Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/Y7vRoZdNnjINkLrNiaj8Le-_sCU.roa
File: Y7vRoZdNnjINkLrNiaj8Le-_sCU.roa (raw, json)
Hash identifier: dhPm53KJWqm7iZu+sK3Es0Kl1ov67XbG+sH795ZH04Q=
Subject key identifier: 63:BB:D1:A1:97:4D:9E:32:0D:90:BA:CD:89:A8:FC:2D:EF:BF:B0:25
Certificate issuer: /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial: 0182FF15EA8CD4076D4B88315A327276FABE
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/Y7vRoZdNnjINkLrNiaj8Le-_sCU.roa
Signing time: Fri 02 Sep 2022 16:43:22 +0000
ROA not before: Fri 02 Sep 2022 16:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29686
IP address blocks: 194.213.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ff:15:ea:8c:d4:07:6d:4b:88:31:5a:32:72:76:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
Validity
Not Before: Sep 2 16:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63bbd1a1974d9e320d90bacd89a8fc2defbfb025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:68:84:5b:86:1d:8f:05:d2:e0:f8:86:9d:
2f:ac:7a:bc:7c:51:3e:3c:f2:6c:d7:0f:c0:28:6c:
1f:d7:ab:9b:55:fb:16:63:18:a5:85:fd:bc:93:35:
ce:ec:a6:12:f7:31:ed:f8:c2:8a:0a:2b:be:36:65:
14:58:e5:0c:ae:b0:74:85:a9:c7:4b:f4:ba:1a:a4:
26:95:5b:c3:a5:79:18:7d:b4:6b:9f:7f:c5:4b:e4:
65:f4:d8:96:f9:bf:f7:40:e5:6b:12:d5:ff:ac:bb:
56:8b:1d:e5:4d:8d:3c:ec:65:80:95:49:b3:2e:6b:
d2:80:4d:a2:e1:67:e2:76:48:a9:9a:1e:b6:25:d3:
b5:2d:58:42:fb:ed:3c:cf:ca:be:49:e1:e7:73:f0:
da:b5:c8:e3:28:04:f5:30:33:54:f1:bf:50:c8:54:
d2:c5:45:9d:e9:c3:3a:21:39:b6:ae:d4:c5:f4:be:
f9:7e:78:16:59:7d:f3:15:c8:ee:c9:84:03:f4:c9:
a3:82:6c:d4:0b:30:88:5d:f5:97:b1:db:b4:19:72:
30:e6:5a:7f:a7:0d:85:6e:02:8c:1c:b5:84:1c:94:
bb:42:8d:15:74:35:f1:d5:50:30:f3:44:42:59:6e:
a7:80:e5:da:d7:25:e3:93:69:46:9c:1c:c5:ee:f6:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BB:D1:A1:97:4D:9E:32:0D:90:BA:CD:89:A8:FC:2D:EF:BF:B0:25
X509v3 Authority Key Identifier:
keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/Y7vRoZdNnjINkLrNiaj8Le-_sCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.5.0/24
Signature Algorithm: sha256WithRSAEncryption
00:74:15:62:26:63:50:0b:9a:bf:7b:d3:cb:31:9e:8c:02:21:
33:c9:e7:f7:be:3a:08:d6:f2:7f:3f:bd:5d:d8:3c:f0:7c:dd:
cc:38:22:d1:f8:b5:16:f2:2e:fb:05:3d:06:fc:ec:4c:d3:c3:
12:92:d6:a8:18:2c:18:a5:b6:2b:f8:bb:6b:80:f9:81:1a:b2:
22:13:4c:e2:cf:13:ee:83:8b:f1:96:92:83:23:d5:ac:09:1e:
13:4f:5f:b3:7c:c3:81:59:f5:af:5b:b8:02:3c:56:66:9a:da:
4d:83:1c:67:ae:bb:e1:80:9f:dc:af:2d:d8:37:cd:a0:e0:f5:
41:1d:30:09:75:9a:31:3d:14:ed:33:d7:c0:33:e2:1d:9d:b4:
31:a3:4a:8d:91:b5:59:ba:b6:45:a0:32:d6:6a:9a:dc:36:5f:
87:8d:47:b1:27:2d:e5:31:81:31:a7:12:83:84:0d:63:aa:50:
b2:7a:2f:4c:b1:14:78:4e:33:a2:43:fa:3a:c2:b3:3b:2f:69:
4d:95:ca:85:b1:a1:23:44:00:0e:a8:bc:0a:1f:9e:16:e2:7c:
c6:91:33:ab:8d:2c:37:0e:07:5c:56:c0:e2:09:40:e8:73:94:
28:9f:12:90:90:b9:20:9a:3f:27:6b:ad:91:71:58:da:b5:aa:
54:fa:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:38 2023 by rpki-client on console-fra.rpki-client.org