Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/k2AK5sMx1p4uRrfrmyLdVT86w88.roa
File: k2AK5sMx1p4uRrfrmyLdVT86w88.roa (raw, json)
Hash identifier: 3vJx8FJZjDxPABJj5fuBiKBoFaZjsi7myiHBZRHmrDA=
Subject key identifier: 93:60:0A:E6:C3:31:D6:9E:2E:46:B7:EB:9B:22:DD:55:3F:3A:C3:CF
Certificate issuer: /CN=cced992030531e7e8b518aefd9e267cc528eda9a
Certificate serial: 01845D10A9C1A53ED828ABC4A47F4EFF9E21
Authority key identifier: CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/k2AK5sMx1p4uRrfrmyLdVT86w88.roa
Signing time: Wed 09 Nov 2022 15:44:43 +0000
ROA not before: Wed 09 Nov 2022 15:44:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 195.170.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:10:a9:c1:a5:3e:d8:28:ab:c4:a4:7f:4e:ff:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cced992030531e7e8b518aefd9e267cc528eda9a
Validity
Not Before: Nov 9 15:44:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93600ae6c331d69e2e46b7eb9b22dd553f3ac3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:16:64:94:62:dd:c4:3a:d3:db:23:c3:d7:
33:5f:1a:c3:27:bf:b0:f4:2a:82:b6:fb:0c:68:6e:
c4:2a:d2:74:1a:91:45:9c:4c:a6:30:63:9f:d9:fc:
27:01:e0:d6:59:a3:6e:61:0c:01:71:31:e2:84:e6:
ab:68:10:ec:83:5a:8e:6c:e8:7a:2f:ce:e7:ea:3e:
19:90:86:25:80:83:16:eb:22:c1:23:23:ee:8a:3e:
62:e7:ff:8a:96:d7:34:03:38:dd:72:4a:23:dd:a0:
06:c2:ed:a3:45:04:39:3e:f2:20:4e:ae:b0:74:28:
12:97:95:84:0a:2d:5e:a8:eb:b8:92:d1:89:cd:35:
fa:d6:ac:bb:39:01:22:76:ad:01:01:0d:7c:22:29:
79:b9:79:c7:c3:44:ca:c4:84:40:b8:0b:4e:11:5d:
c0:d0:16:c6:d2:6c:62:3f:b7:16:fb:c4:a7:68:ad:
09:f4:4e:28:17:71:fe:70:42:b0:6e:52:c5:0e:c1:
77:52:25:0b:7d:94:7c:c3:5d:d3:d2:ec:bd:91:aa:
82:d8:02:96:26:e2:fe:30:1a:e1:ce:aa:78:0a:6b:
9c:c3:52:11:81:fc:6e:c6:1b:7f:99:d5:37:e2:78:
81:f9:6f:fb:cf:c1:be:73:35:85:e6:8e:64:9c:5f:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:0A:E6:C3:31:D6:9E:2E:46:B7:EB:9B:22:DD:55:3F:3A:C3:CF
X509v3 Authority Key Identifier:
keyid:CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/k2AK5sMx1p4uRrfrmyLdVT86w88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9a:9e:69:bd:3a:a1:bd:79:c3:48:cf:9b:84:48:1d:78:4c:
93:ee:99:b9:30:29:aa:df:bd:d8:46:2b:c5:de:30:a4:2a:23:
8c:6c:9f:d9:b5:5c:4f:57:e1:16:89:fd:b9:93:20:90:10:91:
f9:5f:70:88:ee:90:fa:37:8a:f4:48:24:23:f8:8c:4d:b5:b1:
e0:e8:b8:6f:d4:d6:5e:d0:64:83:f0:1d:84:f7:04:1b:fd:cf:
85:5f:0f:2e:07:b8:37:51:2a:36:70:bc:8d:60:a1:c9:18:50:
97:89:4c:28:a6:bb:47:0c:29:fa:fa:e3:fd:b4:6f:27:77:5d:
06:f7:a4:99:8b:0c:dc:07:69:c4:5b:7e:2c:c7:8e:37:78:02:
1b:75:09:2d:0c:7d:c5:4c:20:fa:f9:70:fd:47:99:c8:4d:01:
2b:3c:a8:df:91:40:05:60:3e:03:28:1f:ca:dc:7d:c7:f1:30:
57:d3:b9:16:f6:3e:a8:5a:aa:5b:c7:92:6c:27:8f:7f:8b:3d:
f4:c7:e7:e8:b4:d7:8c:85:8c:eb:94:01:6c:e5:a9:0a:25:e3:
64:8a:8e:27:b7:6b:55:91:83:e7:66:e2:3d:38:58:bf:80:a2:
3c:d7:5e:04:41:ff:44:c2:4f:ef:fa:74:cc:4d:40:9b:7f:60:
88:f2:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-ams.rpki-client.org