Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/RS2R0hFPPXGghulf2TAav96nQiw.roa
File: RS2R0hFPPXGghulf2TAav96nQiw.roa (raw, json)
Hash identifier: +YEV8Gq2N6ljTb/4p5ir34cBwF+m/MRjZUz2OzJWxvQ=
Subject key identifier: 45:2D:91:D2:11:4F:3D:71:A0:86:E9:5F:D9:30:1A:BF:DE:A7:42:2C
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 164CEAD1
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/RS2R0hFPPXGghulf2TAav96nQiw.roa
Signing time: Sat 01 Jan 2022 14:56:15 +0000
ROA not before: Sat 01 Jan 2022 14:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59642
IP address blocks: 195.189.96.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374139601 (0x164cead1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jan 1 14:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=452d91d2114f3d71a086e95fd9301abfdea7422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:7a:03:c0:d7:aa:09:27:a7:2e:73:d8:93:
1b:07:6b:e8:3e:0c:48:67:3e:4d:26:f6:3c:c6:8d:
d8:af:a1:87:f6:70:b7:b5:7d:96:80:d2:b9:e0:45:
29:d9:50:bb:5c:b5:34:4a:e4:a4:e0:ad:dc:ad:9a:
be:ef:5e:6a:25:c5:87:16:a0:6c:ad:f3:32:4d:a6:
9b:84:79:73:83:20:4d:fd:88:92:f8:f6:57:0b:9f:
6d:92:71:4c:d7:e0:d1:59:93:7c:59:c2:79:d5:dd:
3d:c2:d2:98:9f:2e:2b:c4:84:fc:a0:3d:8d:96:09:
0e:09:9f:dc:38:a9:73:cc:4c:13:e4:20:29:c8:e4:
97:de:09:e4:8a:c9:d4:f4:7d:0f:ed:74:86:01:4d:
f4:28:d5:44:36:33:ee:92:3e:07:42:d6:b5:f4:bb:
ba:25:0b:72:52:cd:27:94:a9:5c:aa:34:c5:90:f8:
60:e9:27:71:db:f0:41:48:b0:d5:a7:57:32:18:c7:
c0:7f:b9:7c:e4:3f:81:2d:14:4c:1c:10:40:a3:2a:
96:62:f8:68:87:d0:7a:49:dc:8a:74:39:ce:65:2a:
ad:53:ef:f0:77:c4:3f:d0:39:0a:9c:48:4a:42:ba:
a7:5a:bf:78:5d:13:02:81:f1:9e:74:f8:3e:85:15:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:91:D2:11:4F:3D:71:A0:86:E9:5F:D9:30:1A:BF:DE:A7:42:2C
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/RS2R0hFPPXGghulf2TAav96nQiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:c8:60:1f:59:aa:52:a1:74:21:eb:37:62:9f:cf:6e:eb:26:
3f:3d:50:75:34:f6:ce:81:79:77:a4:03:32:c8:19:d1:46:fb:
28:93:0d:6a:9c:10:ac:e1:9b:6b:70:c3:66:17:53:25:c3:a9:
4e:b4:5e:ff:e7:e9:c5:d5:2a:b5:48:3b:8f:e4:4b:27:33:2c:
af:11:9b:37:e3:40:4d:6b:11:77:ff:29:c9:5a:93:56:40:8c:
30:82:20:3f:c6:7e:95:ae:0a:7c:41:fc:ff:4b:44:2c:88:be:
13:72:95:dc:7e:20:76:d0:33:65:93:bc:7e:9c:33:db:5f:f5:
88:1d:dd:67:97:20:6e:07:b0:30:02:ac:dd:30:36:8a:48:19:
2b:b5:5a:89:14:09:4a:a5:90:74:51:1b:97:bf:1d:77:07:68:
13:80:fd:e7:de:ea:b4:7e:de:c8:be:48:49:cb:4b:54:a8:d6:
c7:9c:a8:21:2b:c4:2d:20:ff:9f:4a:1f:4f:1e:9d:63:af:45:
b8:c7:25:2c:0f:7d:33:25:39:91:c8:a2:cf:36:44:a4:16:4b:
ff:5b:e3:ba:6c:8b:4d:0e:3d:89:5a:f6:ce:b8:a5:64:f7:33:
78:53:5a:0e:c9:db:29:e9:5b:fd:1d:81:b7:f4:28:50:2c:e4:
7e:2b:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:13 2024 by rpki-client on console-fra.rpki-client.org