Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/xwgjwsgyJ-tiSPUtAVlkgds7G20.roa
File: xwgjwsgyJ-tiSPUtAVlkgds7G20.roa (raw, json)
Hash identifier: pqib4jvqwuNT8hvUfBZKFQQRE1lii9TjQJvBEdUwFTI=
Subject key identifier: C7:08:23:C2:C8:32:27:EB:62:48:F5:2D:01:59:64:81:DB:3B:1B:6D
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 01850680F0E89CE596692E2505FD8A3C9BD4
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/xwgjwsgyJ-tiSPUtAVlkgds7G20.roa
Signing time: Mon 12 Dec 2022 13:23:11 +0000
ROA not before: Mon 12 Dec 2022 13:23:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12350
IP address blocks: 195.13.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:80:f0:e8:9c:e5:96:69:2e:25:05:fd:8a:3c:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Dec 12 13:23:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c70823c2c83227eb6248f52d01596481db3b1b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:5d:3d:b9:9a:f0:a5:b6:84:90:57:20:8e:
6f:07:78:84:63:12:57:77:18:dc:cb:24:f9:c2:e6:
89:d4:00:21:24:45:70:5c:0e:23:ca:5d:43:c1:ce:
0a:9f:5d:6b:02:8f:94:01:72:27:c1:cd:e2:39:4b:
5d:08:54:2b:21:45:4f:15:d1:7f:20:56:eb:15:52:
b9:a2:64:19:fa:a5:51:84:50:40:b1:be:dd:33:4e:
ce:1a:4d:33:fb:9b:46:12:cf:1b:57:e1:20:6e:8c:
30:e2:47:06:2b:74:95:8c:26:93:78:3d:b1:0a:09:
33:cd:74:54:7f:8c:bd:79:38:fd:2e:5d:ac:81:fe:
27:c5:aa:3d:ba:9f:1a:ad:a2:4c:f7:89:e1:4d:07:
bc:05:c8:4f:c2:16:a8:53:50:4e:f7:2b:2a:96:b0:
38:5b:a7:de:5f:94:7f:bc:32:ce:d5:5d:69:d8:d3:
8b:00:aa:69:de:f7:09:0c:fb:4a:2f:2a:48:12:bb:
8d:d7:e7:ea:75:9d:73:e9:f5:b9:5f:ba:19:b2:f4:
85:8d:10:fa:dc:ca:99:ab:2a:f1:dd:32:52:6a:8a:
4d:bc:57:6f:46:c2:25:6d:a9:13:ff:6f:2c:bf:24:
8a:e2:d2:f5:fe:d5:39:53:65:26:be:64:2a:7a:4d:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:08:23:C2:C8:32:27:EB:62:48:F5:2D:01:59:64:81:DB:3B:1B:6D
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/xwgjwsgyJ-tiSPUtAVlkgds7G20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.52.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:99:86:32:fe:99:b4:63:58:ec:cb:29:f5:74:a5:df:95:60:
74:04:08:e8:c8:c2:3f:93:3f:31:ef:fd:63:58:5a:04:28:a9:
e7:95:4c:fb:4a:c8:f2:c7:29:cf:be:fe:8f:c5:c6:f3:c5:f3:
09:f0:7c:e1:ad:0b:ed:70:1b:3a:15:7f:97:d5:d4:55:3c:65:
66:07:01:39:0d:fd:46:fb:92:af:b2:16:8d:22:71:61:6a:07:
0b:b2:09:eb:a2:58:23:c7:bc:16:81:3d:75:a4:51:94:99:23:
c9:11:76:5c:f5:f9:a0:9f:95:71:a5:dd:f1:0f:3e:eb:39:38:
e0:cc:84:80:b4:c5:6e:cb:14:c2:14:0c:78:16:1d:05:02:b2:
fe:7c:48:b2:7f:c1:d6:8e:48:64:05:4c:0c:d6:c4:c0:2a:05:
42:9f:dc:bb:98:22:14:a5:b7:c4:3a:ca:41:54:b1:e8:63:60:
7f:d4:67:2c:80:a5:f7:b2:67:2c:fe:72:de:ca:a1:fa:00:35:
35:21:8f:a0:8d:70:aa:64:b3:95:88:bd:1c:41:61:5c:d3:7f:
0d:23:ee:a1:cf:ce:b6:4d:67:1d:e1:3a:3a:b9:2e:5b:68:e9:
a5:5b:92:f4:e2:d9:17:4c:20:ba:26:02:26:02:6b:50:14:34:
1a:59:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:44 2024 by rpki-client on console-ams.rpki-client.org