Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/LAbkcB7zy_AF9Z2DjevWpmFxU04.roa
File: LAbkcB7zy_AF9Z2DjevWpmFxU04.roa (raw, json)
Hash identifier: PKXGcIlpdACEktK7b8Kpkgh2AOfqdo8w5wh6526s3fY=
Subject key identifier: 2C:06:E4:70:1E:F3:CB:F0:05:F5:9D:83:8D:EB:D6:A6:61:71:53:4E
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01823A161F6515CABE1BEBB0E37DE3C2F15B
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/LAbkcB7zy_AF9Z2DjevWpmFxU04.roa
Signing time: Tue 26 Jul 2022 10:38:24 +0000
ROA not before: Tue 26 Jul 2022 10:38:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 195.13.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:16:1f:65:15:ca:be:1b:eb:b0:e3:7d:e3:c2:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jul 26 10:38:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c06e4701ef3cbf005f59d838debd6a66171534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:70:42:d0:5d:88:b9:ae:fa:b3:d7:47:66:
32:98:ba:7b:d9:24:1e:fa:cf:35:be:19:d6:9f:39:
ba:bc:b0:f0:7c:0e:2a:64:21:5c:c4:7f:99:80:c2:
e6:a5:cf:cc:88:06:73:ac:45:c0:cb:59:51:31:f7:
4e:ae:2d:6d:25:8a:a0:e8:12:cb:04:a7:7e:26:52:
06:13:9e:e8:20:c2:9a:54:78:68:0f:48:5b:97:70:
b7:5a:29:13:a8:d9:65:b6:28:73:ab:ca:5d:1a:39:
0b:5b:aa:2c:99:30:65:d5:5f:9b:5a:81:0c:cd:31:
b3:1f:98:b5:8e:85:14:27:7d:d1:ea:0e:df:58:06:
2c:c4:23:32:bf:a6:dd:20:fb:20:47:fd:b9:5b:c7:
ec:8f:39:56:83:e8:a0:8a:b4:7b:f3:dc:77:22:2d:
9b:10:16:f5:1c:53:23:70:6c:d6:92:19:88:07:8c:
dd:7d:fd:e2:e7:85:b9:ba:fb:8a:27:50:fb:1e:43:
1d:d7:a6:d5:16:0a:dd:17:e0:29:2d:f8:7b:c1:ee:
e4:42:22:62:57:9b:ce:f0:0c:35:35:4d:b5:66:bd:
c1:59:38:53:bd:4f:ce:2d:ab:9c:91:a1:99:bb:c3:
10:25:1a:40:c4:de:4a:aa:7f:08:51:f4:39:86:70:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:E4:70:1E:F3:CB:F0:05:F5:9D:83:8D:EB:D6:A6:61:71:53:4E
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/LAbkcB7zy_AF9Z2DjevWpmFxU04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.62.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d6:2e:3e:b2:18:19:3d:17:a6:96:f0:48:21:46:ce:0d:a4:
18:11:99:d3:d3:74:7d:cf:85:9f:51:32:a4:2b:df:d8:1e:e9:
1e:b3:4f:93:c8:56:12:23:2f:26:97:ba:84:3b:ef:43:8e:27:
70:ec:88:17:46:68:4c:68:9d:c0:68:b1:04:0d:0e:a8:ab:7d:
9d:d9:7e:b8:26:12:18:58:33:d2:7e:c2:3d:aa:ea:5e:41:68:
75:62:ad:0a:7f:e9:3d:67:6e:50:27:a3:d2:40:ad:19:be:a9:
70:95:b7:a3:27:b0:d1:63:ce:ee:c7:bf:22:6a:82:74:47:4b:
8a:1a:53:ef:72:30:3f:e0:f2:18:f4:d5:f8:d9:37:44:3b:0e:
28:ee:cb:4e:2d:fc:fc:e4:9f:f5:9b:bf:4e:83:4c:13:e1:1e:
50:9e:80:9c:5e:47:c0:8c:8e:87:03:b3:c5:90:1a:1c:7a:3b:
ba:13:07:13:28:a1:99:55:0e:68:ba:d6:db:0e:33:15:66:58:
ec:83:80:42:96:28:cc:59:28:8f:19:70:d5:d7:dc:a0:0c:25:
77:71:6f:d9:55:2c:a3:32:51:f1:58:97:21:a7:87:14:df:03:
e7:f2:5d:8d:8e:4d:65:10:3c:29:1f:61:3f:7a:27:15:a5:ba:
17:c3:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org