Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/8LxXdsAV02nwyYsBZjH5sntr55I.roa
File: 8LxXdsAV02nwyYsBZjH5sntr55I.roa (raw, json)
Hash identifier: cDGE03lZEQrZS8z2kkRoiXBykqtnZQ6uUQ2Ox6hsbm4=
Subject key identifier: F0:BC:57:76:C0:15:D3:69:F0:C9:8B:01:66:31:F9:B2:7B:6B:E7:92
Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial: 70B3
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/8LxXdsAV02nwyYsBZjH5sntr55I.roa
Signing time: Mon 10 Jan 2022 08:41:05 +0000
ROA not before: Mon 10 Jan 2022 08:41:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31017
IP address blocks: 194.102.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28851 (0x70b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
Validity
Not Before: Jan 10 08:41:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0bc5776c015d369f0c98b016631f9b27b6be792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:22:6d:98:36:14:03:fc:0d:76:df:96:44:
a8:41:d4:af:9d:be:c5:d5:6f:f7:5a:aa:bb:5b:62:
32:e4:23:4e:ed:c8:c6:41:51:09:96:27:83:e2:8b:
4c:1c:72:9e:52:39:73:cd:c6:89:b7:2f:0c:42:83:
7a:0c:24:f9:c6:3b:86:a7:c8:0c:88:31:af:b9:2a:
5b:6d:7b:d4:65:c2:53:a9:8a:5b:a9:90:78:82:60:
5b:74:ba:5d:76:ea:2c:71:7b:ea:d7:5b:4a:1d:0e:
3e:35:b8:cb:c9:9a:9e:3c:16:d8:53:d1:bf:03:c0:
7e:e9:1f:19:36:81:74:68:e6:13:c3:a3:bf:d0:b2:
c4:24:6a:f7:d4:10:79:44:2d:32:b6:8d:d5:df:f4:
d0:49:fe:aa:f9:c3:ce:7e:c9:04:6f:65:56:27:87:
86:dc:c3:1a:4c:b4:11:5a:94:69:b3:aa:12:7e:09:
7b:1b:cf:47:6e:95:06:71:17:09:3b:32:80:07:c2:
f5:f0:43:87:5c:bf:2d:c9:fb:d9:51:4b:54:ef:32:
b2:d5:3e:91:37:b5:d6:de:3a:e9:da:a0:7f:5e:55:
35:9a:34:65:c4:e3:66:a3:16:90:f9:7a:19:49:dc:
d4:fb:33:f2:ce:56:a2:63:c5:17:ca:7f:63:43:50:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:57:76:C0:15:D3:69:F0:C9:8B:01:66:31:F9:B2:7B:6B:E7:92
X509v3 Authority Key Identifier:
keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/8LxXdsAV02nwyYsBZjH5sntr55I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.194.0/24
Signature Algorithm: sha256WithRSAEncryption
33:aa:74:41:75:2e:09:94:5e:c9:d5:78:ef:dd:07:61:42:9d:
b5:47:67:19:e0:9f:f5:36:b8:10:cc:68:f5:ca:9b:c3:ab:2b:
c5:18:39:fb:13:df:ee:8d:33:ed:80:d2:09:2d:2b:f6:3b:05:
e5:f0:9c:a4:cd:5b:2d:ce:48:2c:e9:64:42:e0:06:71:25:e6:
60:28:b5:d3:82:da:94:63:bb:84:c9:c4:82:02:e2:89:84:47:
0e:92:72:8a:c5:ab:5d:68:97:ab:5f:20:de:d6:31:32:5b:3c:
d4:17:54:6f:66:3b:43:74:33:c3:e3:35:19:06:7c:30:ac:25:
f6:c7:86:e0:22:68:60:2d:45:ae:3a:ef:32:fe:f0:f0:61:53:
0d:28:a1:77:2e:51:30:a1:6e:f1:e9:9c:9e:b9:bd:52:29:49:
6a:87:58:80:3a:fa:a1:e8:71:fb:b5:6d:3a:2a:3a:84:2c:cb:
e0:30:5a:87:40:59:68:90:b4:20:59:c6:0c:a8:a6:5b:1a:f8:
68:6b:8f:20:88:fa:22:2f:c4:a6:8d:28:d0:cb:17:66:25:1d:
64:22:f2:bb:2f:a2:48:3b:29:d5:ad:60:c9:a3:55:94:c9:a5:
07:b8:0c:d7:92:a7:8c:78:35:cb:e7:8f:2b:c4:54:70:b9:85:
d7:60:f1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-fra.rpki-client.org