Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/IUtpqBUFDXvZfy0te9VrdMzVB8Y.roa
File: IUtpqBUFDXvZfy0te9VrdMzVB8Y.roa (raw, json)
Hash identifier: 9Y+OaZrjW9DAe+RCVd3YwDkNF40HsSNELaz28Wm0zt4=
Subject key identifier: 21:4B:69:A8:15:05:0D:7B:D9:7F:2D:2D:7B:D5:6B:74:CC:D5:07:C6
Certificate issuer: /CN=eedd14c6aab0e8a4c9c2411d90fce10568c25ec1
Certificate serial: 018281F4D2DDE217C64C222E985FD8F4A544
Authority key identifier: EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/IUtpqBUFDXvZfy0te9VrdMzVB8Y.roa
Signing time: Tue 09 Aug 2022 09:34:41 +0000
ROA not before: Tue 09 Aug 2022 09:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 194.5.16.0/24 maxlen: 24
194.5.50.0/24 maxlen: 24
194.5.54.0/24 maxlen: 24
194.5.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:f4:d2:dd:e2:17:c6:4c:22:2e:98:5f:d8:f4:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eedd14c6aab0e8a4c9c2411d90fce10568c25ec1
Validity
Not Before: Aug 9 09:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=214b69a815050d7bd97f2d2d7bd56b74ccd507c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:91:c9:94:fe:6a:b8:83:75:d1:15:0c:28:
96:d7:7f:90:fd:32:cc:f2:c4:25:95:85:b1:fe:63:
dd:aa:cd:a9:20:c1:7f:da:c2:a2:cb:b8:93:8d:c1:
27:01:f9:5c:7e:9f:ca:b9:4c:98:3a:64:a4:69:6b:
75:76:1f:48:bc:a2:ff:30:1d:a3:08:f4:5b:28:35:
ab:ca:6f:34:c7:5a:23:5e:98:ad:70:a5:89:a8:95:
92:ee:bc:f3:cf:6e:72:72:b1:dc:6b:69:35:9e:b0:
e4:04:79:73:0d:05:db:06:8a:58:44:31:13:86:3e:
00:6b:9c:92:25:e9:f7:f2:5e:3c:21:45:e5:d6:87:
9c:a4:97:8d:fc:bc:11:05:db:a3:96:54:8a:02:cd:
00:60:c2:e0:ac:63:55:ed:90:bb:d0:b6:0a:db:7e:
c4:1a:1a:31:1a:a8:30:cc:40:1d:cf:5c:12:db:ab:
0c:b2:72:a8:f3:fa:51:5b:97:2e:0e:de:63:dd:77:
59:d0:64:2a:c0:3d:78:4c:f6:78:b9:69:54:90:11:
a2:95:29:6c:cc:29:64:00:1a:64:96:26:0b:5e:55:
0d:4e:59:4d:8f:66:a3:61:0d:df:d9:3e:49:5d:d4:
48:92:ef:af:dc:c6:cb:8b:c0:0a:71:b3:00:2b:b8:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:69:A8:15:05:0D:7B:D9:7F:2D:2D:7B:D5:6B:74:CC:D5:07:C6
X509v3 Authority Key Identifier:
keyid:EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/IUtpqBUFDXvZfy0te9VrdMzVB8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.16.0/24
194.5.50.0/24
194.5.54.0/24
194.5.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d7:d3:cd:0b:8f:06:79:27:ef:41:a9:1e:7a:6e:84:29:69:
11:65:2a:08:9d:e5:17:56:44:8a:a0:25:66:e6:c7:e0:a6:ed:
e2:49:37:33:96:a4:cb:c5:89:a3:77:53:8c:5a:33:09:05:03:
d7:97:46:f1:10:b8:d1:75:6b:15:2b:0b:0d:91:54:92:ed:b1:
be:78:4b:49:fe:1f:9f:5b:cc:cb:f8:f0:92:30:be:ad:e4:c7:
65:29:f3:95:8d:4c:f4:e0:64:88:c0:ba:f9:31:ce:75:70:59:
a9:0b:cc:bc:cc:d2:fb:7a:b3:47:44:be:20:34:66:d1:ef:4b:
41:43:05:90:12:9b:25:18:58:2f:e1:fe:32:07:43:d6:25:8c:
bd:31:ec:7c:a4:3f:cb:d5:bf:37:a7:57:4a:7f:43:4e:73:f3:
22:81:fb:82:13:71:57:99:fe:88:3a:86:4b:54:d5:4e:49:b2:
20:c7:85:62:7e:61:93:a9:4d:5a:a7:01:fc:64:05:f4:c0:54:
11:f6:0f:cb:e4:06:3b:5b:9e:6f:44:ad:1a:15:6b:58:d1:6d:
a8:75:5b:14:c9:1f:ee:ee:89:93:b0:40:fd:44:2a:ca:eb:2c:
d2:ea:12:46:37:e0:5a:21:dd:cc:a6:f0:5d:5d:be:1e:c2:70:
05:dc:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org