Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/uM5UxwsgrJiColMUkB_QEI6yJh4.roa
File: uM5UxwsgrJiColMUkB_QEI6yJh4.roa (raw, json)
Hash identifier: lN85PRCwTN2rVbsKGGsl+1sXaMvxc/tQedODjnq3Stk=
Subject key identifier: B8:CE:54:C7:0B:20:AC:98:82:A2:53:14:90:1F:D0:10:8E:B2:26:1E
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 374D897D
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/uM5UxwsgrJiColMUkB_QEI6yJh4.roa
Signing time: Sat 01 Jan 2022 15:06:57 +0000
ROA not before: Sat 01 Jan 2022 15:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30081
IP address blocks: 195.191.102.0/23 maxlen: 24
195.191.102.0/24 maxlen: 24
195.191.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927828349 (0x374d897d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 1 15:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8ce54c70b20ac9882a25314901fd0108eb2261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:1c:fb:1e:2d:e5:70:6a:43:dd:24:bf:e1:
14:c0:b2:27:14:9f:c7:27:40:35:7b:72:f9:ba:e5:
c7:5d:74:31:41:9f:1f:fe:86:e8:ee:fc:47:ed:94:
f5:37:5d:18:43:b2:c5:95:45:60:f5:56:e0:79:6b:
6f:b4:2b:82:f6:cf:56:5d:2b:7f:c9:f5:61:2a:ba:
ac:e0:9d:21:96:0d:69:0b:c1:b2:fe:b3:38:a8:65:
77:d6:61:05:81:0c:ae:19:71:8d:e6:d4:35:f7:b3:
cd:fb:c8:83:ca:f2:2e:f1:8d:dd:77:65:18:c4:c7:
60:b0:d4:88:c5:f7:f5:64:69:ca:db:24:01:bd:6d:
d6:20:ba:77:07:37:d8:06:3c:f6:8a:bf:4a:5c:dc:
82:c4:7d:7f:0c:33:df:b4:a7:13:e2:19:4e:d7:b7:
d5:1e:dd:e4:a2:06:b6:b9:58:c5:b1:e6:9b:37:e4:
29:03:a6:e7:68:e7:ce:07:ee:d1:45:83:b0:18:81:
c8:15:77:fd:46:ab:3c:3c:0f:b5:aa:71:c4:f4:57:
7f:60:30:23:0a:35:13:b7:3d:b0:17:0f:d3:f1:76:
e8:8d:57:6e:a8:8c:17:43:b6:f3:ec:e1:5e:22:32:
89:23:79:35:dd:da:d4:68:7d:e5:5f:5a:8b:93:7f:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:54:C7:0B:20:AC:98:82:A2:53:14:90:1F:D0:10:8E:B2:26:1E
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/uM5UxwsgrJiColMUkB_QEI6yJh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.102.0/23
Signature Algorithm: sha256WithRSAEncryption
26:65:80:00:2f:47:3e:94:c0:a4:e5:5f:ee:6f:fe:15:84:38:
fa:5b:b3:eb:3e:b3:31:e4:8a:68:7b:a3:4d:4b:27:a1:9b:4d:
61:50:50:ad:cd:6c:6a:94:64:ed:86:ed:b6:5d:fd:b7:95:5b:
86:2f:f7:7c:a4:de:84:d9:38:1d:9b:e2:4f:40:55:47:86:2b:
40:a0:ae:24:bf:16:11:2d:63:42:7a:a8:6f:4e:75:2e:c5:e6:
8a:62:cb:5b:e6:a7:07:4b:5b:37:60:57:ba:31:3f:ad:1d:ae:
1d:fe:6e:01:ea:ec:19:13:c4:8f:fe:a0:1d:9a:26:bf:28:09:
52:76:41:80:27:54:cf:1b:1a:7e:9d:3b:12:62:15:95:0f:0d:
78:ed:71:16:85:3f:30:c1:e7:8e:79:81:48:f9:e1:2d:de:c6:
ae:f0:d9:3d:84:f2:0d:60:95:10:85:14:67:ae:22:12:11:12:
6b:34:ff:f9:5a:db:82:dc:fb:49:1d:1d:4c:f0:ae:c5:1b:e6:
5a:5d:39:15:34:d1:54:72:a8:0d:76:b5:08:b4:09:85:69:8f:
a7:90:ea:8e:5a:8e:9e:43:db:38:5a:1e:e0:01:b2:6b:03:15:
49:1e:2a:73:58:2a:ca:7f:39:46:82:ae:50:02:e4:0b:0c:d2:
b2:d7:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org