Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/1cFdOFIfhSHDtgKH7oI-6GBPh9s.roa
File: 1cFdOFIfhSHDtgKH7oI-6GBPh9s.roa (raw, json)
Hash identifier: zAiAsUO4orFNG8wF69rgXJyv2tWcA8P50NzoK7TIYis=
Subject key identifier: D5:C1:5D:38:52:1F:85:21:C3:B6:02:87:EE:82:3E:E8:60:4F:87:DB
Certificate issuer: /CN=e7159d07b5f6372c86e396a0aa6400a8faa6d531
Certificate serial: 056CBA11
Authority key identifier: E7:15:9D:07:B5:F6:37:2C:86:E3:96:A0:AA:64:00:A8:FA:A6:D5:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xWdB7X2NyyG45agqmQAqPqm1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/1cFdOFIfhSHDtgKH7oI-6GBPh9s.roa
Signing time: Sat 01 Jan 2022 14:54:49 +0000
ROA not before: Sat 01 Jan 2022 14:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41547
IP address blocks: 195.138.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91011601 (0x56cba11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7159d07b5f6372c86e396a0aa6400a8faa6d531
Validity
Not Before: Jan 1 14:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5c15d38521f8521c3b60287ee823ee8604f87db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:55:0c:b8:32:3d:f3:4a:6a:55:a3:39:72:
39:a6:60:40:dc:d4:12:60:df:18:7c:fd:dd:e2:f8:
18:42:00:71:08:46:65:cb:55:60:b4:f9:94:36:9b:
b8:d7:ab:cb:1c:b9:81:a4:4c:8f:6f:5a:25:32:d7:
02:80:70:23:fa:3c:8c:db:49:4f:c9:84:aa:d0:1e:
87:c5:7b:50:9e:95:21:04:1f:94:e3:aa:4f:5a:f9:
81:94:7c:15:c8:cf:22:e9:23:09:93:4e:7e:9d:a1:
44:be:79:52:7a:53:16:e9:6f:3a:a0:d3:61:7a:c8:
07:8f:f3:c7:4f:57:73:fb:90:34:b3:dc:5d:6e:8b:
f5:7a:02:a6:77:36:a9:48:73:7c:93:44:89:f9:89:
36:ba:4f:f1:d2:35:09:e7:9b:9d:06:a9:98:30:a3:
b3:1e:53:a3:90:43:4f:44:db:fb:a1:31:f1:33:fe:
a2:be:e1:8c:35:23:b6:f4:8b:df:cc:9c:f2:3f:67:
82:8e:32:08:d1:cf:2a:fc:38:04:e2:d7:ce:18:02:
23:93:6c:66:80:9d:f8:ad:fd:ed:68:50:3f:1e:57:
40:ad:8c:9a:ab:19:28:32:d3:54:7e:95:2d:6a:2c:
10:8b:c0:04:10:d2:1e:00:81:35:4a:0d:d4:1a:a1:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C1:5D:38:52:1F:85:21:C3:B6:02:87:EE:82:3E:E8:60:4F:87:DB
X509v3 Authority Key Identifier:
keyid:E7:15:9D:07:B5:F6:37:2C:86:E3:96:A0:AA:64:00:A8:FA:A6:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xWdB7X2NyyG45agqmQAqPqm1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/1cFdOFIfhSHDtgKH7oI-6GBPh9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/5xWdB7X2NyyG45agqmQAqPqm1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.203.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e7:03:18:d2:d2:db:06:f3:fc:70:b1:7a:cd:a4:6c:ef:1a:
70:ba:01:9a:ee:04:da:c3:fc:5f:33:ed:4c:e6:38:b1:7e:87:
a3:22:6d:48:c7:bd:93:0a:48:65:e4:e6:b6:e0:11:99:53:de:
8a:2b:d3:3a:2d:6e:03:2d:29:de:20:7a:4c:07:88:bc:05:bb:
e8:d0:c6:eb:3b:c8:e4:93:bb:40:df:64:30:4d:c1:60:ee:0e:
7c:77:d3:aa:bb:41:83:64:b7:55:35:b6:16:7f:85:b7:f5:54:
5c:67:23:62:ce:93:af:ad:08:70:4c:eb:e2:d4:68:8b:85:83:
66:3f:93:ff:e0:3b:38:92:db:e7:01:57:d9:30:6f:a4:74:ac:
36:19:32:fb:9d:bb:0a:ac:52:17:a3:88:2c:e9:5c:20:00:4c:
2b:63:b9:d7:33:77:15:5d:a9:41:c8:4f:ba:e7:54:12:49:f0:
a3:46:a2:43:92:46:bb:7b:13:97:39:24:13:06:6b:1a:12:c3:
f2:53:1f:6d:e4:41:07:80:59:91:0a:57:27:f3:ea:eb:f3:92:
d6:dc:c4:12:44:bd:5c:18:0b:df:b0:27:e8:b4:a6:e4:09:fd:
38:36:35:c1:87:cb:96:ce:bc:0f:c0:96:8a:a3:8a:56:17:46:
04:53:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:44 2023 by rpki-client on console-ams.rpki-client.org