Sat 28 May 2022 06:47:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 188.95.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37387681 (0x23a7da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
Validity
Not Before: May 28 06:47:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4c92946d0abe247cf257472a4dc5854445a60b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:05:e1:a8:e7:9e:45:b7:08:ed:b3:3c:c1:
1c:a0:02:4e:30:42:8c:c2:83:99:f2:19:90:8e:32:
e2:30:5b:dc:70:da:50:7e:86:61:b6:f9:ae:4e:8d:
48:1e:9f:9e:03:4c:f8:32:28:0c:19:cb:c3:83:16:
4f:43:ed:3f:a2:8e:5e:d5:08:96:be:5f:fd:7a:86:
c2:69:19:c2:7f:1f:6d:3e:ee:ae:70:ea:5f:0c:a2:
97:a7:9e:62:00:6b:5f:77:3d:46:84:2d:a7:bf:a4:
ac:2c:f2:7a:e0:8d:0c:47:42:1a:34:39:b6:a4:22:
7d:e8:a3:e0:52:69:ad:32:4a:9a:b2:cc:51:fb:d8:
53:ac:be:bb:60:c6:54:94:a6:fc:c6:a7:8f:af:36:
0e:cc:48:a7:8d:ee:6c:6d:6f:a3:24:d1:e7:4c:18:
62:af:9b:1a:72:01:60:42:e4:80:e6:20:49:76:4b:
75:3c:6b:91:d7:d4:77:d1:48:b7:16:c5:e9:19:46:
d4:0a:e6:13:14:8b:fc:63:4a:6a:33:1d:fe:52:96:
ed:a9:29:5a:2e:32:d0:2d:7b:ff:47:b9:f3:33:8f:
cc:4c:5e:43:0d:9f:a2:b2:94:bc:8c:e5:f2:d3:07:
89:a2:61:99:f5:43:51:dc:d1:30:1f:19:1a:1f:30:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:29:46:D0:AB:E2:47:CF:25:74:72:A4:DC:58:54:44:5A:60:B5
X509v3 Authority Key Identifier:
keyid:FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/tMkpRtCr4kfPJXRypNxYVERaYLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1f:22:a8:f5:cf:4a:e0:6d:08:2b:20:4e:e1:c2:72:7f:63:
bf:3a:f3:d3:cc:ed:c5:d6:a9:a7:0b:b6:cc:d5:7c:f8:5e:95:
b1:d4:90:c8:bd:6b:3b:39:24:d8:f1:b8:3f:79:d7:6f:d9:2f:
0b:a5:13:cf:cd:48:bf:0a:c1:b3:f3:52:21:0f:41:a5:ea:13:
0d:90:4d:c0:75:7d:47:35:b9:11:41:f8:76:aa:33:77:6e:81:
09:ac:e2:bd:6e:6c:a0:6f:dd:6d:20:fe:62:35:3a:e1:87:e7:
e8:c8:72:70:72:75:56:5a:99:14:0a:02:2a:68:82:ee:76:d5:
67:c8:8c:cf:72:ac:b3:ad:db:ce:d9:92:19:9b:87:70:ef:0f:
c3:e2:9f:12:10:0f:30:88:9a:5a:79:6d:7f:c6:da:10:6c:67:
05:fd:e1:0f:2c:4f:62:62:bd:f7:6f:2a:df:5b:ba:0b:78:69:
0a:1b:fd:6b:0e:7a:a2:37:e9:43:96:f3:c0:23:f0:dc:ee:ab:
8f:b1:1a:4d:13:33:e1:b8:4a:f0:de:1c:1c:42:b6:8c:17:f4:
f1:85:27:a5:b1:d8:33:30:f2:28:e3:40:3b:37:59:17:b5:30:
2b:ad:60:dd:17:73:67:48:27:1c:ba:0e:b0:49:3f:33:df:89:
c5:cf:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:21 2023 by rpki-client on console-ams.rpki-client.org