Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/k7A0IQWrpsododcIX68jpiiFW0c.roa
File: k7A0IQWrpsododcIX68jpiiFW0c.roa (raw, json)
Hash identifier: hG/h159ZQNQsy0btW4RZuBwzKuI7vvqMQekPmiYEUDk=
Subject key identifier: 93:B0:34:21:05:AB:A6:CA:1D:A1:D7:08:5F:AF:23:A6:28:85:5B:47
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 012D5F
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/k7A0IQWrpsododcIX68jpiiFW0c.roa
Signing time: Thu 28 Apr 2022 07:56:30 +0000
ROA not before: Thu 28 Apr 2022 07:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.48.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77151 (0x12d5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Apr 28 07:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93b0342105aba6ca1da1d7085faf23a628855b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:a7:f3:ad:08:3d:20:ff:23:07:74:1f:95:
66:19:0b:e1:86:4d:19:c7:49:b5:83:eb:1c:ca:5a:
63:71:a8:5a:7c:ab:cd:c7:ff:e8:c5:42:7a:de:d6:
c3:ca:83:f6:05:a5:bd:4b:3e:e7:51:76:b4:10:59:
aa:01:4d:d3:34:47:7e:2b:3f:3d:3b:ab:f4:1e:78:
90:c1:ca:8c:7d:4d:ca:89:d4:dc:c7:8d:3b:f7:23:
ef:57:d1:9c:fd:b9:74:ce:3a:9d:83:ad:f4:d0:10:
1c:66:51:01:28:af:9b:f7:1a:d1:55:41:21:d7:b1:
4a:a4:21:7c:f0:18:b7:9d:ab:6e:a7:fc:00:71:26:
74:44:94:8c:1a:ec:25:f8:8b:a2:de:04:03:cd:64:
ad:ea:10:0e:0d:79:dd:ab:7c:13:ab:3e:f4:7a:a8:
00:be:cf:f3:a8:9a:49:55:e3:16:33:58:d1:48:02:
20:50:91:51:ca:d8:88:2f:55:a4:3d:59:6f:f6:23:
a8:e8:24:6d:b1:4e:62:01:3f:04:4d:39:88:ef:d5:
ef:4a:24:6c:83:d0:9e:d6:ae:98:2e:0d:99:d7:ef:
e4:44:23:aa:4b:f9:f5:26:99:44:45:12:b0:3d:aa:
93:e5:40:cf:b5:ee:d5:ac:75:74:14:6e:72:64:90:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:34:21:05:AB:A6:CA:1D:A1:D7:08:5F:AF:23:A6:28:85:5B:47
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/k7A0IQWrpsododcIX68jpiiFW0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:88:cb:ef:ef:19:82:a5:0a:26:c3:9d:6d:45:39:60:f8:d1:
5e:12:a0:d3:04:ce:ce:38:1f:1e:c2:22:dc:6c:fe:98:cf:4f:
43:70:c6:57:26:28:0a:67:8f:1a:9c:60:5c:36:b5:94:21:04:
90:41:9d:d0:eb:63:19:90:d6:eb:f4:d1:7b:45:f6:5d:e9:10:
ba:8c:6b:bd:b3:8d:49:f9:48:7a:f4:e1:02:fa:c9:c6:57:37:
2f:34:79:fd:61:9f:28:b5:39:b3:66:37:63:1d:90:8c:c9:c1:
76:46:33:6a:45:eb:f2:34:7d:85:65:3a:71:2a:57:f3:22:8e:
76:f9:b9:05:bc:ef:cb:0b:c0:34:88:0f:25:bd:a3:72:a8:b4:
ce:fb:29:3c:68:e0:2a:c2:95:2b:48:2c:e7:fc:a2:55:e2:88:
96:71:cc:18:7f:79:b4:1c:e5:f5:63:10:05:d5:fc:72:48:9a:
10:c6:9f:48:08:d6:13:90:ac:73:4c:0c:36:4a:4b:f5:0b:fb:
59:f6:24:60:ee:ef:05:28:7f:bb:e1:6c:fa:e4:d9:29:e4:2d:
cd:b5:01:7c:de:d3:6b:34:9c:05:22:12:05:f6:76:b4:16:81:
21:8f:51:2b:32:72:8b:68:17:22:fa:04:79:ff:86:46:4e:2c:
c2:ca:9f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-ams.rpki-client.org