Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jV_C1okCMHOo-mlB_UaPpOur59c.roa
File: jV_C1okCMHOo-mlB_UaPpOur59c.roa (raw, json)
Hash identifier: zJvhohdUFUU1wpBhoRtI0mwXw6DmKrDh5q+48KTjEaE=
Subject key identifier: 8D:5F:C2:D6:89:02:30:73:A8:FA:69:41:FD:46:8F:A4:EB:AB:E7:D7
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08FDE916
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jV_C1okCMHOo-mlB_UaPpOur59c.roa
Signing time: Wed 02 Feb 2022 22:35:22 +0000
ROA not before: Wed 02 Feb 2022 22:35:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199524
IP address blocks: 193.148.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150858006 (0x8fde916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 2 22:35:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d5fc2d689023073a8fa6941fd468fa4ebabe7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:af:e0:27:e4:65:b6:e1:56:aa:7c:12:d7:
f9:20:79:09:8f:39:fe:b6:83:ca:67:da:55:f9:f7:
8a:f3:f4:e8:7a:64:35:e0:60:bb:12:0a:5b:53:3c:
c2:2d:f9:c6:ce:0f:1a:5d:b5:c1:ae:95:ef:23:0b:
6b:eb:07:4f:e5:de:6d:fa:b6:87:10:9e:ea:c3:4d:
77:ca:96:9b:23:f7:b6:51:03:a9:ca:73:dd:9e:5c:
b9:e2:10:2f:f2:f6:ec:7a:11:1b:a6:e0:a5:ce:62:
cf:5c:5f:46:4f:88:92:8a:21:72:07:6d:46:d5:bb:
96:c3:20:b2:4c:f5:97:9c:d3:63:e8:a6:31:db:cd:
27:8f:6e:34:0b:35:a1:5b:bf:06:cd:35:d8:05:03:
a1:15:44:2a:c3:5b:81:5c:d7:c2:41:40:4c:df:a9:
8c:00:1a:39:9a:75:2a:af:76:52:5e:26:19:57:ee:
6f:ef:46:5c:6c:8c:8a:56:a5:11:da:07:9a:9b:bb:
67:0d:cb:d9:26:b6:82:59:6e:aa:5b:10:e0:b5:a7:
22:6c:d1:e1:26:97:50:d7:ae:79:ff:52:7c:9a:f7:
68:48:5d:13:b7:cf:24:43:26:ac:77:7c:83:b4:17:
5d:23:0e:a7:40:3d:61:8d:e9:74:9c:bb:4e:6b:b0:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:C2:D6:89:02:30:73:A8:FA:69:41:FD:46:8F:A4:EB:AB:E7:D7
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jV_C1okCMHOo-mlB_UaPpOur59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.95.0/24
Signature Algorithm: sha256WithRSAEncryption
11:81:71:aa:2d:1f:6b:2f:69:24:60:65:82:e8:0d:70:72:39:
64:21:02:d6:62:e1:92:a8:bf:1c:58:8e:e0:09:71:60:02:3d:
93:e3:d9:a5:47:28:af:e6:06:90:81:7e:42:46:ac:4b:c6:53:
4c:1a:92:13:d3:74:0b:20:3a:55:64:6e:57:11:30:7e:47:58:
33:09:f0:06:9f:d8:47:f9:ab:75:b8:07:be:f6:2e:b9:04:df:
ac:d0:7b:5a:54:22:3a:4a:41:46:5b:20:e7:6c:fb:0e:72:d5:
9d:56:03:00:65:c7:27:4c:c4:29:e1:3c:9e:19:ac:a1:2d:66:
17:6e:bb:e8:12:e7:1c:6d:5c:40:25:60:a6:1f:6e:22:ce:9b:
88:7f:fc:2a:f0:f4:ed:0c:e0:a1:5a:b1:cb:50:15:85:74:9b:
5c:f2:31:1e:bb:87:23:42:e2:46:62:3f:7a:f0:46:c6:8d:8b:
1c:c4:2c:bb:b9:42:b2:31:17:a2:1c:8b:9e:e8:86:aa:a6:ae:
03:d4:03:bc:14:51:a2:9a:72:63:94:ff:65:7e:06:3b:01:15:
af:93:a0:57:26:b0:16:11:33:fa:09:a0:96:19:31:1b:14:24:
2c:25:1a:38:ab:7d:2a:17:e4:93:f7:c5:f6:a1:96:ef:32:c3:
19:14:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-fra.rpki-client.org