Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/STlVpMyIQHN-lqbvxE_XRMqRiPg.roa
File: STlVpMyIQHN-lqbvxE_XRMqRiPg.roa (raw, json)
Hash identifier: QC4nCLB8fxOd6yX/a205QdF+p59ntDlduPH5XJS1lgc=
Subject key identifier: 49:39:55:A4:CC:88:40:73:7E:96:A6:EF:C4:4F:D7:44:CA:91:88:F8
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 56D4E1
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/STlVpMyIQHN-lqbvxE_XRMqRiPg.roa
Signing time: Fri 01 Jul 2022 13:18:25 +0000
ROA not before: Fri 01 Jul 2022 13:18:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39276
IP address blocks: 195.238.91.0/24 maxlen: 24
195.238.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5690593 (0x56d4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jul 1 13:18:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=493955a4cc8840737e96a6efc44fd744ca9188f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:14:a4:a4:19:8f:96:d0:79:6e:9f:7c:ea:
8a:f3:54:5c:a9:77:4f:13:3b:85:17:b7:ce:26:cd:
99:d8:9b:f7:6f:38:e9:94:48:07:e0:40:a1:0c:52:
b8:f8:f7:78:34:c3:22:51:9f:41:5e:34:91:d5:a0:
06:34:e0:e6:4c:fa:b5:7d:e2:28:3d:10:bd:51:11:
d1:c9:3a:71:c3:1d:3c:c5:4c:90:1e:7a:4c:a8:21:
36:7d:d9:97:ba:09:5e:c0:cc:36:d4:9c:5c:21:4f:
6c:91:5a:20:da:dd:8b:20:af:3c:94:a6:23:e3:e0:
9c:d5:ba:08:ba:bd:90:ca:3e:e5:bf:1d:22:14:73:
2d:0b:18:21:dd:08:c2:4f:7c:ea:c6:05:cd:54:45:
02:94:8d:60:38:5f:a5:cc:b9:92:d6:48:e7:e0:fb:
3f:6b:d7:3b:d3:34:24:34:2b:f9:1f:ed:1f:7e:5f:
95:4e:c4:80:7f:eb:cc:50:b8:2c:60:45:ee:c6:40:
25:11:86:cc:6a:4b:f6:0f:a2:70:67:c7:84:32:f8:
2d:f1:bf:cb:fd:68:cb:7a:6a:a2:c3:ce:3e:11:06:
3a:35:23:b3:91:1a:42:ec:53:c0:c9:9e:8a:bb:54:
f7:4f:0c:21:1b:55:c5:2d:77:30:34:44:26:b0:88:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:55:A4:CC:88:40:73:7E:96:A6:EF:C4:4F:D7:44:CA:91:88:F8
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/STlVpMyIQHN-lqbvxE_XRMqRiPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.90.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:45:b6:0f:cd:de:96:00:bd:b3:de:82:93:ba:a6:73:34:f2:
b0:3c:85:22:5b:4f:8e:95:7b:30:c5:aa:b8:86:9d:80:27:3b:
47:97:4d:62:59:ff:fa:95:f9:3c:3b:8a:cc:fe:27:22:57:b2:
b9:24:c8:85:59:cb:69:07:7c:9c:8f:3f:a5:e6:1f:15:7e:b4:
74:51:87:e0:f3:53:61:ea:17:5e:3e:14:54:3d:90:d8:24:85:
52:d5:49:14:06:8a:a1:d3:cc:7d:cd:05:eb:72:db:c3:e1:ea:
c4:a0:30:ba:b9:42:59:ef:c0:55:7a:9c:56:dd:fc:95:00:f5:
fb:d5:b0:40:78:66:0d:74:51:44:fd:e6:61:27:31:52:89:06:
b8:4b:05:83:4e:82:8b:f7:af:08:59:02:59:19:dd:80:61:0d:
a3:7c:a1:77:28:51:b8:81:34:b7:13:33:83:cc:85:25:81:86:
d7:98:77:39:86:0e:df:09:46:ee:32:27:73:27:99:ef:eb:0c:
ee:53:b4:7c:a0:47:34:10:c1:9d:98:d0:2b:9b:c8:31:f5:7c:
1a:fa:37:2b:65:1d:46:cc:c9:5c:d8:7a:70:4b:23:c4:7e:a2:
41:57:05:19:5b:09:37:e6:8b:19:be:6a:f9:c9:50:b9:75:3c:
4f:df:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:04 2023 by rpki-client on console-fra.rpki-client.org