Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/C1iuSEI7Tlb_j48SB5wKHkqbcFs.roa
File: C1iuSEI7Tlb_j48SB5wKHkqbcFs.roa (raw, json)
Hash identifier: Xe+T0cn6qXhibPmISpOiQ5wSFJgpcrMbeophmN4Gi6Y=
Subject key identifier: 0B:58:AE:48:42:3B:4E:56:FF:8F:8F:12:07:9C:0A:1E:4A:9B:70:5B
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 01851A340619B2D8715C0A8728D1D9BAFC91
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/C1iuSEI7Tlb_j48SB5wKHkqbcFs.roa
Signing time: Fri 16 Dec 2022 09:11:35 +0000
ROA not before: Fri 16 Dec 2022 09:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12779
IP address blocks: 194.28.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:34:06:19:b2:d8:71:5c:0a:87:28:d1:d9:ba:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Dec 16 09:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b58ae48423b4e56ff8f8f12079c0a1e4a9b705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5b:b0:e7:c8:5d:0f:6f:56:a9:11:d8:59:b4:
88:55:54:a8:b0:50:f8:27:4b:40:6d:34:f1:d2:21:
fd:26:4f:d2:02:8f:f8:2b:ed:d5:2e:96:5b:a4:59:
87:b8:54:d5:72:31:5e:fe:2c:fc:9d:60:d7:f9:eb:
7d:51:df:8c:c9:a8:cd:ce:9e:19:69:6f:47:0e:f4:
8d:a5:86:e3:07:71:00:b1:4d:ba:2d:21:ac:23:c3:
62:74:08:17:70:7f:34:c3:81:d4:06:24:2e:c3:73:
8b:ad:6f:e2:49:cf:6d:09:29:75:3c:e3:38:7d:88:
30:b3:ab:6e:29:fb:31:c0:f9:9c:6e:77:1e:25:54:
06:52:6c:f2:e2:f2:26:4b:f4:58:5b:dd:1d:0a:3b:
06:91:cb:b4:0b:ed:87:9f:c7:86:3b:d1:67:67:62:
4a:45:3c:19:c3:35:e9:b1:b1:8e:db:88:ac:75:01:
8b:0f:b0:f3:97:1d:d7:28:27:ed:55:b5:c5:80:c5:
a2:c6:53:d4:23:af:48:3f:48:8a:dc:29:f8:77:7a:
ff:07:b1:49:d2:12:c7:50:84:0f:8f:c5:04:23:85:
37:6f:0e:6f:13:47:99:b9:c5:a6:70:a1:3f:b8:d7:
b3:51:95:e4:1c:fc:5d:67:74:48:b8:f5:36:79:76:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:AE:48:42:3B:4E:56:FF:8F:8F:12:07:9C:0A:1E:4A:9B:70:5B
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/C1iuSEI7Tlb_j48SB5wKHkqbcFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.116.0/22
Signature Algorithm: sha256WithRSAEncryption
61:43:f7:fa:14:c3:ea:db:35:ac:12:0d:81:03:bc:b7:dc:5f:
99:b3:a9:85:67:0b:43:1c:d6:e7:3c:f9:c2:52:ef:d8:6a:9f:
03:dd:bc:9b:af:a8:13:9c:9f:2d:92:44:32:6e:be:30:df:5c:
be:e9:39:e3:52:68:ba:2e:d3:e2:3a:9e:99:d8:3a:b1:9c:47:
a9:c7:4c:bb:76:b4:30:f7:7d:44:83:46:0c:04:af:24:09:1a:
33:c6:fa:2d:31:3e:bf:bf:be:7b:2c:07:d0:69:9d:0e:ce:ea:
a0:dd:9a:8a:fc:21:54:9c:7e:b8:39:50:ab:9a:78:d9:f0:56:
f9:4b:18:1a:ac:2c:c3:1c:63:c5:ee:03:c8:56:c4:05:d5:c9:
e6:b6:9b:b6:2f:d3:d1:0d:81:36:f4:a8:cd:51:17:13:cc:21:
0c:27:4d:73:53:d9:cb:87:77:2b:c9:05:60:ae:8e:74:17:dc:
b3:9d:a5:49:d8:22:ac:8d:41:c5:e6:c7:2d:c3:b3:2c:9f:f7:
d5:56:6c:bb:8c:62:f1:ab:f3:11:c9:a5:71:10:d1:da:b6:cb:
7b:be:ea:46:82:fe:12:dd:d7:98:9b:58:58:83:32:03:75:c7:
88:fb:e0:86:e2:89:fd:c6:87:98:63:85:ec:a6:da:27:a4:09:
f7:13:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:23 2023 by rpki-client on console-fra.rpki-client.org