Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/F8jlm3bpZt9M33xcdNzX0Bj974Y.roa
File: F8jlm3bpZt9M33xcdNzX0Bj974Y.roa (raw, json)
Hash identifier: nwJZGRiA6o1/M25yQc9dZs6M+YV/g93jZPACDQZVdLA=
Subject key identifier: 17:C8:E5:9B:76:E9:66:DF:4C:DF:7C:5C:74:DC:D7:D0:18:FD:EF:86
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01820B7E00C23753DC93CF4C9FB28ED31645
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/F8jlm3bpZt9M33xcdNzX0Bj974Y.roa
Signing time: Sun 17 Jul 2022 09:29:43 +0000
ROA not before: Sun 17 Jul 2022 09:29:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 194.32.144.0/22 maxlen: 22
194.32.147.0/24 maxlen: 24
194.32.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0b:7e:00:c2:37:53:dc:93:cf:4c:9f:b2:8e:d3:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jul 17 09:29:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17c8e59b76e966df4cdf7c5c74dcd7d018fdef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:29:85:38:8c:5f:66:4e:c4:e4:ed:0b:96:
a3:36:4f:62:30:5d:6d:c0:35:2b:b6:74:4f:68:1e:
de:c9:d3:d5:38:a5:f4:45:08:7f:76:3a:d0:40:4b:
48:87:78:b0:56:a1:e8:82:fd:3d:cd:5c:87:63:c8:
0e:20:e3:ff:f4:47:87:d7:00:d6:13:5d:11:b2:78:
b9:38:c5:1a:12:24:0b:83:72:81:c2:e0:dd:ba:46:
5d:15:f3:9d:29:a9:12:5d:14:bb:b2:20:6f:1f:e3:
90:bf:0f:c6:30:9f:2c:76:d8:58:cd:e7:7f:c5:ff:
db:d2:94:fd:0b:fa:80:c3:04:89:a6:34:35:4c:31:
ab:e9:f2:f7:8a:7b:1a:d8:3f:33:4e:62:5a:de:a6:
e7:6c:3b:df:0b:8b:86:23:5c:ae:83:38:11:39:32:
78:3b:7e:b5:d1:64:e6:e8:6b:a5:0c:93:4e:e2:cd:
5e:a0:2d:73:1c:a3:ce:df:00:0b:74:64:e6:2f:b4:
9d:75:5f:0d:1f:82:67:42:5e:c1:96:71:0a:98:4f:
27:36:06:92:e8:53:7c:c3:6f:5b:fc:64:bc:b6:3f:
52:5c:da:08:41:04:15:06:75:db:f4:0a:a1:f8:7d:
9d:98:77:c8:6f:29:08:72:5b:8a:ba:bb:a7:42:9b:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C8:E5:9B:76:E9:66:DF:4C:DF:7C:5C:74:DC:D7:D0:18:FD:EF:86
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/F8jlm3bpZt9M33xcdNzX0Bj974Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.144.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c1:b4:a2:4f:9d:15:43:99:34:a2:03:af:e1:50:e7:ff:8c:
94:4e:5d:3f:8f:0a:d6:8a:05:23:03:dc:3b:9f:92:8f:b3:30:
6f:72:23:f6:1c:9f:6a:46:a2:40:ed:ed:f9:b9:36:6d:a7:45:
d8:48:9b:16:70:48:14:4d:73:dc:cc:b0:3e:6b:81:79:6c:bb:
aa:70:85:8d:4c:ad:b5:81:e7:46:95:f0:40:b1:12:a6:ff:7f:
f6:99:32:5e:41:c8:93:c1:82:d2:76:0a:4d:70:22:42:09:ec:
9e:e0:7b:ab:ca:b5:e1:80:be:1b:d5:db:05:d1:76:77:11:67:
28:b2:bb:07:6a:a6:d3:e4:4e:e9:78:31:9d:13:63:87:84:fb:
c8:35:43:5b:5f:a5:c0:c7:35:9a:34:e1:2a:af:da:54:f8:9c:
24:00:c2:bb:1f:c0:8f:8e:68:05:7a:b8:96:aa:36:39:a5:81:
09:09:ed:15:71:d6:d1:f7:2e:07:3d:6a:8e:be:27:f1:3c:f8:
92:f4:47:29:24:a8:f5:fd:14:50:6e:05:49:2c:3d:c7:11:de:
f8:e2:20:3e:f3:aa:39:4d:b8:7d:5c:64:fb:a3:02:9e:54:fa:
fe:05:55:59:83:bd:21:c6:b6:56:46:d6:36:e5:41:d9:da:64:
cf:56:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:48 2024 by rpki-client on console-ams.rpki-client.org