Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/raXAGLV9-_6g6CF55nXS2m8Sx-8.roa
File: raXAGLV9-_6g6CF55nXS2m8Sx-8.roa (raw, json)
Hash identifier: JTd1E9NL5hd7Tjt7dgFFcv15BVB9am1GiaM69zgbSRc=
Subject key identifier: AD:A5:C0:18:B5:7D:FB:FE:A0:E8:21:79:E6:75:D2:DA:6F:12:C7:EF
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01848AA58D0708DF50402B00678095153B91
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/raXAGLV9-_6g6CF55nXS2m8Sx-8.roa
Signing time: Fri 18 Nov 2022 12:10:16 +0000
ROA not before: Fri 18 Nov 2022 12:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49227
IP address blocks: 195.123.1.0/24 maxlen: 24
195.123.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:a5:8d:07:08:df:50:40:2b:00:67:80:95:15:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Nov 18 12:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada5c018b57dfbfea0e82179e675d2da6f12c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:4a:1b:3d:2e:5a:b9:27:04:59:f0:b8:4a:
f4:aa:21:3c:1d:85:b2:6f:b5:35:d2:96:18:eb:b6:
6f:84:a4:9b:86:b7:86:cf:43:cd:2c:eb:7f:b1:28:
63:6d:f0:ef:bb:1f:14:9c:4c:9e:f1:90:35:c8:e6:
25:3a:21:34:29:22:7b:7a:a3:f0:fd:02:ca:7b:93:
86:ed:11:43:63:ef:7e:e1:d8:49:4b:1d:b1:54:b4:
db:2b:0e:a2:1d:e7:59:b6:92:7c:39:88:b9:d3:ea:
8a:e2:65:3e:4b:dd:7f:20:b8:8b:0f:89:d9:6f:b8:
fb:c3:3a:2e:e5:b4:46:0f:a0:fd:81:66:89:1d:39:
2b:0c:2e:7c:bb:a1:61:fc:56:fe:f0:37:59:2f:c3:
85:73:3b:3a:27:e3:41:a9:be:dd:ed:50:06:4e:d2:
e6:a7:b8:95:87:12:82:44:bd:ff:29:e0:e6:34:b5:
24:92:af:ae:dd:b4:1f:4a:84:14:82:22:b8:51:aa:
0e:45:f5:01:fd:c8:56:c7:22:18:b6:a0:dc:e7:4c:
83:80:d7:30:b3:50:30:5a:db:6b:a1:9b:48:53:2e:
8b:22:1f:30:42:ae:52:90:0d:2e:06:38:c2:ea:d9:
04:85:a1:71:0c:45:00:00:0f:b3:54:e3:ac:16:fa:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:C0:18:B5:7D:FB:FE:A0:E8:21:79:E6:75:D2:DA:6F:12:C7:EF
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/raXAGLV9-_6g6CF55nXS2m8Sx-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.1.0/24
195.123.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:36:3e:83:1e:44:2c:62:c6:bc:fa:fd:b4:44:bf:2b:a7:45:
84:20:df:8b:aa:be:49:96:55:76:91:8d:f3:3f:03:03:07:14:
5b:3b:62:a6:5e:b5:4b:de:c8:d9:7b:bf:52:f7:fe:cd:fb:ee:
e8:35:3a:ef:e5:08:b0:27:f1:7e:19:bb:f5:4b:d2:ed:d9:ee:
26:89:51:e0:5a:03:1b:dd:bc:32:8b:a7:b1:49:af:80:fa:e4:
77:fe:03:5a:7a:d1:2a:c9:d3:12:1b:f6:ad:4d:b0:79:eb:eb:
17:95:9d:e8:38:08:53:1a:c4:57:33:81:2b:f1:1a:55:8f:36:
3c:6b:3b:5d:4c:4e:98:94:8f:7c:27:31:98:5f:cf:43:ea:f5:
b0:e8:6e:13:f7:7b:b8:3c:8e:07:80:f9:2b:9e:47:5a:0c:1e:
e9:d4:f7:30:3b:2a:04:3f:28:db:06:e2:13:95:39:cb:68:72:
50:e2:32:54:22:1c:44:82:e3:b7:12:84:d1:32:01:68:6d:58:
15:67:0c:94:8b:7b:d4:19:44:2f:76:b6:50:53:0e:36:0c:a9:
13:9d:e7:5d:04:72:65:3f:44:03:d4:6e:f0:67:f6:5d:fb:80:
e3:36:87:29:48:ea:c6:7f:66:48:d4:7b:53:4f:a2:38:02:aa:
96:32:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org