Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/XzJPd5iYpFixXCj48jmm_R6Hs6Y.roa
File: XzJPd5iYpFixXCj48jmm_R6Hs6Y.roa (raw, json)
Hash identifier: 7UGwlByHziq+KVktf6QsZdTa1ZHPzNNQ7YFzK66vrQk=
Subject key identifier: 5F:32:4F:77:98:98:A4:58:B1:5C:28:F8:F2:39:A6:FD:1E:87:B3:A6
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01094C8D
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/XzJPd5iYpFixXCj48jmm_R6Hs6Y.roa
Signing time: Tue 18 Jan 2022 21:35:38 +0000
ROA not before: Tue 18 Jan 2022 21:35:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212512
IP address blocks: 194.29.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17386637 (0x1094c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 18 21:35:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f324f779898a458b15c28f8f239a6fd1e87b3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:fe:a5:5d:5e:27:f5:92:be:e7:da:ed:91:
1c:0e:a2:5c:38:fd:42:39:8f:61:55:d4:b2:d9:00:
78:72:87:1b:8e:9c:03:d2:86:c7:75:cf:0b:cc:35:
6d:d3:ad:89:54:2f:7b:76:17:25:47:c8:73:c7:31:
6b:a2:87:b4:92:30:7e:e7:40:b8:ab:48:74:b6:83:
e5:40:ac:c2:1a:e1:0c:e6:56:26:7f:69:8d:07:cf:
50:e8:8d:6a:07:ff:24:ec:08:d7:db:08:6a:78:99:
56:5e:28:c6:91:5d:59:72:a9:47:88:96:16:20:34:
ab:36:a1:54:fa:8c:ef:d5:51:27:41:c4:64:dd:e2:
1a:4f:3b:b9:8d:0f:ad:65:b0:20:53:79:be:1f:6d:
da:81:60:a0:2b:26:e2:0e:46:9f:3c:44:ae:12:82:
7f:08:17:a3:b4:98:83:48:4d:db:66:05:f8:58:39:
0b:fb:aa:42:48:b2:f0:cf:d9:1c:3d:cb:7c:49:87:
b4:c4:2e:ff:2a:df:cc:79:3f:16:be:7f:01:ea:a7:
e6:f4:20:7c:ba:7e:e3:05:89:35:7c:87:ac:8f:ae:
a5:a9:6d:19:a1:44:ab:b7:2e:29:fb:e7:78:88:1c:
9f:20:7a:49:03:4b:fe:87:7d:38:a7:c3:8c:0f:45:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:32:4F:77:98:98:A4:58:B1:5C:28:F8:F2:39:A6:FD:1E:87:B3:A6
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/XzJPd5iYpFixXCj48jmm_R6Hs6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cb:8c:05:e9:eb:6f:a1:48:3b:4a:b8:b4:82:39:d2:6b:ab:
19:e9:62:01:fc:b6:f8:5e:75:5b:43:ec:2e:ee:55:59:c3:4c:
15:2f:e5:8c:55:a7:ae:ad:2f:4e:c7:99:ab:e5:e4:ba:81:0e:
aa:88:44:1f:0c:75:39:3c:39:3c:3d:1c:ce:16:b9:24:15:d5:
16:8a:14:4b:02:e7:64:06:cf:90:27:bf:d2:ec:08:69:bb:80:
63:e6:59:d4:91:a8:53:3a:60:6d:ac:7a:dc:e7:8e:56:c8:dd:
ee:50:49:3f:fe:0e:bb:a6:47:3e:be:12:75:ac:6a:de:92:24:
1b:93:5b:cf:6e:5b:22:d2:85:17:0e:bf:76:b3:14:f4:d1:87:
68:a6:68:33:30:8a:75:3b:ca:bb:e2:93:63:83:cc:2c:1a:3c:
11:bc:28:f1:41:47:c5:a9:32:e5:d5:8e:86:c4:33:7d:3f:a5:
e8:50:50:e9:12:a4:25:73:ee:8f:6b:10:a6:3f:e1:bf:72:b6:
79:a1:ae:c6:ab:86:c1:cd:36:2e:a9:d9:d3:1f:58:c1:6a:d0:
4c:1b:69:69:73:34:05:b0:e9:b8:15:f8:c7:5b:f5:9a:17:e9:
b8:7d:65:bf:6b:91:5e:2b:1b:71:60:d3:da:fc:98:47:01:ea:
65:dd:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org