Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/uL9Y3G5waF16hE1DYxNRRdfhbPA.roa
File: uL9Y3G5waF16hE1DYxNRRdfhbPA.roa (raw, json)
Hash identifier: 6CISvLfxSc3pCJXReyRZys6q6EOkhqj6KPX9V7EjRxw=
Subject key identifier: B8:BF:58:DC:6E:70:68:5D:7A:84:4D:43:63:13:51:45:D7:E1:6C:F0
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 0183D8D059DBFB7DEED67370C19AA53B6A58
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/uL9Y3G5waF16hE1DYxNRRdfhbPA.roa
Signing time: Fri 14 Oct 2022 23:24:36 +0000
ROA not before: Fri 14 Oct 2022 23:24:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39592
IP address blocks: 195.244.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d8:d0:59:db:fb:7d:ee:d6:73:70:c1:9a:a5:3b:6a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Oct 14 23:24:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8bf58dc6e70685d7a844d4363135145d7e16cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:e6:f5:11:60:4d:a7:0f:d8:58:26:e4:9d:
a5:35:7b:e0:3e:89:59:a7:06:3a:ed:a5:1f:f6:dc:
5d:8f:6b:9d:f2:0e:47:84:0c:87:bb:e4:ae:3a:8a:
f8:93:69:e8:3e:a4:cc:a8:42:ba:9a:91:3d:9a:29:
4b:2d:8f:8a:1d:9f:9b:b8:ed:7b:a9:8b:f6:3f:12:
40:5e:19:92:c0:69:74:a3:ac:bd:4a:6e:95:b1:af:
b4:eb:6f:eb:9c:b6:68:67:e2:8f:a5:b9:c2:de:72:
a2:77:d8:ae:b9:56:70:24:df:d6:37:5c:c4:9e:fd:
3a:0b:72:c8:00:64:b8:1b:ff:17:fc:86:83:41:4f:
44:f2:93:61:05:35:c5:70:11:0f:f0:85:a2:a5:47:
c4:e7:fb:46:5e:e2:df:57:fb:d2:cb:e0:af:05:68:
98:93:0d:01:d3:70:07:5f:db:5d:dc:08:d6:90:03:
ad:b0:6d:a6:3b:1f:f1:a5:1e:61:12:45:fe:be:07:
85:16:6e:71:47:0a:b7:f3:ae:43:d4:d1:78:67:e0:
3a:5b:1a:79:1b:65:a5:f4:4a:da:d3:01:08:7a:08:
86:33:4f:ba:68:1f:31:da:bd:cc:72:2a:da:75:72:
79:cc:8b:e8:1d:eb:b2:0d:ed:f2:3c:af:e2:f7:c4:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:58:DC:6E:70:68:5D:7A:84:4D:43:63:13:51:45:D7:E1:6C:F0
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/uL9Y3G5waF16hE1DYxNRRdfhbPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.29.0/24
Signature Algorithm: sha256WithRSAEncryption
51:74:e7:c9:22:e3:f7:9e:73:67:47:c4:48:ab:29:a4:99:8b:
2e:59:80:48:78:82:74:46:af:e1:ea:b7:fc:1f:48:2e:bc:66:
fc:4d:75:f4:18:b8:b2:29:3e:0c:a6:51:a1:a5:e3:96:86:46:
14:d9:45:6c:1c:ac:13:a8:12:7a:d1:27:4a:11:4a:dd:0f:f3:
5b:c8:c1:7c:d6:40:45:72:01:04:71:ef:d7:f1:fb:14:4d:de:
db:85:5b:94:cd:9d:4b:de:25:a3:24:9b:f1:bc:ff:52:28:14:
2a:f3:0b:8c:51:b6:ad:9d:d6:ed:c8:7e:b5:c7:03:8f:ea:86:
93:2d:10:f2:f6:31:3f:9c:db:ef:76:29:19:64:4c:5a:7b:fa:
0a:e2:0b:06:44:a5:32:22:00:81:a9:a7:d7:c3:f1:1b:c9:fa:
ec:c5:33:73:38:91:21:ab:32:8c:34:90:72:2d:a1:d5:2d:53:
23:b3:4f:92:13:b7:57:85:7a:72:c7:e6:a2:c3:2e:c9:95:35:
14:e6:6b:45:cb:e2:bd:61:27:6d:b0:ff:50:71:00:ed:be:4f:
44:03:b8:05:37:f4:8e:0e:bd:dc:93:01:76:92:94:31:eb:55:
4f:6a:c3:24:b3:f0:2a:1f:fe:3b:c2:59:0b:69:d4:8d:66:14:
9e:a4:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-ams.rpki-client.org