Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/I9WQmgflGSKPHyQ2mjJb_uwNrYA.roa
File: I9WQmgflGSKPHyQ2mjJb_uwNrYA.roa (raw, json)
Hash identifier: hj+L7JuqokGWl68/sv/XHTozO3wDNIiqo0frUPri4pc=
Subject key identifier: 23:D5:90:9A:07:E5:19:22:8F:1F:24:36:9A:32:5B:FE:EC:0D:AD:80
Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial: 0ABFA8
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/I9WQmgflGSKPHyQ2mjJb_uwNrYA.roa
Signing time: Mon 04 Jul 2022 15:59:09 +0000
ROA not before: Mon 04 Jul 2022 15:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 194.180.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704424 (0xabfa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Validity
Not Before: Jul 4 15:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23d5909a07e519228f1f24369a325bfeec0dad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:29:b1:d1:94:98:f8:79:10:54:09:60:65:
f1:4c:a2:f7:cc:72:ac:be:ba:d6:03:ce:97:8b:91:
04:24:6a:0d:d4:e4:67:02:5a:c3:56:1a:37:96:d4:
15:6a:29:9b:6e:ab:68:56:a1:a2:c3:9f:36:b4:74:
06:43:c7:b9:86:d3:59:b5:c5:ee:04:da:00:89:4f:
c3:3b:e5:b0:d7:8b:00:af:35:11:73:8f:d2:68:b2:
a5:b3:38:70:d0:f9:64:b5:4a:ad:27:11:09:22:d7:
e4:85:e9:87:e6:32:c0:bf:5d:b9:89:af:66:16:83:
ef:4b:20:35:c4:4a:c6:29:6e:5d:b6:27:28:fa:86:
12:0a:8d:43:2d:71:34:f6:75:85:10:34:8c:94:27:
fa:86:19:69:65:93:98:4a:bc:d0:e7:be:c0:c6:5d:
50:69:ea:62:28:42:cf:45:e2:38:a2:bf:86:ab:b8:
9a:cb:84:a1:5c:b1:99:99:96:23:11:ff:57:48:f3:
34:e9:35:7b:e2:ec:5a:69:19:ac:4e:06:84:ed:f5:
ea:48:92:c7:b6:31:5a:d3:7e:f1:2a:ba:85:69:1a:
27:a5:8b:9c:07:75:14:57:d9:fa:03:c0:4e:6b:de:
99:c7:3e:72:bd:f9:82:8b:8c:66:c0:d5:f5:12:54:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:90:9A:07:E5:19:22:8F:1F:24:36:9A:32:5B:FE:EC:0D:AD:80
X509v3 Authority Key Identifier:
keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/I9WQmgflGSKPHyQ2mjJb_uwNrYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:de:f0:4f:48:41:b4:60:4a:2a:28:0f:73:03:87:0a:73:4a:
15:b4:13:0d:09:6f:eb:98:24:76:84:36:3c:a7:8f:f7:e2:4c:
43:6b:89:8d:26:a8:fa:04:b6:81:53:65:c7:19:e7:84:c5:aa:
72:1e:ed:14:1b:5f:36:b7:cb:1e:bf:98:44:88:a2:c0:ab:82:
6a:bc:ed:7e:e5:cc:44:6c:d6:ef:9d:54:9f:e4:dc:1a:b3:a9:
70:61:53:b0:17:08:23:3c:e7:de:e1:fd:85:da:e8:74:5b:0b:
a9:0a:e0:46:5c:9b:cb:f5:0c:03:1d:28:91:78:21:ad:89:ed:
fe:6b:75:67:72:44:d4:68:27:02:d5:60:dc:1b:7e:35:71:64:
2e:fc:30:9d:c9:d5:28:7d:12:92:f2:18:5a:25:be:7f:ec:69:
4d:f4:78:8c:ca:70:69:71:28:86:f7:78:de:81:1d:6e:7e:08:
31:3f:5e:70:2f:d3:b9:4c:ed:ae:f1:64:9c:42:60:b3:21:fe:
88:88:a7:f6:3f:64:a3:c4:f8:1c:66:74:0e:83:96:80:d2:f4:
07:a2:a8:2c:fd:ee:aa:78:06:13:35:7b:07:3b:50:d2:bc:87:
ea:b0:45:af:0c:a5:29:1b:9e:b1:aa:b2:35:07:1d:8f:bd:b0:
b6:f4:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:09 2023 by rpki-client on console-fra.rpki-client.org