Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/0PgEgLe6TqLhCbJMLnludRsfSE0.roa
File: 0PgEgLe6TqLhCbJMLnludRsfSE0.roa (raw, json)
Hash identifier: ZwK+GyeOiNBa7yb3+OO8BdY8fSdEbMnDE5HRJXca5Pw=
Subject key identifier: D0:F8:04:80:B7:BA:4E:A2:E1:09:B2:4C:2E:79:6E:75:1B:1F:48:4D
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0657BA
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/0PgEgLe6TqLhCbJMLnludRsfSE0.roa
Signing time: Wed 08 Jun 2022 13:24:03 +0000
ROA not before: Wed 08 Jun 2022 13:24:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12310
IP address blocks: 195.245.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415674 (0x657ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jun 8 13:24:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0f80480b7ba4ea2e109b24c2e796e751b1f484d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:40:88:2d:60:71:ed:a9:85:2e:a8:1c:4f:
ff:35:d4:ff:4e:3a:4f:d8:de:86:8c:cb:75:fc:46:
ce:3c:fe:0b:00:27:dd:28:7b:12:6c:f5:bd:7e:cf:
bf:ba:7d:ce:9b:15:e2:a1:ed:1e:b6:ed:d9:61:aa:
40:5d:94:b5:1b:e4:24:ee:64:58:c4:5e:9c:29:1b:
a0:a0:95:dc:35:8e:5f:52:ca:b9:87:f2:72:dd:59:
bb:cc:6a:84:87:eb:dc:9c:63:dd:fa:73:f4:c1:ca:
b5:c6:3a:fa:bd:1d:d9:8f:3f:2a:6e:9e:e5:2e:c3:
27:9f:88:12:fe:13:ef:8b:55:cc:40:43:fc:84:75:
f9:e0:33:d5:75:c9:7c:34:15:2b:a2:64:ce:3f:1e:
ed:cd:ca:55:20:04:ae:24:92:72:8f:da:7e:6c:6c:
da:c0:85:af:76:5b:6c:70:48:f9:ef:86:8d:f5:34:
dd:11:6f:0e:32:76:2a:53:99:fa:ca:18:4f:6c:77:
34:58:15:b2:dc:fb:10:08:05:90:0c:10:1f:9a:99:
83:11:3d:97:ae:3f:2d:aa:4c:4f:52:43:d4:5b:d2:
30:30:ee:6b:8d:fc:fe:d5:5a:a4:86:0b:0c:22:8f:
bb:45:22:8a:06:45:c4:4b:73:28:46:3a:d5:fe:64:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:04:80:B7:BA:4E:A2:E1:09:B2:4C:2E:79:6E:75:1B:1F:48:4D
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/0PgEgLe6TqLhCbJMLnludRsfSE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.220.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:4c:f4:e0:75:1e:77:dd:57:91:8d:2c:a3:80:15:1d:b6:be:
3f:25:03:2c:c8:a2:11:bf:3f:d8:bd:ad:1e:ce:4b:32:17:80:
d8:dc:73:f9:4b:28:1c:5a:d0:d9:65:34:d2:da:48:2c:e8:c3:
33:7b:5d:d9:99:f9:45:0d:8c:25:86:d6:17:d5:7f:a1:05:47:
e4:a8:b9:a9:86:67:ee:82:b7:5f:f0:2b:00:9f:4e:45:67:01:
1c:f3:37:70:43:dc:eb:43:d9:b3:b6:6f:ea:38:5d:ee:1f:4b:
cb:95:b4:11:1f:c9:1a:0f:aa:fb:6e:24:ba:1d:10:92:33:3a:
94:24:71:9d:53:2e:75:23:67:f2:a3:b0:2c:de:e1:03:03:31:
72:9f:d5:a4:b7:b0:51:ff:08:3f:d5:80:1f:d8:e8:b9:c9:9a:
75:57:e8:8d:1f:1f:f8:a1:6c:51:ee:ec:fc:c8:06:c2:cc:ca:
cb:b3:91:ab:51:74:46:c8:73:74:f1:d9:0b:58:73:e6:d0:ee:
78:cd:1f:c3:76:d2:3e:56:ab:dc:bf:46:a8:2e:b8:82:5b:1c:
aa:ae:21:b2:bf:fa:24:2a:36:77:80:bd:91:97:2f:0f:a3:e5:
f3:a7:9d:a7:74:b9:ee:8f:e2:01:cb:bc:0f:e2:a7:b9:1a:79:
b5:78:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org