Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dQP4fMwNC8uHEys5NwJAkWOyM04.roa
File: dQP4fMwNC8uHEys5NwJAkWOyM04.roa (raw, json)
Hash identifier: 1DdMfs91hO9kZiopPtSqRDTtwWFRz2WUpoij667eYfw=
Subject key identifier: 75:03:F8:7C:CC:0D:0B:CB:87:13:2B:39:37:02:40:91:63:B2:33:4E
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 071F4C33
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dQP4fMwNC8uHEys5NwJAkWOyM04.roa
Signing time: Sat 01 Jan 2022 15:01:38 +0000
ROA not before: Sat 01 Jan 2022 15:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198996
IP address blocks: 194.107.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119491635 (0x71f4c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 1 15:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7503f87ccc0d0bcb87132b393702409163b2334e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:33:31:94:68:43:85:34:3a:de:db:b9:9f:d9:
07:32:3f:51:3e:b2:54:88:86:ef:cc:21:7e:2e:22:
26:34:72:a6:45:09:29:3d:80:9a:37:36:cd:86:39:
81:fd:ae:fd:98:ce:de:bc:65:2b:46:07:e4:68:f6:
c6:fa:02:57:83:a6:3f:cb:23:51:37:a9:2e:a9:1c:
84:7c:b3:42:16:a3:db:41:c1:2c:40:91:3e:de:8b:
9d:6b:1c:dc:8a:c5:98:93:33:67:7b:c5:4b:6f:ea:
92:ec:ef:29:3b:c1:f5:77:4b:05:9b:b4:89:89:3b:
cc:77:10:70:ca:23:8f:25:8c:b2:4c:fb:27:ad:47:
aa:61:59:db:15:6c:76:c0:d1:91:83:a0:c3:25:37:
5b:ad:2a:f4:59:40:98:f2:cc:3f:b3:e2:7e:f8:e6:
65:19:e9:50:87:87:c6:79:0e:96:d5:c9:e8:1e:43:
e0:da:5a:c1:0b:97:e6:6c:24:9e:2d:8e:46:ef:f5:
68:b6:11:45:9f:4c:55:1f:63:a1:05:6e:ce:c2:c6:
d3:78:85:d0:de:72:41:bb:13:95:b2:0d:ee:25:bc:
46:94:2c:e2:c9:e2:8d:1a:76:ed:85:5d:be:05:50:
7f:93:78:6e:6a:db:d2:12:f7:53:52:d7:4e:1a:a0:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:F8:7C:CC:0D:0B:CB:87:13:2B:39:37:02:40:91:63:B2:33:4E
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dQP4fMwNC8uHEys5NwJAkWOyM04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.164.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:8b:ca:ca:ce:0f:6b:58:ab:8a:ed:4a:98:01:81:19:5f:60:
79:ba:54:5d:15:83:02:8f:af:a8:0d:40:36:86:36:91:ea:0a:
a6:d9:a0:93:ac:9b:86:89:20:cc:2a:49:2c:b1:d0:31:42:e0:
30:9f:95:14:da:a6:25:05:a8:ad:03:af:db:0c:86:6d:fb:76:
5c:99:59:3a:18:df:31:de:d4:ad:c5:53:2b:02:9a:20:30:7f:
b9:7d:01:43:a2:c7:4c:70:ba:15:3b:21:90:db:2f:f1:8d:42:
ed:8b:93:6a:38:27:f8:d4:f0:ae:39:53:fa:bc:c1:fe:48:c8:
f3:1c:e1:a2:9b:47:be:86:46:76:c7:95:a7:76:70:83:09:6e:
41:5c:ac:2b:6f:5c:95:fe:64:b6:0f:cf:e2:6a:6e:22:ae:57:
ab:63:02:70:e5:64:97:3f:e0:9f:03:d9:1a:f2:cb:02:6c:da:
f0:ef:f2:ea:88:cb:cc:0a:19:e5:2b:cd:da:46:39:cf:9e:50:
89:5c:9f:1a:2a:f4:3f:33:64:0c:d7:6a:15:5c:5a:90:5b:9f:
91:eb:89:31:8f:61:16:fb:94:72:c0:0d:10:1a:f6:36:6f:e0:
6f:c6:c0:29:44:1d:ac:52:9b:d0:83:09:30:00:c0:a4:74:7d:
a9:07:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org