Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/l0VC9yqY8W5Mv2U9gZgccrEbdlY.roa
File: l0VC9yqY8W5Mv2U9gZgccrEbdlY.roa (raw, json)
Hash identifier: 0lX7d9wygNir79MqbhUvbdQ9UclAb4kHMdA9qziTTp8=
Subject key identifier: 97:45:42:F7:2A:98:F1:6E:4C:BF:65:3D:81:98:1C:72:B1:1B:76:56
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 088B00EB
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/l0VC9yqY8W5Mv2U9gZgccrEbdlY.roa
Signing time: Sat 01 Jan 2022 03:50:57 +0000
ROA not before: Sat 01 Jan 2022 03:50:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41318
IP address blocks: 195.168.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143327467 (0x88b00eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 03:50:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=974542f72a98f16e4cbf653d81981c72b11b7656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:af:c3:38:a7:e3:b9:3d:63:a3:7c:b5:67:63:
ce:c6:80:cf:66:cd:3a:3f:0e:87:81:44:9c:85:3f:
04:44:52:57:48:55:55:11:bd:92:80:8a:40:7a:47:
0a:aa:fc:c4:c1:39:c9:90:4f:fd:d3:07:bf:0b:88:
9b:09:5c:e7:2f:e3:73:14:34:ba:52:2e:a3:52:a4:
72:d2:21:0f:f0:f7:e1:d2:64:52:a5:94:01:b6:fe:
4b:08:11:fa:24:1e:3c:f4:a9:ca:4f:ab:a4:12:98:
fc:ac:1e:f2:4a:06:c8:bc:de:45:c4:e0:51:b7:84:
37:91:18:10:21:8b:e5:21:6e:10:5f:a7:3e:fd:30:
09:9a:56:57:0b:eb:40:a5:71:c3:e9:2b:38:0a:25:
dd:3c:c2:35:7e:58:2c:19:7e:dd:5b:86:14:68:f5:
29:c9:1a:0f:8c:d9:b3:68:71:d9:c0:11:23:22:cb:
ef:79:ef:ae:07:7e:db:68:77:cf:c5:a1:bf:63:88:
d4:a1:7d:3c:1d:97:f9:91:09:21:d3:d7:42:e7:f4:
7f:7b:36:e4:ec:2b:ef:09:30:8e:d1:11:9f:b6:e4:
2e:15:0e:d6:9c:12:05:3f:0e:a2:86:c6:80:8c:48:
3d:72:67:a6:87:f0:e7:73:ef:a0:3a:9a:f6:35:6a:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:45:42:F7:2A:98:F1:6E:4C:BF:65:3D:81:98:1C:72:B1:1B:76:56
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/l0VC9yqY8W5Mv2U9gZgccrEbdlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d3:aa:23:0a:02:b8:7d:94:63:69:e5:b6:87:80:ed:f6:34:
df:04:f6:e3:5d:5f:84:e5:40:4c:0d:d7:24:72:36:6b:17:68:
9d:5e:a1:99:11:b3:a9:85:fd:09:fb:3e:37:ea:f6:48:30:a7:
f6:1b:2b:78:a2:1b:af:12:e6:2e:90:34:fa:41:d0:6d:62:0d:
cb:ca:a9:ba:12:0a:af:51:a1:15:51:03:53:00:59:76:77:3c:
96:41:43:fc:cd:95:53:cb:32:3e:af:7b:35:3a:18:e3:4e:a3:
f2:e2:2f:5e:83:bc:85:a9:30:16:7c:cd:3f:74:9b:ae:2a:cb:
66:ca:ac:2d:dc:2d:ac:b8:9c:e9:85:df:9a:be:05:15:f7:50:
92:59:96:e4:51:94:7f:cc:34:a2:df:f1:9a:e4:60:45:f5:ac:
ff:33:63:58:8b:73:72:ec:ab:cf:4d:e6:25:99:24:58:03:e4:
04:6c:64:22:bb:3a:ab:de:eb:97:d8:10:2a:8b:0a:bd:1a:17:
44:ea:e3:5a:17:d3:ba:56:23:b8:91:e3:33:b6:8c:75:31:ab:
d7:2b:b5:d7:8c:11:ca:33:06:16:64:5c:68:d0:d1:7d:34:6a:
39:6e:5f:5d:81:3e:fa:57:e2:17:63:dc:e7:58:0c:67:7c:f8:
97:07:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:04 2023 by rpki-client on console-ams.rpki-client.org