Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7UCN_YhsAeWABPR-VboZj3oXMiY.roa
File: 7UCN_YhsAeWABPR-VboZj3oXMiY.roa (raw, json)
Hash identifier: F3h4EdFrKBrvhmxafBQQdyuTwyUCZhBGFCbGgVnGYkA=
Subject key identifier: ED:40:8D:FD:88:6C:01:E5:80:04:F4:7E:55:BA:19:8F:7A:17:32:26
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 17DD1D56
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7UCN_YhsAeWABPR-VboZj3oXMiY.roa
Signing time: Sat 01 Jan 2022 15:56:13 +0000
ROA not before: Sat 01 Jan 2022 15:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41562
IP address blocks: 195.34.72.0/23 maxlen: 23
195.34.72.0/24 maxlen: 24
195.34.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400366934 (0x17dd1d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Jan 1 15:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed408dfd886c01e58004f47e55ba198f7a173226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:70:14:89:83:ec:08:49:ba:41:2b:4f:14:
69:a7:cb:4a:5a:85:0c:eb:16:2a:07:7a:27:60:c0:
94:06:11:ec:b9:e8:99:29:e8:b4:4b:d7:41:7a:2f:
a3:cc:48:90:fa:f5:65:98:63:d5:47:b7:dc:d8:ac:
ff:d1:e7:dc:13:90:69:5d:d3:19:12:d4:c9:79:5a:
4d:0a:08:85:53:68:fd:c2:78:62:c3:79:9b:3e:3d:
f0:22:79:0e:3d:ff:ff:b9:fb:89:2d:ef:2c:e3:28:
8d:c4:ab:4f:a3:5a:63:45:03:ea:29:a7:9d:79:2a:
8c:06:30:df:25:94:d8:67:c2:96:17:20:07:bd:98:
7f:e8:82:d8:0f:46:8a:3f:5e:cc:b8:95:b5:23:d2:
a6:db:bb:33:43:c8:c0:9b:21:98:eb:39:c7:06:fb:
f8:ca:15:05:3b:ef:77:59:e6:61:2e:f4:ff:f7:5b:
34:ce:45:ba:85:7b:b8:8a:6a:86:23:5b:50:f7:39:
f7:40:e1:19:b7:95:7d:da:ac:c9:c4:09:54:83:aa:
30:76:7b:94:f3:18:52:64:fb:95:79:db:57:32:db:
eb:1b:47:4d:7a:86:94:24:a0:fd:02:fa:71:b2:f1:
2b:47:0f:29:72:3b:91:64:4e:f6:52:b8:bf:d6:5c:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:8D:FD:88:6C:01:E5:80:04:F4:7E:55:BA:19:8F:7A:17:32:26
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7UCN_YhsAeWABPR-VboZj3oXMiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.72.0/23
Signature Algorithm: sha256WithRSAEncryption
66:15:b3:f1:da:a3:b7:c5:cf:eb:bf:5d:55:26:40:f7:9e:fa:
7e:7e:61:39:73:ae:41:55:04:49:14:41:64:2e:15:71:ae:09:
c1:f5:1a:3a:2f:49:6d:e2:aa:89:8a:5a:56:d9:33:8f:46:a5:
00:ad:b0:17:d7:35:02:27:9c:b6:95:ee:cc:61:a2:44:71:62:
f2:07:b3:1d:48:d5:40:18:91:93:51:1a:57:19:7e:a6:59:ba:
35:8b:f7:b0:0d:95:98:8e:a0:97:18:bd:03:57:f6:1f:96:e5:
ac:30:bd:58:b7:30:0b:cd:73:c3:e3:49:59:82:a1:34:46:fd:
a3:1c:be:40:f2:ac:40:62:57:85:8a:ff:eb:9f:d6:f8:47:b5:
d7:1e:d5:5b:c5:fc:0f:f3:d1:a3:60:e7:60:c7:d9:dd:a6:e3:
2a:4b:da:93:15:97:0a:ff:85:64:8b:b1:84:fa:2b:2b:3b:cd:
21:70:ff:1b:14:0f:0b:b8:85:1f:54:e1:27:84:c1:a7:7a:3b:
e0:c8:79:89:b6:30:ce:ef:70:4d:e4:87:20:c2:2b:5c:5c:86:
5a:05:9e:11:35:3b:8e:63:52:3a:9a:9e:75:1d:4e:23:09:03:
54:d8:fb:92:65:95:d7:51:2e:63:0d:98:4b:21:55:dd:61:1f:
a7:46:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:40 2023 by rpki-client on console-ams.rpki-client.org