Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/ryZu85jQF5W7ZUIMGFb7k-GiLJM.roa
File: ryZu85jQF5W7ZUIMGFb7k-GiLJM.roa (raw, json)
Hash identifier: TAvJow5xgPOlJtrg3Jk3H3o2QD/IibUDdNao10pWsYo=
Subject key identifier: AF:26:6E:F3:98:D0:17:95:BB:65:42:0C:18:56:FB:93:E1:A2:2C:93
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 01C2A5
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/ryZu85jQF5W7ZUIMGFb7k-GiLJM.roa
Signing time: Tue 11 Jan 2022 11:10:27 +0000
ROA not before: Tue 11 Jan 2022 11:10:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 195.149.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115365 (0x1c2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Jan 11 11:10:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af266ef398d01795bb65420c1856fb93e1a22c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:50:92:15:79:51:81:ed:ae:14:18:d9:85:
f8:b3:ab:78:dc:da:80:ac:9c:61:05:3e:41:11:e8:
8d:bc:a2:c9:01:17:9b:1b:2f:35:f1:42:6c:39:7b:
12:45:88:ab:83:b0:13:46:16:93:70:fe:b7:62:de:
b5:f9:fb:e0:b0:b0:9c:13:dc:67:cf:3b:80:ea:aa:
24:94:07:7b:e8:a8:43:56:bf:65:d0:d3:a7:be:5b:
f6:31:f2:dd:ad:78:96:d8:8c:93:24:e7:c1:95:0c:
06:8a:1b:d1:4e:a2:5f:83:5f:86:a3:ac:fb:a6:08:
73:6b:c9:b1:a3:cc:cb:cd:a6:fd:27:ea:44:53:16:
5a:f9:59:e1:72:a0:09:c0:38:ba:40:08:9a:26:03:
62:e2:f2:ff:cb:94:67:86:db:5b:19:e3:b1:7d:58:
04:40:d5:c9:6a:7e:d0:01:6b:78:6b:b8:ad:3b:3a:
4c:f0:c0:54:7f:7f:a6:e4:b4:e8:a5:59:33:53:5f:
30:2b:14:f4:f7:ac:15:a5:43:bb:58:34:f2:9a:5e:
e5:be:8b:06:64:41:01:9d:63:84:78:01:19:62:63:
36:60:86:b5:2b:20:1f:d1:26:5e:92:54:48:7d:43:
c1:27:ea:4a:7e:00:09:6d:76:e8:5b:de:16:1f:47:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:6E:F3:98:D0:17:95:BB:65:42:0C:18:56:FB:93:E1:A2:2C:93
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/ryZu85jQF5W7ZUIMGFb7k-GiLJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.126.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b1:96:18:28:90:53:24:69:a8:fd:9c:64:92:b3:8e:05:66:
c3:15:4f:eb:40:d2:da:a2:95:a0:97:7c:53:54:7f:41:f6:0d:
d5:80:66:4a:53:27:8f:21:c3:a7:cb:9f:d9:b5:41:4c:37:79:
0c:1f:f4:f6:b9:2c:06:04:76:42:0d:f6:d2:18:59:70:78:68:
97:1b:f1:fe:a3:76:3b:07:8a:1c:4c:01:27:a2:fd:2c:2f:67:
25:36:a5:f2:87:ae:88:42:46:61:49:e0:25:9a:97:4d:67:72:
70:38:8f:24:b8:28:9b:4e:ab:49:ca:17:73:9d:8f:03:bc:c1:
84:e4:03:41:f0:87:66:fe:f2:1d:de:02:35:9a:68:da:d3:db:
39:16:6a:8c:44:4b:77:01:fc:95:80:ff:55:60:fe:29:eb:a5:
df:4b:ea:0b:1a:56:14:8a:1f:65:bf:63:78:41:a7:55:de:de:
77:f6:a2:e6:e6:db:2c:9e:21:d6:81:6b:1b:c1:06:b2:e9:1b:
7e:39:92:b9:1d:07:77:1a:71:66:ac:92:5a:10:69:07:4d:de:
99:42:4d:a6:84:71:2e:0c:9d:f6:f7:d4:c0:a5:fd:ac:58:03:
86:e9:5d:99:57:a9:a9:93:7f:3e:f1:ba:75:c8:28:cb:8e:38:
67:c5:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:58 2023 by rpki-client on console-ams.rpki-client.org