Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/O8qpFzmqwazLus6eDRoyzqtEY_M.roa
File: O8qpFzmqwazLus6eDRoyzqtEY_M.roa (raw, json)
Hash identifier: NFKS0ZXPtOmWWzrGcYJnkRslgMCWk/noJhAUbTB/GxQ=
Subject key identifier: 3B:CA:A9:17:39:AA:C1:AC:CB:BA:CE:9E:0D:1A:32:CE:AB:44:63:F3
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B749FEF
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/O8qpFzmqwazLus6eDRoyzqtEY_M.roa
Signing time: Sat 01 Jan 2022 10:02:47 +0000
ROA not before: Sat 01 Jan 2022 10:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209455
IP address blocks: 195.228.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460627951 (0x1b749fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bcaa91739aac1accbbace9e0d1a32ceab4463f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:14:0c:1e:95:87:6d:06:36:a4:3e:4a:00:
7c:49:4f:cc:5d:db:d8:31:79:9f:99:bb:42:6d:a3:
28:3e:a6:76:27:c9:03:a0:2e:ce:45:84:26:56:fb:
c2:07:9b:5a:11:c9:dc:58:71:03:7b:d5:29:58:2c:
2b:af:fd:d8:09:a9:72:bf:a3:ba:44:8d:2f:e9:f6:
7a:54:a3:70:a3:67:c3:5c:f8:4f:0d:f4:d6:0a:8f:
45:65:7c:42:37:d9:93:16:31:47:94:87:d9:21:8f:
6e:b8:95:ea:36:11:62:2a:23:df:8c:ea:f9:99:a1:
de:4e:7a:cb:31:b4:0f:e6:7a:24:b4:ae:71:38:8b:
91:83:4b:34:16:6e:04:ec:b7:0f:48:bd:d6:cf:65:
34:cd:1a:2c:ea:c3:53:ec:50:7d:49:c2:37:f1:ef:
84:d1:55:c7:6c:22:14:7c:96:f8:ef:ae:b5:68:af:
e2:96:db:0a:39:7e:0e:c6:5c:0b:79:6b:bf:70:5f:
a6:ea:11:64:1a:50:3d:e2:88:fe:d1:64:3f:46:2f:
6a:af:8a:5f:de:c3:33:30:53:3f:f0:e0:ec:c1:a0:
94:79:dd:3a:3c:c8:be:b8:bb:2d:05:93:6d:a5:4a:
94:96:3b:e6:4b:1f:f6:86:a5:5b:bd:b1:03:ee:7c:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:A9:17:39:AA:C1:AC:CB:BA:CE:9E:0D:1A:32:CE:AB:44:63:F3
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/O8qpFzmqwazLus6eDRoyzqtEY_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.228.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:05:69:f1:84:81:f8:89:8a:29:c1:0d:85:57:d8:d6:ec:83:
d8:c0:88:6a:d5:22:a7:67:b8:10:15:e6:ba:41:6e:bc:b8:08:
8b:4c:38:42:bc:41:ce:3c:be:c3:7f:0f:a1:58:98:05:d4:5b:
f6:65:1e:59:ef:ee:70:e9:ad:a3:91:c3:80:fd:94:49:8b:51:
56:cb:40:3f:18:50:c0:2a:d1:83:63:8f:f3:78:cd:fb:49:6e:
fb:be:65:b4:09:fb:f3:ba:b1:90:ff:e1:64:2d:21:bf:bc:02:
d1:ce:7e:62:b4:6a:fd:1d:cc:4f:df:16:1f:4f:00:11:97:d1:
80:6b:4c:fb:ae:3c:eb:2d:0f:d0:0a:93:07:07:eb:83:d7:e3:
14:93:dd:7d:e9:11:f8:79:c5:0c:65:a0:93:8b:82:61:de:4c:
26:47:67:76:6b:65:b6:be:54:cf:c9:f7:77:77:ac:d2:cc:fe:
8b:82:cf:ff:ad:9b:2b:8e:e2:3b:18:dc:f7:30:4d:bc:11:7f:
90:9a:20:80:73:7e:a8:56:e1:cd:e5:3f:d5:cb:42:d2:1a:68:
20:28:05:ed:15:c1:23:aa:c8:79:c7:ba:50:b7:bc:34:0a:f5:
4f:bd:96:ee:b8:41:28:77:a5:22:85:13:8e:60:47:cc:cd:2a:
0e:11:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org