Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/KVXmifvAPMWjD06KPRHkUL-eV3Y.roa
File: KVXmifvAPMWjD06KPRHkUL-eV3Y.roa (raw, json)
Hash identifier: kCqhYCgEkf4wmLWCDBu/HqZzD2anVAEFlKpu8b4VOXY=
Subject key identifier: 29:55:E6:89:FB:C0:3C:C5:A3:0F:4E:8A:3D:11:E4:50:BF:9E:57:76
Certificate issuer: /CN=8c3d7d885b9fcf06c88f0fe2af10e3ae97ff5b6e
Certificate serial: 0127BFFD
Authority key identifier: 8C:3D:7D:88:5B:9F:CF:06:C8:8F:0F:E2:AF:10:E3:AE:97:FF:5B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD19iFufzwbIjw_irxDjrpf_W24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/KVXmifvAPMWjD06KPRHkUL-eV3Y.roa
Signing time: Sat 01 Jan 2022 11:53:44 +0000
ROA not before: Sat 01 Jan 2022 11:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 195.225.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19382269 (0x127bffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3d7d885b9fcf06c88f0fe2af10e3ae97ff5b6e
Validity
Not Before: Jan 1 11:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2955e689fbc03cc5a30f4e8a3d11e450bf9e5776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:a7:87:70:49:8d:af:9a:19:61:fb:69:1f:
45:bc:3d:91:59:7e:b1:5b:a3:bd:90:29:9e:da:e6:
74:b8:f6:9c:e4:ca:75:48:fa:95:fe:57:17:97:bd:
b7:77:5f:1c:59:ca:eb:26:62:b7:d1:c5:5f:15:d4:
6b:4d:5b:80:98:34:b6:ed:7f:6a:48:1d:9b:29:b1:
03:f5:6d:a9:46:8a:fc:8f:d6:fc:f2:c7:03:5d:7f:
9b:22:f8:e8:bb:98:3f:88:58:f6:8a:3a:52:9b:28:
3f:e5:78:91:65:b3:ab:21:3b:a2:14:49:46:c2:1f:
07:76:b4:32:6c:f3:d6:d9:d1:fb:0b:31:83:73:94:
58:73:53:b3:0d:01:86:a9:f6:98:9c:ee:4d:e3:24:
6f:f5:01:3d:93:30:51:d6:6f:ed:75:5d:f5:d3:ba:
fe:36:3f:32:22:96:30:eb:bf:36:f2:fc:7d:a5:d0:
f3:bb:e1:0b:0f:b7:a9:e9:19:38:8f:69:13:6c:21:
3f:d2:10:d5:85:13:23:ed:6e:fb:60:3c:33:cf:f9:
13:0b:57:29:d9:e8:f1:a7:f3:40:4d:29:35:9b:eb:
11:4c:23:4c:f8:f4:66:44:db:0c:62:5d:c0:44:8d:
2e:69:cb:23:17:94:f1:60:c8:9a:69:8a:bf:c7:b3:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:E6:89:FB:C0:3C:C5:A3:0F:4E:8A:3D:11:E4:50:BF:9E:57:76
X509v3 Authority Key Identifier:
keyid:8C:3D:7D:88:5B:9F:CF:06:C8:8F:0F:E2:AF:10:E3:AE:97:FF:5B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD19iFufzwbIjw_irxDjrpf_W24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/KVXmifvAPMWjD06KPRHkUL-eV3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/jD19iFufzwbIjw_irxDjrpf_W24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
62:af:92:f8:91:0f:9c:5d:94:73:da:c8:0e:a1:d6:af:45:ae:
5f:38:70:13:b3:bc:d0:3b:2f:e5:ca:39:84:c9:2c:d2:02:4c:
12:be:95:7e:9a:a3:6e:75:d4:d4:88:db:4b:cc:ec:4b:92:27:
cf:d2:ff:3b:38:99:c5:e9:ea:04:c1:b2:26:a7:62:7e:3e:d8:
87:54:ec:74:06:ec:48:d9:29:af:88:7e:ea:32:36:d2:ce:df:
4b:00:87:5d:82:7f:0d:ca:d5:b8:5b:14:28:f5:95:f2:2e:3b:
b6:96:81:13:0f:74:ba:6b:1c:b7:8d:bc:c7:a7:e8:0a:2a:1c:
7d:86:63:9e:d4:45:9e:df:c5:0a:6e:6c:22:5a:c2:b9:e4:aa:
9d:5d:fa:fd:f2:49:f4:31:3a:d0:79:16:5e:c5:fe:61:f3:95:
f2:a2:47:19:2f:16:7c:1e:06:e6:5d:87:b9:e6:0b:b5:1a:69:
6a:e5:9c:9d:b5:ee:af:77:47:8d:be:4b:86:b3:ab:5b:5d:60:
45:e0:bc:e2:8e:43:83:60:02:2d:71:75:1c:7c:38:39:01:f1:
43:97:3e:eb:df:63:c5:18:cc:25:2f:27:a2:80:6f:0b:98:e0:
25:54:03:38:cd:6c:55:71:84:62:37:bf:79:88:36:ff:1d:0d:
90:87:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-fra.rpki-client.org