Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/s3bR9GmJ5MAk0y-re_LqtlG3QpY.roa
File: s3bR9GmJ5MAk0y-re_LqtlG3QpY.roa (raw, json)
Hash identifier: ThAxaEhPXq/0/17Cvrk1YfhGwfAxftET9t0i5SFG25o=
Subject key identifier: B3:76:D1:F4:69:89:E4:C0:24:D3:2F:AB:7B:F2:EA:B6:51:B7:42:96
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0182823A69E64AEECED9F4C95C550A2AD897
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/s3bR9GmJ5MAk0y-re_LqtlG3QpY.roa
Signing time: Tue 09 Aug 2022 10:50:42 +0000
ROA not before: Tue 09 Aug 2022 10:50:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 195.88.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:3a:69:e6:4a:ee:ce:d9:f4:c9:5c:55:0a:2a:d8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Aug 9 10:50:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b376d1f46989e4c024d32fab7bf2eab651b74296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:f9:18:80:85:54:15:50:59:c6:89:b2:e0:
ca:a2:d6:f6:cd:10:4e:c6:16:eb:14:44:31:74:fc:
43:96:00:35:c6:b2:67:4a:3d:f5:4e:41:be:89:cb:
f7:89:53:6f:11:26:2f:56:32:ce:ff:a1:5f:62:02:
9d:5a:fa:a5:6b:d2:cc:73:bc:bf:81:48:22:bc:e1:
34:10:8a:1e:92:0a:8c:27:d5:76:d7:28:4c:89:aa:
34:65:d1:8b:61:46:ba:97:07:ce:a9:03:ff:60:54:
ee:85:d7:95:13:ef:16:60:73:75:75:c3:18:30:5c:
2f:20:a7:6a:12:2e:fe:70:5a:25:7a:bf:47:2e:f6:
a4:22:09:53:7c:0d:8b:cf:ad:c6:27:d7:2d:9e:5a:
46:8b:9b:81:17:9b:cd:c0:ab:0d:d0:18:d3:9d:29:
43:7c:3a:57:5d:60:23:45:f0:3a:b6:cd:2f:46:43:
eb:b5:da:81:9a:90:ad:76:86:b8:6c:0f:65:e3:67:
2f:90:7c:90:5c:31:a3:b6:f8:3c:9d:31:35:ac:1a:
54:98:44:48:5b:27:b3:d0:e9:36:52:ae:16:ce:97:
da:31:16:a6:b8:0e:2e:d4:75:f2:ca:27:88:8c:ff:
5b:0a:8c:6a:5e:0d:e3:20:61:a6:f2:7a:4e:24:06:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:D1:F4:69:89:E4:C0:24:D3:2F:AB:7B:F2:EA:B6:51:B7:42:96
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/s3bR9GmJ5MAk0y-re_LqtlG3QpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:85:f7:b4:ce:a7:49:14:60:f9:c8:59:67:0f:88:31:69:dd:
8d:68:40:6e:81:f1:05:a8:12:f4:ba:44:ad:9f:17:61:4c:c6:
7c:2b:89:83:43:7f:7f:39:ce:28:28:75:15:65:83:14:05:67:
78:ae:a6:7f:84:ca:f7:b9:9e:e6:57:8f:fc:b4:82:16:b2:54:
03:1d:cb:a6:4e:25:d2:51:d3:07:ba:ce:38:37:91:04:f9:97:
d6:dc:a4:29:6c:43:48:9c:69:ea:4d:97:de:51:ff:e2:c5:b9:
d1:3b:64:46:d7:bd:48:bc:80:f6:67:9b:cc:94:25:a3:6a:df:
79:04:61:a8:26:d5:2f:e3:53:52:6b:64:39:89:6d:bf:1b:43:
8b:b4:f2:89:8e:32:e0:de:bf:f8:26:49:3b:ff:68:49:08:49:
2e:da:ce:31:6d:d9:91:32:de:ec:c2:9b:e9:fb:02:9e:09:d9:
c9:b5:16:27:6a:2d:01:96:bf:06:af:7d:bf:cc:7d:b9:04:5c:
af:0e:12:94:96:db:a6:a8:ef:04:77:98:95:e5:98:a7:1b:8e:
c6:79:92:ff:3d:91:46:54:05:51:26:08:db:f7:ce:1b:db:8a:
61:98:d5:b8:8a:78:7b:9c:e6:fb:ad:cc:b6:0e:aa:e0:3f:c2:
9d:10:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org