Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/f54AGT1cbzLVbmm8SxdWhEWss1s.roa
File: f54AGT1cbzLVbmm8SxdWhEWss1s.roa (raw, json)
Hash identifier: SfsNna9GrkCOc7XKouiK5QDFqp4/H7Tt/86xX+phY5A=
Subject key identifier: 7F:9E:00:19:3D:5C:6F:32:D5:6E:69:BC:4B:17:56:84:45:AC:B3:5B
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 31D0
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/f54AGT1cbzLVbmm8SxdWhEWss1s.roa
Signing time: Wed 20 Apr 2022 19:47:46 +0000
ROA not before: Wed 20 Apr 2022 19:47:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211841
IP address blocks: 194.127.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12752 (0x31d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Apr 20 19:47:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f9e00193d5c6f32d56e69bc4b17568445acb35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:cf:8c:04:62:d3:04:ca:9e:d4:1c:2b:93:
71:0d:7b:0e:4a:fd:b9:60:9c:d4:6c:99:f8:65:1e:
fb:c1:84:27:11:70:0b:ad:d4:ae:00:b4:b9:6c:d0:
9f:bc:94:61:7b:39:70:7b:a5:18:4e:9d:08:87:65:
7b:11:cd:9f:cd:e1:1d:8b:e3:05:9e:10:d1:65:78:
b1:7f:72:70:e9:03:73:c9:3a:de:dc:16:3d:c5:0b:
7b:0a:26:97:1f:d9:57:d0:f3:7e:94:e7:88:e1:be:
7e:b8:0e:f6:9b:ca:b1:a3:15:54:fc:ce:c5:e5:0d:
48:3d:f8:9b:8b:9b:37:98:4f:3c:0b:24:00:f1:31:
d7:44:c9:6e:b1:a9:ec:06:bd:dc:8e:7d:42:08:d2:
8b:ce:79:31:b2:1a:fd:b7:d3:36:38:67:7f:00:0f:
16:ed:22:04:bb:23:94:e4:0d:e9:d8:86:82:a8:cd:
32:72:96:93:bb:53:20:60:e5:12:0a:44:ca:46:72:
8a:f2:9b:2f:63:5f:d3:62:6b:6e:7c:b3:49:35:0b:
fd:44:1f:2c:77:bf:4c:99:04:8b:56:36:2c:9f:8a:
e7:d7:7e:e2:24:60:b6:06:c4:17:5e:b6:f8:47:e4:
e9:5f:8e:3a:01:88:9b:24:da:2f:7e:a7:82:f4:c1:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:00:19:3D:5C:6F:32:D5:6E:69:BC:4B:17:56:84:45:AC:B3:5B
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/f54AGT1cbzLVbmm8SxdWhEWss1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.137.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e3:61:11:8e:b8:d8:06:ac:c2:6c:ce:b7:64:13:e3:26:1b:
8e:c8:17:41:18:7f:e9:88:a5:93:7c:7c:0c:58:b6:fc:08:15:
fb:2c:27:fe:b1:7e:da:52:5c:78:7c:72:9f:09:3b:66:d4:72:
75:1b:73:e3:ef:43:4f:68:b7:77:f9:f4:03:89:3f:12:56:35:
3a:d4:4d:ec:1b:42:64:2e:66:be:97:78:ff:e6:d4:a9:5d:b2:
be:94:ff:7b:61:d4:0d:6b:bf:cc:91:50:2e:40:29:08:12:8d:
f3:c1:0e:0f:c6:d7:41:07:1b:e6:f5:c4:ee:7f:7b:60:dd:75:
3a:ba:d6:b5:66:65:3b:d4:ec:c0:4b:b0:07:9b:83:af:d9:86:
c1:f4:20:43:26:78:67:3e:04:4e:65:e7:67:63:f6:6c:21:61:
d2:fc:88:4f:71:ed:19:b5:fc:5c:1e:98:52:61:a1:9e:22:da:
46:6c:d5:7c:08:78:97:74:ab:f8:5a:fc:53:2f:9a:74:41:87:
8d:bf:08:23:89:55:06:8d:9f:87:6b:18:d0:e7:8f:93:5f:db:
c2:d1:fe:a5:05:a0:27:79:b6:d4:a4:20:57:5b:fa:02:ff:55:
fb:4d:13:8d:a5:c1:69:ad:68:13:0a:f1:36:a3:95:8d:ab:f2:
8d:ca:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org