Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Xg_TpdAOcxwZvFkEIRQb3VZ7mWM.roa
File: Xg_TpdAOcxwZvFkEIRQb3VZ7mWM.roa (raw, json)
Hash identifier: FWNAldzzZK0mkfyVVZBii8zi732Dtz7WifUH9NxfoVI=
Subject key identifier: 5E:0F:D3:A5:D0:0E:73:1C:19:BC:59:04:21:14:1B:DD:56:7B:99:63
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0184E6D3757CECF3C5BC2ECC7963EED064C6
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Xg_TpdAOcxwZvFkEIRQb3VZ7mWM.roa
Signing time: Tue 06 Dec 2022 09:45:28 +0000
ROA not before: Tue 06 Dec 2022 09:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 194.36.172.0/23 maxlen: 23
194.36.172.0/24 maxlen: 24
194.36.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:d3:75:7c:ec:f3:c5:bc:2e:cc:79:63:ee:d0:64:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Dec 6 09:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e0fd3a5d00e731c19bc590421141bdd567b9963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:06:da:6b:2b:f6:f2:c6:1c:53:3d:05:23:
18:14:ab:44:fe:dd:71:16:92:9c:87:0c:4e:c3:fe:
78:f6:76:ba:14:db:45:f2:6f:82:fb:3d:8f:53:97:
30:61:d1:9b:6d:b7:c1:d0:7d:bd:47:71:ca:b7:51:
73:c4:a5:7e:21:f9:59:75:ba:5d:05:ed:db:18:85:
44:82:31:8a:8a:26:d0:1d:0f:31:bb:a9:eb:69:5e:
7e:84:f9:be:a7:9f:93:04:65:a1:d4:0e:3c:9c:9a:
4c:21:97:4a:26:71:43:dc:80:1e:19:ad:11:02:3c:
99:f2:41:0c:83:0b:ff:6b:3d:0d:1e:d8:d7:40:0e:
73:1b:a3:50:6f:27:9d:72:a0:fb:a5:32:32:8d:21:
7e:68:a6:91:bf:d4:7a:02:33:53:17:f4:ee:37:a6:
ab:a5:e6:f2:a0:c8:d9:bb:4d:46:4a:77:7d:64:1a:
2a:b9:db:94:c4:03:d7:2a:c3:91:4b:82:fc:2f:dc:
f9:a4:53:f8:fc:e1:30:b2:c6:f3:b6:bc:4a:2c:0f:
cb:ef:a8:bc:e7:14:2a:b1:24:63:5d:87:e4:b8:6a:
c1:d6:df:4e:cb:eb:da:b1:f2:e5:e1:1d:cf:88:86:
9f:38:54:49:bc:d3:65:d9:67:3c:b8:3b:5a:49:d5:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:D3:A5:D0:0E:73:1C:19:BC:59:04:21:14:1B:DD:56:7B:99:63
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Xg_TpdAOcxwZvFkEIRQb3VZ7mWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.172.0/23
Signature Algorithm: sha256WithRSAEncryption
68:8e:78:ab:dd:ee:47:e8:f7:e9:2e:33:4f:5e:d2:77:57:3d:
69:c7:2c:4d:03:a6:09:c6:f3:79:0d:47:f4:7e:ba:76:f7:53:
7a:92:77:aa:13:fe:1c:b9:f6:ec:15:46:46:74:8a:72:75:ef:
68:35:59:79:bb:0a:29:89:66:c4:a3:d8:3b:4b:2f:dd:2a:b5:
1c:64:5f:dd:93:8e:cd:55:2d:6d:2f:68:d2:51:47:cd:4f:7d:
79:e8:cd:ba:2b:a8:61:f9:7a:be:25:4b:b7:70:6f:01:4b:0b:
61:3f:e0:43:6b:2c:77:6d:be:42:e1:a0:95:22:1f:b1:b2:0f:
fd:dc:6c:10:f5:05:49:86:e4:7c:ae:d2:5e:b7:55:8e:c5:e6:
e9:06:72:a4:73:52:80:34:b7:ca:bf:16:b3:ba:97:9f:37:3f:
a2:04:e9:28:ef:6d:88:d4:f4:46:04:26:fb:42:a1:78:1f:80:
a1:f6:d2:6f:08:e8:95:3d:27:2c:d0:a1:cd:46:c5:4e:3f:a7:
8c:a6:6a:44:09:8c:83:36:76:9f:7a:2e:a4:e2:2f:f8:1e:1b:
bb:cf:e1:9b:a4:a6:1a:8a:11:6a:b9:71:89:49:97:bb:3e:ce:
ec:49:76:4c:05:0f:f7:18:77:40:6e:ea:f2:e8:1d:a5:27:5d:
9d:40:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org