Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/bSuMAxv_AcWoBQ1R0qVoaUdOl_M.roa
File: bSuMAxv_AcWoBQ1R0qVoaUdOl_M.roa (raw, json)
Hash identifier: OnKsvAFj8sm+4tNqno5BqeQMy/qQffVhBW9i9S0S7WA=
Subject key identifier: 6D:2B:8C:03:1B:FF:01:C5:A8:05:0D:51:D2:A5:68:69:47:4E:97:F3
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 018234CC09FE01D30686D37125C13050F825
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/bSuMAxv_AcWoBQ1R0qVoaUdOl_M.roa
Signing time: Mon 25 Jul 2022 09:59:23 +0000
ROA not before: Mon 25 Jul 2022 09:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133861
IP address blocks: 194.41.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:cc:09:fe:01:d3:06:86:d3:71:25:c1:30:50:f8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Jul 25 09:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d2b8c031bff01c5a8050d51d2a56869474e97f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:67:f2:05:3f:94:a4:10:e9:6a:01:b9:62:
19:70:78:ef:0e:5c:b4:ab:3e:d9:a3:38:02:1d:0f:
09:07:92:48:82:b3:c9:85:0a:c4:21:6e:5c:2f:e6:
e3:e8:3d:a0:98:c6:79:d1:aa:8d:1a:b0:c2:60:88:
8c:42:0e:85:6b:11:8a:e0:5a:8e:90:0c:13:2a:56:
cf:59:e3:03:ed:1d:e4:b9:18:99:c1:b2:48:58:ea:
74:df:5b:af:9b:67:2f:ee:27:52:a1:1e:63:2e:c2:
b9:d2:b9:f2:eb:1f:c2:da:de:d0:37:c1:6b:de:4e:
1c:f9:1d:fd:a0:4f:6c:41:16:e3:e8:18:f3:5b:6e:
e6:69:0f:fd:d7:26:3c:5d:48:54:da:d9:9c:05:be:
b7:dc:61:18:77:0a:29:5b:4c:ff:d1:fb:de:13:58:
c7:7a:6a:de:e0:93:90:ce:c5:3a:83:f4:61:fa:ed:
0f:16:5f:7d:47:ba:3e:85:e5:35:99:49:b3:55:7c:
78:1c:e0:00:f2:fe:9a:44:44:21:13:6f:30:d5:30:
98:7e:48:b4:1d:d2:f2:23:67:56:04:51:7c:75:27:
09:2d:0f:3a:2c:e8:27:ce:73:af:ce:be:fb:5a:e9:
96:ef:37:92:73:13:39:91:02:fa:bf:ae:9f:7c:4c:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:8C:03:1B:FF:01:C5:A8:05:0D:51:D2:A5:68:69:47:4E:97:F3
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/bSuMAxv_AcWoBQ1R0qVoaUdOl_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:38:bb:5d:41:de:0a:7d:08:53:7d:dd:b1:9a:a5:51:9b:80:
d0:5f:d6:62:e3:b4:d3:cb:ff:92:66:1e:e4:1a:5b:be:bc:48:
2e:42:66:7a:4f:1f:78:5a:13:3d:14:ee:0d:ac:6b:e6:35:3e:
ba:3f:02:b7:2c:be:8f:78:80:d5:ed:a7:7e:bf:2e:fa:8a:5b:
a2:b1:4d:cb:4a:31:14:45:08:7a:70:65:ee:36:19:68:a6:93:
e6:ed:14:36:c7:f8:cd:3f:07:32:f2:27:54:f6:ef:1f:8e:92:
0e:a9:bc:06:0b:66:ba:e5:b5:5a:10:bf:ec:eb:4c:e7:f8:5e:
01:61:41:c8:f0:80:fc:76:9b:35:d5:1b:32:64:20:6f:ed:91:
b7:1e:cc:d4:6a:72:cd:a3:6b:9c:53:fa:ea:12:10:a8:b4:5f:
02:4e:cc:3e:31:7d:97:8d:ed:bb:35:82:6b:51:0d:6c:6b:aa:
db:59:6b:39:93:f1:0c:d9:46:c4:2e:35:88:76:ba:13:da:fb:
da:9a:88:3c:d3:28:4c:5f:ea:40:56:d1:65:2e:e9:a5:6b:0f:
09:4e:78:e5:5b:48:b2:40:d6:ec:25:a7:3b:34:4f:d5:bd:8c:
48:7c:f3:e8:c0:9c:98:35:66:fb:bb:7b:69:c5:8c:d0:61:07:
8b:1a:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:59 2023 by rpki-client on console-fra.rpki-client.org