Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/8h7-OhGOVW6-w6XK4FznTBa9sP0.roa
File: 8h7-OhGOVW6-w6XK4FznTBa9sP0.roa (raw, json)
Hash identifier: ram+yVpSrrQi3yhULC6Nc/UHH0qj8CwZbZxdQvx4NJk=
Subject key identifier: F2:1E:FE:3A:11:8E:55:6E:BE:C3:A5:CA:E0:5C:E7:4C:16:BD:B0:FD
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01841E5CD63FE09DB2E533154469F580E305
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/8h7-OhGOVW6-w6XK4FznTBa9sP0.roa
Signing time: Fri 28 Oct 2022 11:31:51 +0000
ROA not before: Fri 28 Oct 2022 11:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:5c:d6:3f:e0:9d:b2:e5:33:15:44:69:f5:80:e3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Oct 28 11:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f21efe3a118e556ebec3a5cae05ce74c16bdb0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:66:6b:26:b0:1a:93:dc:34:99:67:09:51:
af:38:92:f3:fc:c9:5e:30:f7:29:cc:62:32:28:80:
e4:90:5a:0b:8c:c1:5a:27:12:5d:ba:7b:bc:6d:51:
61:c4:14:dd:59:d0:07:67:29:f3:1b:40:5b:07:a6:
cb:80:44:c4:23:c4:b1:34:d1:1c:1c:5b:5f:8d:33:
d6:56:17:86:fb:fb:25:d0:4a:a2:b8:47:b9:1d:46:
c3:d5:89:e7:b5:87:44:b6:1f:09:92:68:08:b8:b1:
06:9f:57:c7:99:0a:a5:5a:0c:44:64:8f:e0:50:10:
15:d0:4e:4c:1e:00:6d:0d:8c:9f:de:8c:e9:27:49:
05:20:3b:c2:1f:36:e9:56:bd:c2:ca:4e:83:73:c6:
9a:70:97:4a:88:00:bc:c1:5f:45:68:af:36:bb:fe:
8f:9c:e5:b9:8e:df:50:5d:9d:1b:0c:d9:5f:8e:bc:
d4:b0:39:94:74:04:68:e9:fa:b2:bf:38:f6:7c:6e:
20:5a:09:04:76:83:f6:bf:40:64:0e:7c:56:c5:da:
13:fa:b5:f7:ea:f3:c9:18:ef:cd:cf:bc:83:79:3c:
4b:dc:97:01:8f:d1:41:c3:88:66:87:fd:25:b9:38:
66:5d:df:32:e9:25:c2:e1:19:57:84:bd:98:87:77:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:FE:3A:11:8E:55:6E:BE:C3:A5:CA:E0:5C:E7:4C:16:BD:B0:FD
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/8h7-OhGOVW6-w6XK4FznTBa9sP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
193.34.51.0/24
195.13.62.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2d:5b:b0:64:13:9f:04:de:2a:5f:fc:18:84:85:df:e3:e4:
5c:65:0d:2b:8f:73:0b:92:cc:6a:4a:49:ba:73:24:25:cc:44:
00:cd:56:e1:44:5d:51:65:73:cb:e7:89:2d:f5:3d:10:17:01:
2e:b2:e3:ac:67:96:5f:d4:f5:72:f4:a1:0c:bf:4a:e1:36:4e:
5e:50:ca:ce:e1:80:e0:6d:e3:56:03:c7:d5:a4:bd:27:96:5f:
5a:a0:2c:4b:60:86:cd:27:76:49:23:68:aa:f3:a0:c3:b4:c5:
51:13:0b:1e:9d:35:a6:a8:38:2a:1a:2d:21:b9:3d:c6:6c:48:
ea:c5:f6:f3:3b:5a:e8:ea:84:49:95:1c:f1:ec:29:87:21:23:
ee:2d:cd:ae:6c:2f:99:b4:93:0d:83:20:31:17:77:2f:e2:b0:
b3:bb:42:b2:a7:3e:19:22:66:1b:8d:01:16:ab:6f:0b:f0:5e:
c8:b9:30:3d:7f:74:4b:a7:c3:f3:d3:17:87:46:28:36:8e:f1:
a8:76:8a:bb:4c:51:70:32:ff:1c:d9:ec:52:c3:2f:4e:d6:bc:
7b:cb:dc:0e:d0:de:16:5f:87:9d:b5:27:d1:7e:a2:f2:af:ef:
32:52:55:86:6e:77:23:3b:c9:4f:cd:ba:3d:a3:16:96:c7:c8:
8d:f7:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org