Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/oSdrd7cRtbojOMaqAyYtR1k8STE.roa
File: oSdrd7cRtbojOMaqAyYtR1k8STE.roa (raw, json)
Hash identifier: FXs5vgfgwDdR/yBbgAsGv79ezSyWdiP0yqKLEUMXiCQ=
Subject key identifier: A1:27:6B:77:B7:11:B5:BA:23:38:C6:AA:03:26:2D:47:59:3C:49:31
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 0E986A95
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/oSdrd7cRtbojOMaqAyYtR1k8STE.roa
Signing time: Sat 01 Jan 2022 01:03:15 +0000
ROA not before: Sat 01 Jan 2022 01:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49225
IP address blocks: 195.160.172.0/24 maxlen: 24
195.160.172.0/23 maxlen: 24
2001:678:560::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244869781 (0xe986a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jan 1 01:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1276b77b711b5ba2338c6aa03262d47593c4931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:7b:a7:74:78:ae:a8:98:2a:64:bd:b5:a3:
f2:72:bb:b6:e1:ff:63:7f:7e:1c:fc:c5:96:1e:4e:
18:3f:66:3d:a8:17:e9:19:b2:4f:2c:86:91:a3:53:
79:ff:23:f3:14:ab:dd:73:6e:f8:b8:46:96:4c:e0:
d9:f3:9f:0b:fd:9b:da:a7:ee:3b:e4:aa:4e:d3:2a:
e6:c8:a6:24:c5:94:70:ed:5c:a2:72:ac:31:0c:80:
5d:d2:d4:c5:2c:9f:3d:5d:b0:bd:d7:31:77:fe:48:
7a:1b:f3:79:df:43:73:df:2f:78:b3:24:90:12:e7:
fd:3f:ad:f1:e8:96:ab:93:99:03:39:a2:16:7f:44:
8e:32:88:52:16:19:12:b7:ef:1e:e7:8a:e1:1b:d6:
0e:2c:c2:f9:f2:fc:69:88:f8:b5:9e:e6:16:57:93:
9b:99:e1:88:9e:70:e1:4c:45:0b:55:53:64:3c:85:
00:64:3b:9e:09:05:a8:c2:54:32:79:14:e9:de:8f:
81:c0:8a:1e:e1:44:d7:2e:a3:bb:67:61:b0:81:43:
5f:eb:55:4f:6f:ab:43:bb:44:46:f0:ae:d4:7f:13:
84:6b:12:d0:2c:49:61:61:29:40:15:a9:31:0e:1b:
c4:23:1f:17:4b:5c:49:ca:43:e1:98:3d:91:2a:ce:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:6B:77:B7:11:B5:BA:23:38:C6:AA:03:26:2D:47:59:3C:49:31
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/oSdrd7cRtbojOMaqAyYtR1k8STE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.172.0/23
IPv6:
2001:678:560::/48
Signature Algorithm: sha256WithRSAEncryption
5c:d6:d4:26:9e:3e:7a:84:e1:18:87:ac:48:27:af:b8:cf:23:
08:26:40:5f:68:37:07:bd:35:9c:4c:72:4e:7e:bc:5c:ae:53:
6e:a3:99:6d:7c:c3:63:e3:e7:c3:7c:c0:fa:89:88:17:62:c4:
b9:30:8d:f8:e0:48:e4:6a:78:a4:37:28:01:80:71:d3:dc:b6:
19:8a:7a:88:18:8e:40:3b:1a:35:3d:bc:9d:ba:20:7f:ab:a2:
5f:07:c1:61:f7:3e:e8:6d:78:af:72:10:25:13:3c:33:9c:fa:
1d:eb:9b:bc:54:8e:4d:f2:9e:21:25:4e:c8:99:62:91:35:1e:
f4:e3:9a:e4:ce:81:4c:eb:54:ac:59:e3:f1:5c:06:f4:de:f1:
4d:07:63:7c:d5:95:e5:09:03:6b:c0:07:ff:72:9a:58:33:6c:
2e:73:33:a5:14:f0:47:19:aa:0d:8f:83:6c:ce:d1:64:93:24:
a5:bf:a1:d9:63:22:c7:ba:2b:8c:dc:7d:ca:3c:a0:de:a5:a0:
03:8f:3f:3d:0c:f5:a3:95:57:e3:3b:55:49:6c:bb:0c:09:ee:
f7:eb:a6:e0:85:7d:d1:7d:0f:fc:aa:07:94:ce:5e:6d:25:ca:
db:5e:a1:71:9d:db:4c:4c:e9:42:9d:a6:a9:b2:70:f4:16:78:
de:2e:16:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org