Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/eXaeqqWn4XgmkX0w7BGVZ243vx4.roa
File: eXaeqqWn4XgmkX0w7BGVZ243vx4.roa (raw, json)
Hash identifier: RiI5z9LxotCNWDJkAspp3hO037OCLHK1x8T/w64IwdY=
Subject key identifier: 79:76:9E:AA:A5:A7:E1:78:26:91:7D:30:EC:11:95:67:6E:37:BF:1E
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 018539008AEF4B9B9E80BBCFC32570E489A1
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/eXaeqqWn4XgmkX0w7BGVZ243vx4.roa
Signing time: Thu 22 Dec 2022 08:43:34 +0000
ROA not before: Thu 22 Dec 2022 08:43:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42346
IP address blocks: 194.56.124.0/23 maxlen: 23
194.56.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:00:8a:ef:4b:9b:9e:80:bb:cf:c3:25:70:e4:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Dec 22 08:43:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79769eaaa5a7e17826917d30ec1195676e37bf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:84:06:ba:fe:60:f5:d5:18:01:53:85:f8:
c0:d8:8f:f4:a5:b9:30:46:1d:21:2f:7c:54:f5:b6:
43:c5:ef:01:33:38:91:e6:a9:65:4e:44:83:92:38:
5b:6b:de:59:7f:c3:e0:f6:ed:14:72:d9:55:1b:d7:
30:1a:bd:d5:7d:87:9f:9d:de:05:fc:74:0b:74:35:
a2:ee:8e:c4:2c:9b:f6:aa:61:25:2e:7b:3c:2d:4e:
aa:c3:31:d8:09:a4:ff:95:8a:b0:70:33:4c:24:64:
b9:ae:ac:db:98:34:c8:1f:20:07:43:e2:ae:7b:4d:
95:75:c5:70:76:3d:47:d8:46:80:a5:58:e7:6a:dc:
ac:45:2a:41:b2:a0:4c:28:4e:16:19:d6:b1:3b:73:
9f:89:3d:bb:4d:e2:1f:7d:9f:53:48:c5:24:5b:52:
6d:33:ed:1b:0f:28:38:0d:33:1e:60:2c:41:c8:d3:
68:29:ca:6d:4b:f2:4a:d0:eb:3e:b9:19:99:4d:c8:
f3:7e:aa:a1:70:5a:9f:3e:e5:bc:4d:d0:57:81:c1:
e2:9b:46:bf:e2:c8:f1:5d:ee:78:22:46:76:9a:a8:
3b:d1:d4:3b:af:32:c1:0c:b6:91:a7:61:39:68:66:
c9:d3:00:e3:ad:16:9f:fe:0e:55:6c:d7:ba:5f:25:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:9E:AA:A5:A7:E1:78:26:91:7D:30:EC:11:95:67:6E:37:BF:1E
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/eXaeqqWn4XgmkX0w7BGVZ243vx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.124.0-194.56.126.255
Signature Algorithm: sha256WithRSAEncryption
20:5e:bc:d1:7d:0c:c1:e3:3c:42:38:ee:36:87:78:c5:c0:5e:
e7:a9:af:c5:45:70:bb:8f:d9:57:1d:4b:16:b6:79:2f:fe:85:
49:c0:00:b0:40:87:f2:4c:4c:54:73:a5:48:de:32:63:08:ac:
69:1d:7a:ce:af:1e:55:55:89:96:48:45:e2:b0:9b:01:42:8c:
40:8e:88:e0:57:ec:cf:02:71:3d:42:58:c9:8f:12:63:bc:17:
01:28:c4:3d:d9:d2:88:fa:c2:ae:be:88:a4:a9:29:fc:d7:f8:
41:43:63:ef:b3:6c:5a:c2:b0:68:f7:b2:a4:bd:9d:7e:b9:da:
cb:0e:c5:67:9f:9f:d0:a0:b6:b8:16:eb:e6:fd:83:90:c5:3a:
59:e8:f2:f3:59:a8:7d:dc:80:57:01:8d:41:71:98:00:bd:79:
7c:ca:5d:c5:02:1f:f6:a8:6b:58:06:7f:b1:6e:c7:f0:c5:55:
47:8d:0b:c4:94:83:4b:52:68:30:92:b6:f6:37:d9:70:c8:67:
fb:fd:f0:93:8e:02:0f:2f:80:50:e8:92:db:ee:5f:5d:57:58:
52:07:49:9a:36:90:68:78:81:41:0f:07:06:7f:4a:98:d9:db:
31:d7:08:60:ce:cc:6c:9f:1a:87:8e:b9:b5:a4:70:91:8f:a0:
8a:de:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org