Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/54ew6V6ORk_LvzCOE3QsWKw7aDI.roa
File: 54ew6V6ORk_LvzCOE3QsWKw7aDI.roa (raw, json)
Hash identifier: Hhn00iThs23hLyfcDmIrh9apekBzEB2zHDEfRGUSg9Y=
Subject key identifier: E7:87:B0:E9:5E:8E:46:4F:CB:BF:30:8E:13:74:2C:58:AC:3B:68:32
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A7192F9
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/54ew6V6ORk_LvzCOE3QsWKw7aDI.roa
Signing time: Sat 01 Jan 2022 04:51:54 +0000
ROA not before: Sat 01 Jan 2022 04:51:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43073
IP address blocks: 195.136.104.0/22 maxlen: 22
195.136.104.0/24 maxlen: 24
88.220.168.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980521721 (0x3a7192f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e787b0e95e8e464fcbbf308e13742c58ac3b6832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:8a:f8:aa:84:d6:24:70:dc:50:c4:94:2e:
86:35:83:9d:d9:49:79:eb:8d:2b:ec:05:71:46:2d:
c9:75:0e:5e:86:04:4f:81:e1:40:03:ba:7c:35:76:
d1:f5:64:2b:a1:3d:de:85:27:f2:35:2a:64:30:b1:
a9:4e:6d:15:fc:c0:52:0e:77:8c:4a:6b:76:6c:97:
f7:96:7b:93:c0:23:73:50:41:90:fc:62:a4:18:f7:
54:25:3f:3c:0b:8e:67:c7:60:87:12:ea:c7:a5:43:
50:85:eb:a7:ef:b5:b2:9f:cb:70:83:e5:2c:40:a9:
b6:be:f9:f5:84:ad:ed:aa:2a:45:ca:f9:f1:29:bf:
43:93:8c:5c:a8:45:0e:8f:ed:01:4f:97:99:19:fb:
09:96:a3:fd:b8:05:1b:cd:e7:98:e2:45:71:93:fe:
21:71:3f:1d:13:d3:28:ae:5e:26:36:98:9b:32:ab:
f6:68:07:fd:08:fa:19:bf:0b:15:13:10:25:1a:b6:
81:f5:48:0e:79:1d:aa:03:63:9e:9a:98:00:c0:eb:
01:1b:56:91:21:14:eb:54:1d:29:de:42:9b:f3:e3:
da:bb:53:9e:8f:f2:4c:fc:e7:e8:67:13:b8:2b:00:
38:2b:57:3d:6c:28:03:af:aa:14:c9:9c:d8:25:6f:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:B0:E9:5E:8E:46:4F:CB:BF:30:8E:13:74:2C:58:AC:3B:68:32
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/54ew6V6ORk_LvzCOE3QsWKw7aDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.168.0/23
195.136.104.0/22
Signature Algorithm: sha256WithRSAEncryption
35:b2:2e:07:75:ea:f3:1a:ee:76:8d:d4:2d:dc:a9:fe:53:57:
b4:9c:b5:e7:3d:59:c2:26:60:ef:8e:1c:7b:94:1a:43:89:58:
f3:9d:1d:7c:a0:1c:c9:05:00:20:81:77:6b:69:d0:60:73:13:
4d:9f:5d:36:7f:27:af:72:8d:8a:5c:db:d0:77:db:b7:ae:b8:
4e:f1:84:a1:98:9b:83:e4:2f:c1:22:17:2b:2a:9c:a5:b9:49:
a2:f5:cc:4a:ec:d4:1e:06:06:ed:f0:06:d0:fd:b7:41:69:1b:
7a:69:b6:01:f0:b0:e8:34:ed:97:ff:f5:db:aa:0c:e1:73:2c:
14:40:5f:ab:bf:9d:ed:60:c9:ea:c5:75:c4:eb:52:9c:52:2e:
9c:f9:cc:df:b6:f7:5d:ec:70:91:f1:2a:cc:96:15:dd:ca:0f:
f0:2e:3e:91:8e:58:14:e4:1f:91:c2:c3:2c:28:64:11:ce:10:
70:98:c2:82:2f:7b:08:8b:77:82:85:28:8d:89:ce:0a:22:d5:
23:89:7f:34:76:c7:73:9b:8f:0c:f6:af:96:96:06:3e:5b:07:
bd:93:91:98:3e:9c:22:26:f6:81:2e:c0:5a:69:b4:70:58:1d:
d7:d1:4a:6f:f5:81:5a:c5:cb:25:6f:d4:95:42:d0:b5:28:75:
6b:00:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org