Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/axZjZiPcuJhF9yGeoU1cjCOAI_g.roa
File: axZjZiPcuJhF9yGeoU1cjCOAI_g.roa (raw, json)
Hash identifier: lXmc1qZOBxxFx3+cAtGUmvzCjMf4bgZcseKYs9rKrTg=
Subject key identifier: 6B:16:63:66:23:DC:B8:98:45:F7:21:9E:A1:4D:5C:8C:23:80:23:F8
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 0530F6DC
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/axZjZiPcuJhF9yGeoU1cjCOAI_g.roa
Signing time: Sat 01 Jan 2022 12:57:14 +0000
ROA not before: Sat 01 Jan 2022 12:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213198
IP address blocks: 195.64.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87095004 (0x530f6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 12:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b16636623dcb89845f7219ea14d5c8c238023f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:f2:9a:df:57:04:b4:85:68:39:36:1b:3f:
39:79:29:37:b3:3f:c7:0e:80:f3:b3:bd:4d:24:26:
8b:b1:14:89:44:bd:d7:29:8a:22:90:1a:25:75:da:
e6:64:ab:44:5f:12:5b:11:7b:39:53:c8:51:9a:65:
8a:3d:20:0d:e3:53:db:49:b1:91:e3:13:de:80:b2:
79:0e:02:4a:b0:5a:f4:f7:89:8f:0d:ad:b4:f0:e2:
ef:3d:21:ce:b2:4b:07:6d:6d:48:2c:28:6d:43:9f:
5c:2e:ef:8f:01:c2:68:9f:06:ba:2f:e6:d3:91:39:
84:f5:1d:5e:bb:30:85:b9:e5:2a:79:e8:c3:ac:c0:
c6:35:31:2f:0c:18:66:5b:be:42:75:4c:d1:46:33:
42:a7:d0:66:ef:76:8b:da:ed:13:94:46:9e:3a:43:
98:d4:06:b1:ea:8e:f5:e1:3d:38:4b:f4:d3:f6:8c:
87:2d:b1:13:61:32:e6:f7:35:62:d3:7d:e6:0f:89:
4b:d0:91:79:48:57:8a:73:54:81:9c:a5:0a:bb:fa:
d8:74:d8:f8:d9:f2:17:25:74:2b:12:2f:62:ae:ad:
18:82:4b:55:3f:c0:a8:ba:ec:89:70:63:40:ac:9c:
33:65:50:f9:4e:d1:d8:b5:45:e9:e2:c1:98:f3:44:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:16:63:66:23:DC:B8:98:45:F7:21:9E:A1:4D:5C:8C:23:80:23:F8
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/axZjZiPcuJhF9yGeoU1cjCOAI_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.238.0/24
Signature Algorithm: sha256WithRSAEncryption
52:dd:dc:6e:fe:46:5b:8a:05:f7:a5:8e:af:16:58:02:f6:f1:
7c:81:2d:11:4f:df:29:9f:49:7b:bf:f3:01:d2:cb:23:e8:76:
6a:dc:22:94:3f:f5:7e:75:b8:56:52:f2:cc:14:32:9d:20:1d:
da:30:e2:3b:07:48:2c:3e:60:7b:36:d8:e7:09:4b:04:12:3f:
79:a5:af:ab:2a:c9:e0:55:09:c9:92:5f:84:d1:ff:7c:2c:f7:
9f:29:7d:84:ed:ed:f8:f6:11:0d:5b:a0:82:f9:3a:83:d8:4d:
79:62:a0:52:a4:29:e2:cc:34:c9:55:63:f5:b8:d1:26:aa:09:
b7:78:86:52:09:9e:fe:f3:11:c8:6e:c1:3c:d7:c0:7b:85:37:
88:17:eb:d7:ba:b7:9f:39:2b:20:d8:18:aa:ad:1b:59:77:ab:
46:c8:6a:a2:7a:05:f6:df:25:87:3e:f5:fa:16:d0:93:1a:91:
a9:8b:42:57:11:df:89:da:af:65:53:b4:64:b2:2d:bd:d6:b4:
e1:bc:da:16:2b:43:83:85:c3:fe:ce:b2:73:e6:08:54:24:7d:
75:f1:8f:d3:c7:41:51:a6:0b:50:60:91:6c:92:b3:0a:bd:a1:
06:4a:00:b2:17:0e:80:b0:19:1b:69:bf:c2:d6:9c:30:3e:b3:
ce:fc:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-ams.rpki-client.org