Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/rVHiixWtz_QVpr3LRwlsVeSRw9I.roa
File: rVHiixWtz_QVpr3LRwlsVeSRw9I.roa (raw, json)
Hash identifier: 43hUK7dvj6i1C1q+Bibjk5riMcDDoSqUHpcuW/Xerbc=
Subject key identifier: AD:51:E2:8B:15:AD:CF:F4:15:A6:BD:CB:47:09:6C:55:E4:91:C3:D2
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 06F3A7A5
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/rVHiixWtz_QVpr3LRwlsVeSRw9I.roa
Signing time: Sat 01 Jan 2022 07:01:18 +0000
ROA not before: Sat 01 Jan 2022 07:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13559
IP address blocks: 194.147.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116631461 (0x6f3a7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 07:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad51e28b15adcff415a6bdcb47096c55e491c3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:8d:b5:46:c7:55:e9:f1:21:2e:25:10:df:
e9:cb:ef:75:0f:62:50:4d:70:4e:ed:11:70:99:85:
1d:eb:92:43:2d:ec:79:d7:2a:63:f4:da:5e:74:91:
4e:a7:f7:85:5e:e3:15:c0:bd:1e:71:2f:62:86:3b:
58:3d:d1:a9:38:d7:b0:70:3c:3c:f3:e8:68:55:db:
49:d7:84:3c:d5:f6:4e:79:2d:29:8f:6a:05:75:e7:
13:b6:21:64:4b:ef:f9:ca:9a:10:74:1a:e1:83:48:
86:2c:40:e6:38:38:43:c4:8e:97:cb:26:bc:7b:ac:
f7:ab:81:45:48:cb:dc:07:90:a2:88:ac:de:7b:61:
e6:20:33:51:dc:74:75:c9:37:6d:7f:62:4b:23:c2:
ef:76:7f:2b:97:bc:c3:6b:cd:3f:d9:56:71:45:48:
37:b9:92:37:c5:dc:fd:e3:55:80:53:18:af:6e:18:
83:4b:bc:c1:d0:bb:3c:9c:dc:89:3a:ae:1f:66:c5:
e9:8d:cf:d6:a4:22:b4:27:ce:61:aa:40:9e:68:db:
c0:79:ac:29:dc:71:cf:a4:c9:c6:7e:b2:20:a5:f5:
e0:67:cc:e1:38:bf:08:99:2f:3b:1a:9b:93:b9:fd:
67:e4:78:81:a8:ef:23:b8:e1:06:b4:1b:f8:04:a9:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:E2:8B:15:AD:CF:F4:15:A6:BD:CB:47:09:6C:55:E4:91:C3:D2
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/rVHiixWtz_QVpr3LRwlsVeSRw9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.71.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c4:13:7c:96:74:37:ae:0c:ac:87:7b:46:01:74:35:b4:ce:
8e:27:65:37:30:67:37:b7:98:bf:33:70:d9:cf:37:05:22:4d:
c2:4e:b8:af:6b:53:1f:fe:a9:95:d1:49:05:61:c8:f7:1c:f4:
3a:26:df:4e:0f:47:9d:2a:d6:15:c9:a2:b2:8c:7e:e8:18:8b:
52:f4:72:be:c4:80:74:d4:bf:3b:cb:ac:44:0b:09:b1:a4:86:
ab:94:ed:6d:3e:2a:b9:74:05:1a:6b:db:5f:8f:b7:67:cd:5b:
f2:36:56:da:e9:1b:3d:36:00:1e:b8:dd:87:b1:0a:3f:fc:05:
96:04:f2:40:2c:17:da:42:b7:74:60:ed:d6:07:3a:2d:9d:ae:
75:32:65:50:a9:0c:6a:50:24:c1:1a:f0:61:df:a9:cc:fa:62:
01:7f:a1:42:68:50:bd:d5:c9:1a:d2:d2:25:d5:65:80:17:fa:
a2:9c:8c:d7:24:e7:24:8d:4f:ef:38:4c:64:dd:70:1b:be:2d:
b1:be:95:62:2f:76:40:f5:df:95:58:98:b7:83:86:a8:cb:79:
6f:ed:62:03:04:f8:be:0d:53:b6:8b:45:52:fb:88:fc:13:ba:
0c:73:9f:20:2b:5e:52:21:e3:79:3e:10:35:2d:6b:f5:8f:4e:
dd:c9:9c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:59 2023 by rpki-client on console-ams.rpki-client.org