Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/7w4ZIlxdH8kUe7OKAp6ug25HT2U.roa
File: 7w4ZIlxdH8kUe7OKAp6ug25HT2U.roa (raw, json)
Hash identifier: XsvQHBSofgIp2k4ypU8RauwsZEZDwmV2kRYsLdZtWME=
Subject key identifier: EF:0E:19:22:5C:5D:1F:C9:14:7B:B3:8A:02:9E:AE:83:6E:47:4F:65
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 0A6F2473
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/7w4ZIlxdH8kUe7OKAp6ug25HT2U.roa
Signing time: Mon 24 Jan 2022 11:13:47 +0000
ROA not before: Mon 24 Jan 2022 11:13:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39024
IP address blocks: 194.69.200.0/24 maxlen: 24
151.237.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175055987 (0xa6f2473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 24 11:13:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef0e19225c5d1fc9147bb38a029eae836e474f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:85:3d:69:00:98:a9:b1:e0:4f:5e:d8:64:
1c:06:d1:82:15:6c:ae:35:d4:65:67:ff:24:e1:a8:
5b:e8:52:fd:fa:44:ca:d8:7e:ca:68:c1:df:f0:67:
b6:18:3b:23:30:ee:34:4c:ee:3a:09:57:2d:48:58:
c1:e1:62:cb:1b:7d:ca:22:4f:66:b9:2b:7a:43:c4:
8c:ad:70:ae:f5:e8:f3:d6:89:a3:57:b0:e2:82:36:
98:6f:8c:33:33:48:26:86:ac:8e:ff:b3:23:5e:13:
d8:62:4a:fb:bd:f4:bc:da:d2:f1:2c:9f:73:20:6d:
38:64:4d:f1:1a:0d:e6:a1:52:af:66:ef:ff:81:8d:
ea:1c:0b:fa:e3:40:bd:6d:25:6a:db:de:7a:ae:d0:
e1:f9:9c:7a:49:7d:da:63:3c:4e:19:65:ea:0a:aa:
fd:32:41:10:77:4e:c8:14:b6:31:04:8f:d3:6c:98:
d1:4d:f7:74:de:43:c6:77:7e:99:d8:37:53:b2:35:
a9:8b:3f:67:fa:ab:f4:91:34:2e:1a:4c:8a:45:c7:
62:48:72:cb:fc:52:ca:97:0b:1c:8d:96:29:0c:db:
55:a7:a8:aa:7f:64:69:17:c0:76:f1:bf:18:fc:99:
2b:0f:2d:2e:8c:e9:1b:7c:74:be:27:26:6c:60:6f:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:19:22:5C:5D:1F:C9:14:7B:B3:8A:02:9E:AE:83:6E:47:4F:65
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/7w4ZIlxdH8kUe7OKAp6ug25HT2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.40.0/21
194.69.200.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8b:72:f3:5d:8b:ee:15:f3:41:c5:7a:a7:bb:25:e8:13:09:
34:46:3c:6b:fc:87:0d:10:2a:89:60:8e:bf:31:9c:2a:76:c5:
2c:cf:0b:cb:5f:8c:c2:82:18:b7:a2:55:80:02:81:6e:df:bf:
de:e7:c1:14:a0:64:25:67:65:62:0e:04:f4:dd:65:e3:dd:c3:
ea:19:5c:01:61:17:2c:ec:81:e7:d9:79:35:d4:87:f9:0f:fc:
7b:e3:cb:91:f4:9c:e0:4a:ed:17:bb:84:26:cd:2d:f0:9e:fa:
10:b3:5d:12:fc:03:86:34:7d:a1:ce:d3:26:77:46:41:6e:20:
44:2e:86:97:86:03:e5:6f:13:0d:7b:aa:5b:ff:f2:3a:1a:12:
54:68:35:64:8a:10:c8:37:cc:06:51:a6:3e:36:3b:f5:92:a0:
35:7a:1b:eb:1c:97:5d:96:09:cd:8e:36:f4:fd:d8:53:ae:a4:
a1:53:8a:95:23:11:3f:78:e5:8a:4d:b7:05:f7:64:e6:0a:44:
63:04:ff:c8:5f:92:66:c6:81:d3:54:de:1a:23:40:da:cb:5f:
5d:d0:c2:21:68:db:0e:ad:88:72:1b:d5:be:cf:f7:04:52:5f:
ea:6c:b6:9e:c5:fb:96:70:22:d7:d9:ee:6f:51:ef:0b:74:2d:
7c:1f:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:46 2023 by rpki-client on console-fra.rpki-client.org