Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/L0AjeI4feO4_MbJM6Nx2O_f_NZY.roa
File: L0AjeI4feO4_MbJM6Nx2O_f_NZY.roa (raw, json)
Hash identifier: tgA9dHE+26aqM3MHPBZz90rVUS1xZHTSMiILv259DJc=
Subject key identifier: 2F:40:23:78:8E:1F:78:EE:3F:31:B2:4C:E8:DC:76:3B:F7:FF:35:96
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 0B3DACF2
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/L0AjeI4feO4_MbJM6Nx2O_f_NZY.roa
Signing time: Sat 01 Jan 2022 10:53:56 +0000
ROA not before: Sat 01 Jan 2022 10:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42659
IP address blocks: 194.110.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188591346 (0xb3dacf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Jan 1 10:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f4023788e1f78ee3f31b24ce8dc763bf7ff3596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:54:b0:22:26:1d:99:d3:05:2f:ac:55:e9:
f8:67:fb:d8:e4:e0:81:f8:44:85:8b:08:fc:9f:8d:
88:bf:81:4f:77:28:d6:98:d9:13:d5:27:a3:68:ac:
2f:69:bc:95:aa:3d:4a:37:1d:fb:8d:c4:d0:f9:ea:
f5:6f:66:00:70:d5:6b:d6:8b:29:6b:6e:75:22:95:
ea:dd:a8:6a:44:2d:41:6f:7d:b0:1e:70:21:57:cc:
29:67:38:99:e2:63:95:3d:51:4a:52:a9:e0:d7:86:
19:1a:be:6b:8f:f2:04:0e:8c:fd:58:c0:6c:74:5b:
4a:52:79:ec:72:34:ad:44:77:93:e9:ae:7d:19:89:
42:dc:92:82:c6:42:fb:9f:33:cf:7b:d8:b8:05:15:
14:d9:0b:af:52:b0:27:db:37:f1:82:53:ba:2e:5f:
80:70:f1:78:65:14:83:47:df:85:60:18:3e:33:d9:
db:fd:f4:fd:80:8c:e2:70:8b:d1:1d:c9:0b:7d:09:
76:97:69:b0:ae:fb:d5:d3:97:67:a8:a2:39:a9:74:
63:0c:fe:05:de:88:91:57:e7:0b:9b:09:e8:d3:52:
ca:c9:95:b6:5d:0a:a1:18:cc:6f:e1:6d:1f:68:1e:
15:7c:0f:68:66:8b:d0:bb:d0:29:76:97:05:e3:50:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:23:78:8E:1F:78:EE:3F:31:B2:4C:E8:DC:76:3B:F7:FF:35:96
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/L0AjeI4feO4_MbJM6Nx2O_f_NZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:17:40:bc:96:c1:3f:d4:af:19:6d:b5:7f:e8:ca:eb:34:06:
19:d7:1b:1b:8f:6a:db:34:3a:d6:21:07:4a:24:7a:68:08:79:
18:eb:e8:57:b0:21:5d:a7:97:47:ad:53:e4:ce:bc:3b:b7:51:
79:61:c9:6c:30:bc:25:ef:e9:88:99:ee:26:d7:9f:03:f9:5a:
23:5d:59:bc:90:fa:f9:0e:22:95:b7:87:cd:d1:16:7f:0f:04:
08:8e:09:c3:34:04:00:9b:6c:bb:bc:9b:19:5f:31:46:f9:71:
17:d3:01:14:29:52:e1:7d:18:5a:af:df:c7:80:26:a6:7c:a5:
b9:f7:e8:38:ce:1d:63:42:6e:9b:fb:8a:0c:99:eb:31:52:33:
27:d8:f2:3c:68:88:c5:e4:3f:24:09:b7:71:02:85:13:01:8c:
52:9e:74:5c:62:1a:76:b5:92:6e:30:3c:df:3d:b9:4c:13:e0:
e3:91:3f:1c:b9:58:42:25:b4:19:1b:e2:96:90:4d:c3:3d:18:
38:56:a9:31:f5:d8:44:11:07:ee:6b:36:e2:76:45:1b:21:26:
83:c5:f5:c2:25:df:f1:9c:f7:17:e9:66:8c:f3:39:e3:a0:9b:
6e:08:75:9d:04:59:bf:38:54:fa:30:49:91:99:25:48:14:f8:
9c:65:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:19 2024 by rpki-client on console-fra.rpki-client.org