Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/o5CdCCjhAT2NmiGbmZHEkIgBGn4.roa
File: o5CdCCjhAT2NmiGbmZHEkIgBGn4.roa (raw, json)
Hash identifier: rk/d/PJqBvfF+GYC6ZLILVJLbHWdyXH90dHiOrsuMy0=
Subject key identifier: A3:90:9D:08:28:E1:01:3D:8D:9A:21:9B:99:91:C4:90:88:01:1A:7E
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 03E97D54
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/o5CdCCjhAT2NmiGbmZHEkIgBGn4.roa
Signing time: Sat 01 Jan 2022 06:57:59 +0000
ROA not before: Sat 01 Jan 2022 06:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204492
IP address blocks: 82.194.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65633620 (0x3e97d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 1 06:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3909d0828e1013d8d9a219b9991c49088011a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:b5:dd:56:e0:b9:2f:5b:13:0d:dc:10:b1:
48:53:c9:67:0f:67:ed:fd:29:17:2a:ba:e0:b0:ec:
c0:a9:ce:b4:90:b2:d7:28:32:0b:cc:2e:c9:8c:be:
43:01:91:96:a7:cb:16:15:af:4d:63:0f:ba:1c:c4:
70:e8:f1:0f:e0:2f:50:0b:06:bf:4f:67:80:86:5e:
2e:4d:58:e0:b4:c6:20:55:8a:c1:ce:4b:4d:c0:02:
bc:23:4d:2c:08:2a:c8:02:8d:88:17:27:9e:32:f3:
d5:d2:28:cc:86:90:77:c1:9a:17:e5:b2:eb:0b:df:
61:98:3f:9b:61:ab:a8:9a:68:89:ad:6b:c8:91:b4:
7b:c5:6f:80:cf:aa:fe:c1:fd:c1:19:69:81:ba:6c:
47:86:d4:1b:00:cf:5b:1c:28:98:5d:2f:80:09:15:
fa:80:94:57:4f:c2:d8:71:a7:36:c6:c0:5d:f5:7b:
38:7f:ab:9e:e7:cc:7a:38:46:6c:20:7d:14:79:18:
df:d5:20:80:98:34:e7:a2:a1:fa:ea:5a:f0:ec:0d:
b8:c2:02:10:cd:11:0d:cc:b4:78:5b:77:16:89:a6:
a5:69:4e:d6:90:44:7d:21:46:fc:f0:ff:72:78:f1:
d5:cc:b5:6c:58:2d:8c:36:9b:7e:f7:d0:1a:f5:ca:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:9D:08:28:E1:01:3D:8D:9A:21:9B:99:91:C4:90:88:01:1A:7E
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/o5CdCCjhAT2NmiGbmZHEkIgBGn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.236.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ac:a1:57:e7:60:71:e2:78:6f:bc:70:30:8f:87:c2:09:96:
0e:5b:5c:6b:ea:8a:38:f2:f9:df:f8:ad:0a:a8:c4:63:83:68:
0e:4e:65:c2:79:cc:6c:3a:55:3e:c4:3a:dd:a2:1f:a3:30:23:
02:30:2e:77:ab:6d:36:63:96:a5:f0:b1:55:0b:67:8b:99:12:
11:e7:5e:2f:e4:31:0e:13:2b:91:80:0a:e4:4a:5d:cc:44:e4:
ec:af:eb:a6:ff:15:af:b1:8b:15:c5:a2:4f:81:80:ae:b2:3d:
03:05:6f:3e:f5:e4:39:09:e6:09:6e:e2:d1:dc:84:ab:12:d4:
a7:da:a9:57:b9:10:9d:15:fc:a1:2e:42:1d:72:51:cb:3b:7f:
f8:21:51:b0:8f:f4:91:46:69:95:14:a8:5b:87:8a:28:b0:af:
2e:12:3b:c7:6e:9a:4d:45:23:1f:94:99:a1:c4:18:ea:8d:a3:
9c:a9:d6:a3:a4:d5:70:67:e9:7b:09:e4:d8:92:2c:d1:d1:23:
53:fd:d2:90:0e:4e:e4:e8:a5:a8:71:62:47:3c:8d:ff:38:52:
2e:fa:3d:3b:99:d5:35:fd:4d:4e:f2:f1:c6:52:f8:94:ac:c4:
c2:27:5b:8c:22:fd:5d:53:b6:9d:37:1b:9b:5f:b1:8a:36:05:
7b:e6:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org