Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/N18uTTH1ke8lmmFHkYm-9ggScwQ.roa
File: N18uTTH1ke8lmmFHkYm-9ggScwQ.roa (raw, json)
Hash identifier: eg+A2TlZo2L4Vp+AbzRd4CMYUMX1DKDgj+h4rfRIDe0=
Subject key identifier: 37:5F:2E:4D:31:F5:91:EF:25:9A:61:47:91:89:BE:F6:08:12:73:04
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 105AFB2A
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/N18uTTH1ke8lmmFHkYm-9ggScwQ.roa
Signing time: Sat 01 Jan 2022 05:53:51 +0000
ROA not before: Sat 01 Jan 2022 05:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35435
IP address blocks: 194.187.85.0/24 maxlen: 24
194.187.84.0/24 maxlen: 24
194.187.86.0/24 maxlen: 24
194.187.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274397994 (0x105afb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jan 1 05:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=375f2e4d31f591ef259a61479189bef608127304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:c3:f3:33:22:43:7d:09:8d:03:91:b2:26:
70:00:82:f2:85:08:a4:2e:2e:b7:96:43:3c:33:39:
50:a6:c3:89:db:b9:29:0f:f5:84:55:90:9e:e7:3f:
1a:88:ec:57:8a:2c:46:26:e8:7c:1a:23:49:2e:43:
85:02:68:cb:28:21:8f:e7:a6:e7:f0:30:84:18:86:
89:7b:14:28:25:e8:b4:36:88:9a:7b:1d:61:4d:3d:
d6:1d:35:2c:1b:2e:d2:75:04:2b:8d:41:3e:87:28:
7d:7d:b7:08:6b:f6:95:f2:11:fc:75:23:60:7b:6e:
a9:d1:c7:77:5e:2c:97:df:01:2e:f8:57:a9:52:d4:
7b:08:4f:d5:6a:a8:85:11:03:33:6b:00:16:50:2e:
f3:5a:f2:96:2c:06:d7:cb:df:29:6a:ee:b1:c7:73:
fa:b0:81:70:0d:56:52:82:88:59:d4:48:af:35:94:
90:ce:8d:8f:78:80:cf:5a:37:f2:fa:b3:73:5d:24:
6e:d2:60:4a:b3:49:56:6e:a1:6d:55:8a:0a:d1:ba:
61:90:41:7c:99:f4:bc:4c:14:27:4b:95:21:e5:a8:
eb:07:05:24:f0:6e:29:7c:a2:a2:6e:fa:8b:33:f2:
8d:25:56:74:ea:68:ab:9e:da:a8:cd:7b:f0:b1:c2:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:2E:4D:31:F5:91:EF:25:9A:61:47:91:89:BE:F6:08:12:73:04
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/N18uTTH1ke8lmmFHkYm-9ggScwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1d:a9:69:5d:5e:c8:f5:2e:09:62:62:06:b2:ad:1e:6d:cc:
11:8a:54:35:61:cc:04:2f:6a:9a:79:29:7b:9d:76:14:0b:d5:
9e:a3:e9:8b:7b:83:19:9e:46:46:4a:c6:98:fa:e0:02:b3:22:
47:7a:d7:b2:7b:c0:cc:55:75:cc:da:12:20:3a:ef:e6:e2:a5:
e1:3d:97:06:04:d9:cd:33:e4:7c:06:17:1c:e2:df:2d:b8:26:
5e:7a:75:3e:74:29:10:22:79:a7:96:69:97:46:78:e7:90:4d:
95:1e:3b:d3:20:1b:27:57:a2:1c:75:5f:d9:43:9f:70:0e:b5:
b0:d0:0d:58:e8:41:4b:6e:29:8f:e5:68:60:2a:1e:16:b3:b1:
6d:0e:49:ba:d6:3a:0d:41:3b:34:e3:aa:26:3f:e4:71:f6:0a:
80:00:11:80:e5:99:cb:b1:aa:60:24:01:05:b9:b6:59:f6:e0:
83:88:5c:a2:67:cc:68:f6:a7:cb:b8:d9:f6:47:13:60:e3:cd:
43:37:06:8a:b7:5f:02:ea:ae:65:06:b2:d9:00:b5:75:44:d9:
c9:70:27:dc:30:0a:80:22:21:46:46:0f:39:65:2a:89:86:8f:
81:cf:6d:99:71:98:86:e4:84:f2:6c:67:fb:df:63:3d:8b:30:
bb:6a:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:55 2023 by rpki-client on console-fra.rpki-client.org