Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/seaOu-1cVlG23WqPcJhvnTrXT50.roa
File: seaOu-1cVlG23WqPcJhvnTrXT50.roa (raw, json)
Hash identifier: tjpv2X3xgC13ExsqBeWi/S6N86sI7NFLuCpnTaMJ+Sw=
Subject key identifier: B1:E6:8E:BB:ED:5C:56:51:B6:DD:6A:8F:70:98:6F:9D:3A:D7:4F:9D
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A83B309
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/seaOu-1cVlG23WqPcJhvnTrXT50.roa
Signing time: Sat 01 Jan 2022 04:52:05 +0000
ROA not before: Sat 01 Jan 2022 04:52:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199389
IP address blocks: 195.136.200.0/24 maxlen: 24
195.136.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981709577 (0x3a83b309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1e68ebbed5c5651b6dd6a8f70986f9d3ad74f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:f3:83:73:2e:be:24:14:95:75:f0:7c:b3:
f8:60:22:2c:f1:d7:2e:3e:b7:d9:9f:15:b6:4c:d8:
e2:f5:e6:9d:5f:94:41:2f:1c:c2:22:dc:89:03:9d:
c5:5c:17:7a:31:ec:f3:2b:27:84:02:72:d3:54:38:
ed:c8:84:a5:46:07:23:10:ed:fc:e1:83:a5:d0:0a:
2c:fc:0c:8c:04:85:9a:6f:9e:ae:ff:a6:aa:9e:7a:
b4:89:da:57:7f:ac:fb:d6:d9:a9:c0:cd:b2:c4:91:
8b:c3:b7:51:82:db:c1:ad:86:9b:2a:90:60:9b:e1:
ba:62:81:57:73:97:f4:84:06:7b:d4:4f:de:ca:77:
3a:29:ef:d2:f5:ea:3e:a1:99:91:c2:f7:94:04:4d:
da:de:61:dd:12:fa:88:2a:ca:8b:a4:c7:72:39:26:
be:d9:1d:68:32:77:8e:14:c2:4e:ab:88:11:6b:c4:
0c:58:3c:ea:f0:09:ac:af:76:58:f9:4c:20:d7:5c:
fb:9d:de:c4:77:37:d1:49:8b:a4:b4:ca:3b:66:50:
bf:0e:88:48:53:e7:ac:80:eb:2d:89:45:f0:b9:87:
1e:51:1a:e2:87:dc:5b:0b:23:f7:1d:8b:97:1f:ee:
90:94:f4:55:e7:d8:39:d9:03:ed:4e:69:12:87:72:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E6:8E:BB:ED:5C:56:51:B6:DD:6A:8F:70:98:6F:9D:3A:D7:4F:9D
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/seaOu-1cVlG23WqPcJhvnTrXT50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.200.0/24
195.136.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:4d:e5:b9:52:fb:3e:28:59:82:5e:06:58:49:a1:ae:a3:87:
e0:b8:4c:39:c0:39:a0:04:3c:e2:70:b9:1f:0e:89:2f:be:a4:
dc:87:5b:e8:6d:1f:78:c4:fa:28:d0:58:f2:79:f8:8d:42:c7:
89:da:c8:62:ec:bb:ee:65:52:70:7d:0c:f0:c3:cb:a4:99:3e:
b9:48:bc:4b:33:b1:53:f7:b8:d4:1a:93:8d:74:d3:cc:66:e5:
1a:38:ad:fd:6a:67:e1:3a:f3:61:6f:04:49:a1:37:a1:3a:4c:
59:07:bf:de:28:1a:32:95:d5:29:36:db:cf:67:f7:78:8a:75:
df:2e:53:ac:9b:33:21:fb:6c:ac:c9:01:7a:ad:92:0c:50:63:
bf:97:ff:2a:9b:d1:76:f7:d3:c1:87:87:94:34:81:65:9a:d7:
fd:f7:5a:46:6a:ff:e8:9e:06:14:3d:99:6a:4a:d1:ee:b2:39:
5b:ff:c9:0a:f0:16:5d:fb:67:6d:0c:9c:2e:c9:14:9a:72:4e:
c2:18:fc:cd:a0:68:eb:bf:a2:99:10:ad:82:fc:70:59:63:1c:
ac:e2:aa:c4:0d:03:ce:8d:fb:54:06:ab:f1:ff:1f:16:a6:b6:
82:b1:ba:38:77:3a:5b:52:72:89:d2:8f:a6:8c:12:24:66:ab:
91:b4:fa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org