Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/7KdfuKIdd5bB6X2wBkBAfZtxahY.roa
File: 7KdfuKIdd5bB6X2wBkBAfZtxahY.roa (raw, json)
Hash identifier: rgXs7cET4QYMqMpR8kMZmxh+ri3mXwB2G74Qs7J37Pc=
Subject key identifier: EC:A7:5F:B8:A2:1D:77:96:C1:E9:7D:B0:06:40:40:7D:9B:71:6A:16
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 01830C9A06BA527A0A08C3E942D9C9ACDB79
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/7KdfuKIdd5bB6X2wBkBAfZtxahY.roa
Signing time: Mon 05 Sep 2022 07:42:43 +0000
ROA not before: Mon 05 Sep 2022 07:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25099
IP address blocks: 194.0.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:9a:06:ba:52:7a:0a:08:c3:e9:42:d9:c9:ac:db:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Sep 5 07:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eca75fb8a21d7796c1e97db00640407d9b716a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:d3:f1:a5:c5:21:7e:09:48:d0:bc:42:cb:
70:44:0e:dd:31:a2:b7:d5:5a:ff:50:24:07:e7:9b:
e8:05:fe:21:96:70:2f:e7:37:0c:46:05:db:44:97:
42:03:f4:e1:62:c3:c3:cb:03:87:a9:c5:cb:f7:a7:
1d:15:03:dd:2c:74:f5:21:a7:e8:26:23:e0:32:ba:
90:30:75:d3:10:84:b4:a5:76:08:04:54:af:d3:8f:
4d:4c:80:c0:66:03:bc:fc:22:68:02:8d:dc:1f:f9:
3b:b0:12:46:41:8c:17:91:47:26:9b:8f:24:84:b3:
4f:9c:f5:47:82:25:c6:8e:08:ff:cf:54:28:e1:89:
ed:33:87:90:3c:0e:0a:ee:fa:f3:d6:dd:0f:3e:05:
7f:bb:c9:c8:8e:2c:a8:c1:6b:f3:ac:8d:24:e4:18:
cc:47:64:57:2a:27:a7:47:98:55:7b:00:76:fd:2f:
a0:52:bd:4b:81:21:14:ed:ba:1c:e3:9a:43:85:87:
9c:2a:9f:6c:d8:a7:79:35:62:64:82:e7:40:91:5e:
61:be:a6:46:a4:05:b2:94:ca:0c:b0:08:3e:db:77:
41:b9:c1:80:a4:a8:72:a4:4d:2c:1d:4a:fd:21:d6:
34:ae:31:07:16:3b:1e:54:dd:56:1c:9c:94:b8:29:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A7:5F:B8:A2:1D:77:96:C1:E9:7D:B0:06:40:40:7D:9B:71:6A:16
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/7KdfuKIdd5bB6X2wBkBAfZtxahY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.157.0/24
Signature Algorithm: sha256WithRSAEncryption
51:92:8e:f8:51:51:ef:06:64:58:22:61:d9:de:27:ba:a5:3d:
fd:85:97:6a:d7:cd:4a:f4:b6:ab:01:f7:de:e5:10:09:e9:df:
7d:ff:a4:17:1b:e8:ca:cd:3a:22:51:e4:9f:37:11:06:47:b5:
3e:ee:b3:cf:80:b7:07:b9:dd:c4:ec:03:ce:fb:9a:f1:47:4f:
25:8d:92:9f:8e:fd:b8:66:72:d8:ec:97:33:aa:83:7e:b7:19:
90:1a:4b:6f:23:eb:7d:f4:02:ac:8e:23:e3:fa:86:9f:32:ce:
75:0e:1a:cf:9d:39:c8:3e:50:71:5a:e3:04:73:e4:a9:6e:23:
b3:0d:d5:fb:c3:83:98:1f:d3:86:4b:c8:50:da:72:fe:e3:6f:
9a:19:f8:a8:72:5f:00:d6:26:9a:2c:19:61:c2:87:a1:ce:b5:
19:6e:54:85:ec:ac:5a:4d:69:2d:98:9e:39:95:8a:c1:85:e0:
9f:ce:73:0a:ad:18:bc:80:80:bc:ff:92:21:e1:7d:78:be:09:
36:75:ab:cd:d8:07:55:9e:34:74:35:66:b6:85:7b:73:82:4f:
79:61:e6:7a:71:cf:c3:e1:96:48:65:06:2d:15:48:28:6e:17:
c1:e3:09:8e:94:1a:2e:5c:c0:96:97:28:39:71:1e:f0:4f:80:
d2:b2:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:08 2024 by rpki-client on console-ams.rpki-client.org