Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/t7LmSdTBiTx_7olDOLoDlVeUCeY.roa
File: t7LmSdTBiTx_7olDOLoDlVeUCeY.roa (raw, json)
Hash identifier: X2WfPmO+t25L5VeDvULID82ZSgB4smsyxpvRBzYpiIU=
Subject key identifier: B7:B2:E6:49:D4:C1:89:3C:7F:EE:89:43:38:BA:03:95:57:94:09:E6
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 017B5C
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/t7LmSdTBiTx_7olDOLoDlVeUCeY.roa
Signing time: Fri 21 Jan 2022 12:54:06 +0000
ROA not before: Fri 21 Jan 2022 12:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41907
IP address blocks: 194.34.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97116 (0x17b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Jan 21 12:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7b2e649d4c1893c7fee894338ba0395579409e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:49:78:a6:fc:13:47:03:e6:e2:7b:bc:fc:
53:76:2f:65:6d:0c:14:07:d0:60:b3:44:ba:90:d9:
8e:eb:88:a8:10:37:37:5e:97:af:70:e4:b4:91:26:
7d:d7:0a:72:2d:2a:59:16:4c:af:fc:c2:50:f6:f8:
6e:ca:b2:6a:cc:25:ae:fb:6c:16:10:0c:4d:a9:7a:
14:98:fb:96:cd:17:6f:d9:aa:13:ad:51:1e:77:91:
c4:32:91:2d:d9:63:4b:38:7a:83:10:e5:c2:fd:c1:
20:fc:b0:b8:5d:d9:38:09:2d:8a:a1:63:7d:7e:c2:
db:50:e9:59:a1:26:9d:1b:f5:d8:d8:da:33:e3:99:
e1:fc:00:3a:47:f8:34:64:4a:9c:19:39:d9:e1:dd:
d1:62:bd:4a:a7:e2:8a:b3:4e:8c:b8:13:7d:84:12:
07:80:a1:44:d9:21:e4:3f:64:c9:98:fe:56:ec:37:
53:59:c6:28:74:42:3d:fe:0e:9a:cb:9f:4d:5b:56:
56:cd:7c:37:11:e6:1d:7a:2e:4d:d4:95:7e:d9:e6:
b8:d0:94:2c:ac:71:c0:8b:78:84:66:5f:8a:44:bf:
50:78:40:3d:2e:23:83:f1:40:bc:b5:c7:5f:3f:0e:
3a:fa:f2:27:ba:2f:fc:49:05:33:16:8b:26:8f:14:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:E6:49:D4:C1:89:3C:7F:EE:89:43:38:BA:03:95:57:94:09:E6
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/t7LmSdTBiTx_7olDOLoDlVeUCeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:01:a2:8c:9e:86:31:38:3e:13:f3:8b:41:14:b7:4c:83:30:
67:b1:4a:8f:21:2e:7a:eb:52:b3:af:9d:db:4e:c8:38:95:cb:
0a:a6:52:9a:85:dd:99:0c:f2:0c:d3:fc:05:13:88:2c:53:8b:
8e:e0:29:f4:3b:b9:46:57:e7:0f:59:f9:fe:c7:98:b1:92:6a:
df:fb:57:a2:a5:74:c8:45:d0:59:82:af:5f:39:f3:b5:94:8a:
66:f5:53:a4:a2:9a:02:2b:12:fa:b2:42:8e:a5:5c:24:e9:9c:
56:fa:ff:c0:f0:86:df:95:c5:67:20:a4:e4:86:49:e2:fd:7b:
d3:cd:08:33:f0:0b:c1:3f:fe:17:9d:da:7e:22:a0:93:54:4f:
35:1e:74:2e:7a:8d:3a:0c:5c:0c:1d:34:47:de:7b:2a:b4:a7:
af:ea:e3:c7:94:a2:db:c6:d4:54:83:7d:25:d0:af:f3:32:e6:
44:8a:69:95:3a:95:28:df:ae:40:99:e2:2b:32:d1:56:c9:4a:
72:66:ee:2e:de:01:e6:56:0e:31:aa:20:f8:d9:3b:16:7b:fa:
02:6e:77:a7:ea:0a:f8:1f:28:d3:fb:f6:90:ea:e7:12:2d:90:
61:11:a4:e2:ee:52:e2:44:cd:ac:06:b9:fd:71:5e:01:39:8f:
33:12:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:40 2024 by rpki-client on console-ams.rpki-client.org