Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/iWcOTLADdSrNAwXrQuizKWyCX_c.roa
File: iWcOTLADdSrNAwXrQuizKWyCX_c.roa (raw, json)
Hash identifier: vLKW7HORuInUdR0bnxA7ey4L7j7hsN5BfYJWrbV3la0=
Subject key identifier: 89:67:0E:4C:B0:03:75:2A:CD:03:05:EB:42:E8:B3:29:6C:82:5F:F7
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 0555EEB6
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/iWcOTLADdSrNAwXrQuizKWyCX_c.roa
Signing time: Sat 01 Jan 2022 13:05:52 +0000
ROA not before: Sat 01 Jan 2022 13:05:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51305
IP address blocks: 195.226.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89517750 (0x555eeb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jan 1 13:05:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89670e4cb003752acd0305eb42e8b3296c825ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:35:51:6e:9b:08:b6:13:b9:4d:48:f7:c4:
1b:7a:4f:f8:31:45:b1:22:87:57:9b:40:99:75:19:
f1:6c:71:c8:27:a1:5f:b2:2b:64:95:f7:48:e0:23:
b0:1e:d3:20:96:a6:fd:5d:d7:ed:e8:a2:e1:b4:c8:
1f:45:a9:65:e7:0f:f4:da:3e:19:28:54:91:67:5c:
82:b6:b4:7b:ee:92:7e:74:e1:e1:84:15:23:d6:df:
2c:0c:66:d6:da:f1:09:28:9e:5e:48:f0:84:6a:88:
7d:5e:da:97:a7:09:72:73:15:a8:9b:c9:f6:76:e7:
e0:94:fc:60:b4:ba:f4:08:28:13:28:66:3e:84:be:
6a:d5:1c:37:94:30:1c:70:72:b8:5c:f3:32:79:a8:
db:d9:e0:8d:c7:58:56:54:8a:1a:9c:eb:86:f5:d8:
f2:5a:f5:21:7d:43:51:15:7a:e5:62:62:d3:08:04:
49:55:a1:78:9a:6d:61:0e:4c:8e:8f:53:4c:0a:a5:
e6:38:15:f0:2b:71:21:8b:83:15:b4:9d:b7:e2:a4:
3f:7d:c4:80:39:6a:c3:4b:8c:71:69:78:8f:9f:d0:
d8:e2:72:a9:eb:3c:51:79:42:c0:ce:d6:ef:13:c8:
88:1e:4c:8f:c4:f4:a2:c2:ab:76:da:04:ae:e0:0c:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:0E:4C:B0:03:75:2A:CD:03:05:EB:42:E8:B3:29:6C:82:5F:F7
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/iWcOTLADdSrNAwXrQuizKWyCX_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e0:97:08:95:5b:9c:43:c7:86:c8:51:b3:14:9a:ce:12:6a:
ca:de:f4:46:f5:b8:4d:df:76:f5:cf:25:26:bc:59:31:29:a6:
d9:5e:48:93:76:98:8e:df:f4:af:49:e5:ba:17:d1:df:7c:dd:
78:ec:f7:ef:70:0e:87:8c:b6:23:90:2d:3b:e9:fb:6d:2b:a9:
50:34:ee:c3:b7:ae:82:e1:e1:7a:b4:10:75:3e:f1:b9:10:46:
29:37:81:79:69:ca:b3:a3:1c:58:8b:15:c1:e3:39:6f:df:5d:
2b:45:81:8b:c6:0e:21:9e:e8:ce:2e:2d:62:db:1d:f8:e1:fe:
39:1e:66:ac:08:f0:e2:95:b0:ab:3c:23:91:35:ee:06:1b:e8:
c8:88:40:b7:af:28:da:74:23:ae:1f:d1:50:d8:96:83:89:b7:
37:ca:87:f9:2b:43:2a:4e:d2:3e:16:16:47:41:3c:3e:34:91:
fa:81:b6:e6:5a:af:4f:4f:86:70:d5:28:71:2b:b0:a0:73:bd:
89:37:2e:91:57:50:71:db:69:66:1b:37:ed:ab:bd:7a:b0:26:
a3:fe:9c:66:39:2e:b2:c9:ac:e6:11:74:3a:25:c3:3f:34:68:
ae:5a:0d:15:86:bc:74:6d:2a:a1:ac:ec:38:33:51:20:ae:ef:
18:96:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-fra.rpki-client.org