Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/H6sC0CMMzTUY8TjOaoT4StAHDRY.roa
File: H6sC0CMMzTUY8TjOaoT4StAHDRY.roa (raw, json)
Hash identifier: SHv87wi9UddyGT0DJFWdiICPPR1k2Kq/rS+xENGyVQc=
Subject key identifier: 1F:AB:02:D0:23:0C:CD:35:18:F1:38:CE:6A:84:F8:4A:D0:07:0D:16
Certificate issuer: /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial: 01823113E35A03C8F5D379A35C7C3E6488A0
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/H6sC0CMMzTUY8TjOaoT4StAHDRY.roa
Signing time: Sun 24 Jul 2022 16:39:23 +0000
ROA not before: Sun 24 Jul 2022 16:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 195.54.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:31:13:e3:5a:03:c8:f5:d3:79:a3:5c:7c:3e:64:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Validity
Not Before: Jul 24 16:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fab02d0230ccd3518f138ce6a84f84ad0070d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:8b:93:1e:45:84:fb:7b:51:05:9d:f9:09:
9f:71:be:52:3f:d0:e7:da:2f:1a:26:c1:2e:fa:91:
6a:9f:85:a4:bf:4e:39:4e:38:05:65:1e:75:95:6e:
20:c9:df:78:cc:92:76:ff:af:d6:3f:fd:95:e7:58:
e7:8c:b1:c2:0a:69:55:cd:50:6b:10:2f:84:de:57:
20:d6:20:7d:5e:63:b4:cd:4d:51:c6:95:9f:3e:d1:
e1:61:b6:9e:66:5e:a0:55:71:cb:e5:99:ff:0b:5d:
08:98:9e:43:ea:b8:30:6c:32:9f:3d:07:69:55:73:
b2:6c:68:ea:7c:f9:55:65:d3:b3:7f:83:ab:9b:00:
f4:ce:7d:92:3b:71:1d:3e:96:ba:21:b4:27:d8:48:
a6:26:6c:8c:34:35:9e:71:11:ef:5d:42:97:d8:bb:
ff:a3:a0:3a:75:82:4b:31:47:37:9c:28:9c:2b:4a:
dd:76:0d:ac:22:53:0f:ce:24:d2:57:17:58:67:f6:
46:1a:99:50:63:11:6c:e0:92:bc:b4:b3:71:fa:b4:
bc:7b:21:d5:d2:5b:fe:ee:5c:da:86:21:44:56:e9:
ef:33:8c:af:28:52:68:f2:49:10:12:a0:d3:fa:d0:
9b:5b:94:b6:fa:ff:62:47:48:e1:cf:80:50:7a:70:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AB:02:D0:23:0C:CD:35:18:F1:38:CE:6A:84:F8:4A:D0:07:0D:16
X509v3 Authority Key Identifier:
keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/H6sC0CMMzTUY8TjOaoT4StAHDRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.59.0/24
Signature Algorithm: sha256WithRSAEncryption
13:28:86:db:f0:99:46:98:53:49:1a:3a:44:23:03:10:c2:88:
6d:1a:14:fc:e6:cd:d1:89:f3:cf:c4:06:1a:09:99:3f:67:04:
44:d3:cd:a0:99:a7:3c:36:c9:09:e9:a5:ac:14:14:bb:a1:fb:
19:65:d2:48:a0:32:c7:16:b0:8e:b9:9f:7a:aa:18:8f:a3:b7:
e1:a0:dc:53:bc:21:33:13:e3:9a:d2:e4:d3:0f:fd:2b:ed:2f:
55:b4:ae:f7:13:5e:02:13:4a:1a:32:7a:50:a4:ed:5f:4b:eb:
4d:b2:38:e8:38:d7:46:3a:97:76:26:df:66:06:f8:67:18:b4:
3d:25:5e:c4:32:a1:1a:6d:64:21:94:ad:f3:89:ec:e9:2b:98:
0d:8e:86:1a:8c:94:66:59:76:a5:80:8f:43:3f:7b:73:b1:77:
c4:df:fe:30:e8:ae:1e:7b:8b:d5:1c:8c:49:8f:f4:75:17:68:
dd:41:ae:b7:c5:2c:1d:f2:4e:c7:2f:9d:32:36:67:46:ed:05:
dd:d9:9a:2f:d3:d1:24:db:1f:a0:a4:64:bc:82:39:07:31:bb:
7c:0c:ec:96:35:ae:e0:e1:bc:21:1e:bf:36:52:3f:dc:fe:ba:
ce:16:95:67:e3:5f:23:b4:9c:22:f8:8d:8b:70:60:54:5d:fb:
54:38:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:42 2023 by rpki-client on console-ams.rpki-client.org