Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/8i3VcilgvO5scImfCXQB4gV5cqg.roa
File: 8i3VcilgvO5scImfCXQB4gV5cqg.roa (raw, json)
Hash identifier: X1z8R0GephUg2e4yCaiqg+FNHT+FxO5RLKLKWJD7Z+I=
Subject key identifier: F2:2D:D5:72:29:60:BC:EE:6C:70:89:9F:09:74:01:E2:05:79:72:A8
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: EBF0B4
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/8i3VcilgvO5scImfCXQB4gV5cqg.roa
Signing time: Sat 01 Jan 2022 06:55:25 +0000
ROA not before: Sat 01 Jan 2022 06:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 194.113.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15462580 (0xebf0b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Jan 1 06:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f22dd5722960bcee6c70899f097401e2057972a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:7c:85:82:40:d8:5c:4a:ba:59:9a:c2:a5:
55:00:ca:40:a8:50:6c:a7:44:ae:0c:95:8f:59:1f:
f9:f2:17:06:8c:da:3a:0f:23:3f:d8:d1:db:4a:11:
b7:3c:25:26:ca:53:a9:c8:b9:de:88:03:3c:6b:42:
c3:e0:26:04:85:f7:fe:3e:92:64:41:6c:c3:64:bf:
72:81:99:b8:11:7f:ab:2a:7a:7c:a4:ca:65:6c:3c:
18:98:c1:1f:67:9e:cd:3b:29:9f:26:8e:34:ad:9b:
90:e9:b5:3a:28:19:03:46:15:6e:0f:69:5a:f0:07:
73:45:8e:90:b8:08:7d:c7:55:0e:a8:28:00:73:04:
5f:35:99:18:bf:91:3a:49:d1:69:e7:96:58:9a:ae:
bd:e0:ea:d6:62:e0:63:f6:72:e1:6f:ed:29:b2:c7:
a1:1f:da:e5:27:f9:16:59:0e:a9:11:2a:5a:8d:82:
8f:f1:3e:52:ec:d7:34:05:76:3a:d3:c8:8b:78:1e:
39:31:b6:ae:54:e5:e2:9e:94:f4:4f:6d:b5:ec:b6:
99:3a:19:ea:f2:d1:01:61:fa:4c:df:c0:ff:1a:95:
f4:58:b2:bb:be:aa:4b:2e:05:96:a3:96:d9:c4:47:
2e:0e:a0:d1:ed:5d:ff:16:9e:f0:2c:c3:39:15:41:
40:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:D5:72:29:60:BC:EE:6C:70:89:9F:09:74:01:E2:05:79:72:A8
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/8i3VcilgvO5scImfCXQB4gV5cqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:32:3d:6d:83:f3:d8:42:ff:46:b1:09:9a:bb:89:95:3e:85:
d9:52:47:18:4c:53:49:7a:de:90:da:3b:7b:35:e2:5a:a6:f1:
b9:21:b6:37:5d:2f:68:62:fa:06:88:43:17:d9:c6:a6:4e:ce:
d8:06:4c:09:f2:36:1d:05:ae:30:f9:61:83:22:f9:8a:14:29:
4d:39:2e:43:5b:3b:96:60:74:4d:8c:34:f2:55:7f:d5:3d:76:
7a:5d:59:07:8d:e1:fc:29:28:6f:f6:60:db:c5:6a:65:5c:ab:
d4:4e:95:32:3a:95:f6:93:35:fa:c4:85:a8:72:f6:44:12:fb:
6e:66:68:a8:bf:85:49:18:05:e9:20:50:3b:8a:97:db:d8:a2:
23:ee:3e:a5:06:51:dd:e0:8b:b0:2f:8e:7e:5c:56:6c:5d:1c:
b1:98:ed:98:fa:98:55:91:1f:05:05:72:05:2a:5f:a0:4c:6c:
c9:7f:5b:00:1b:59:e5:92:5b:72:83:7c:fb:c6:b0:6a:ae:d0:
c5:d8:cc:f8:03:dd:6e:fb:99:34:51:3b:e5:30:35:0b:65:7f:
4e:3b:4c:f1:f5:50:1d:c2:0b:ef:e6:ba:1d:d9:ae:b0:b4:cb:
84:29:ee:f8:bc:a3:b0:92:0f:bd:fa:ed:c9:b5:c6:28:62:16:
e7:1b:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:04 2023 by rpki-client on console-fra.rpki-client.org