Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/1-bxT-dEKLNHATgvcsO1EevwllAY.roa
File: 1-bxT-dEKLNHATgvcsO1EevwllAY.roa (raw, json)
Hash identifier: ZFPdZQfmKYhKMpWRh4bGLL9M0pSzm4hiEffKswjEMFk=
Subject key identifier: F9:BC:53:F9:D1:0A:2C:D1:C0:4E:0B:DC:B0:ED:44:7A:FC:25:94:06
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 01C7CA22
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/1-bxT-dEKLNHATgvcsO1EevwllAY.roa
Signing time: Sat 01 Jan 2022 13:55:12 +0000
ROA not before: Sat 01 Jan 2022 13:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35574
IP address blocks: 194.187.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29870626 (0x1c7ca22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Jan 1 13:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9bc53f9d10a2cd1c04e0bdcb0ed447afc259406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:ba:a1:e2:1c:f4:6f:97:85:aa:63:25:0f:
75:a7:f2:35:4a:2f:39:5a:1e:89:39:a2:29:75:e4:
34:73:ce:42:00:ee:70:fd:b7:17:cb:53:85:74:62:
8b:8b:7d:2b:80:8f:7b:8a:fc:13:44:52:88:8a:1e:
22:5c:45:3a:56:e6:76:5e:2c:7a:1e:f4:36:38:89:
a5:71:fe:fa:f5:f1:62:e6:c4:a1:50:2c:68:cc:1c:
ad:eb:79:98:c8:f9:14:4e:de:7b:13:44:a7:84:67:
76:79:b1:ff:05:5e:cb:ff:c6:62:bb:40:89:8b:0a:
46:ea:c6:3d:e1:55:09:bc:2b:a8:ef:82:43:b0:be:
46:4d:53:22:c2:77:96:8e:1e:6b:ee:03:52:d1:ad:
84:c7:45:73:c5:de:bd:d7:a7:e9:6f:57:56:42:25:
a4:ff:2d:d3:29:59:40:96:97:a5:0c:3b:c7:c8:3d:
eb:59:6d:13:8b:15:35:89:be:cd:84:b7:84:e8:9d:
d0:fd:9d:b6:93:5f:a6:ed:ce:13:92:94:d6:54:c4:
aa:19:20:e7:cf:b6:2d:03:a6:34:60:8a:52:0d:0a:
fe:ef:b2:c0:c8:90:07:ab:e7:ff:eb:df:60:2f:20:
8f:de:3b:af:6e:c0:93:58:fe:66:f3:54:c5:47:62:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:53:F9:D1:0A:2C:D1:C0:4E:0B:DC:B0:ED:44:7A:FC:25:94:06
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/1-bxT-dEKLNHATgvcsO1EevwllAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.172.0/22
Signature Algorithm: sha256WithRSAEncryption
91:d7:7e:4e:0b:05:a1:16:c3:25:b9:15:2d:85:a9:17:9c:ec:
55:98:81:9c:14:65:b0:58:74:4f:40:11:29:dd:96:14:a0:9e:
ad:57:4b:a4:24:a5:ce:08:fb:0c:5b:19:6a:01:1b:79:8d:3b:
0f:20:82:c4:4e:2c:09:7f:a5:e3:99:98:a5:17:bc:8b:6c:3c:
c4:0e:40:f4:4b:81:6b:68:e6:76:22:c7:c5:31:6b:5a:be:14:
63:64:64:10:66:e6:17:87:53:d5:13:09:a5:b4:6f:9c:6b:8d:
27:c7:d7:10:d8:eb:2b:7e:a0:d5:5f:bd:96:48:e8:5e:b3:8a:
3f:f5:ac:6a:4e:02:0e:64:4d:87:cd:6f:ef:ca:c6:02:28:47:
78:67:5c:23:82:96:bc:61:18:37:5d:db:01:b3:f0:40:d6:3d:
8c:fa:14:58:19:c5:33:42:b6:4e:30:46:53:fb:05:ce:47:6d:
f9:f1:57:95:75:1b:b8:b1:8d:a4:ce:a9:ab:bd:f6:1d:23:9c:
9b:1e:f4:e4:56:f5:bd:43:12:95:7e:fe:42:64:08:f5:c3:43:
46:21:af:87:49:14:ee:fc:8a:3a:4a:6f:da:00:5c:4a:6a:40:
3f:c3:41:7b:17:ca:e5:f6:e7:38:3d:d7:a4:90:e6:39:fa:47:
0e:54:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:09 2023 by rpki-client on console-fra.rpki-client.org