Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/1pI3JkzkqCRCCop7eQHxaz6IFOw.roa
File: 1pI3JkzkqCRCCop7eQHxaz6IFOw.roa (raw, json)
Hash identifier: 31i0PDTz6zMo1ys88QVzyGWifimajHiMOBIckwWIlHs=
Subject key identifier: D6:92:37:26:4C:E4:A8:24:42:0A:8A:7B:79:01:F1:6B:3E:88:14:EC
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 0182C5BA9A9811E55B6759A2885915574301
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/1pI3JkzkqCRCCop7eQHxaz6IFOw.roa
Signing time: Mon 22 Aug 2022 13:25:16 +0000
ROA not before: Mon 22 Aug 2022 13:25:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212542
IP address blocks: 195.189.240.0/24 maxlen: 24
91.233.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:ba:9a:98:11:e5:5b:67:59:a2:88:59:15:57:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Aug 22 13:25:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d69237264ce4a824420a8a7b7901f16b3e8814ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:13:7c:c3:d2:f5:11:b2:54:dd:2a:e3:04:
1f:43:16:2a:a9:9c:4a:37:b4:44:66:46:eb:f8:2b:
d8:d5:82:65:2f:d6:27:48:3d:9f:43:95:16:cd:af:
e0:b9:e9:c7:fe:c7:62:ca:74:28:84:0d:b6:47:eb:
5c:df:a3:4d:35:4f:80:c6:ee:d7:63:20:aa:31:9d:
1a:1d:33:18:77:ff:e4:8e:e5:3e:bf:3f:cc:1c:48:
93:2e:54:c3:f4:e9:34:6f:03:f0:ed:b9:83:0c:7f:
e6:a9:95:0a:5a:ea:9c:a9:cb:b4:10:c9:d7:b3:c1:
bc:15:30:26:5c:dc:cb:28:ae:4a:ce:63:5b:90:23:
77:06:f5:38:f2:fe:59:17:f0:56:5d:99:07:b2:d2:
6e:e3:4a:83:e2:62:b3:7d:51:f6:54:ea:81:54:18:
1e:fd:83:54:fb:ae:a0:16:24:d1:6e:98:95:b3:9a:
be:76:0f:d2:df:36:47:84:94:01:ab:95:26:7d:38:
39:48:42:8f:56:40:0a:e1:ac:67:99:cd:32:52:a8:
00:ff:a1:2f:7f:ca:1d:b8:1d:22:ef:32:3e:e3:85:
b7:db:31:f7:cf:8f:34:41:7a:14:f7:ef:cd:25:96:
18:0c:22:d0:62:54:bc:bf:e3:7a:70:5d:4c:fd:8d:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:37:26:4C:E4:A8:24:42:0A:8A:7B:79:01:F1:6B:3E:88:14:EC
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/1pI3JkzkqCRCCop7eQHxaz6IFOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.100.0/24
195.189.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d6:3e:80:97:53:1a:64:c9:9a:55:94:a8:aa:1d:26:81:d7:
10:bb:5e:ca:13:43:6d:28:df:23:4e:59:83:7c:c3:0c:2a:2a:
7d:9f:3d:a9:c3:7b:82:08:9d:22:86:75:69:db:32:60:10:42:
a7:54:44:27:3e:7f:7c:2f:58:50:e9:23:19:d0:63:a0:2c:d9:
af:52:c3:28:41:1f:1a:30:42:b7:83:79:57:4e:e6:d9:11:3a:
d9:c8:23:a4:21:9a:5d:d7:91:3d:ca:dd:3e:54:06:fc:cb:60:
2a:8d:e2:fc:a2:46:e9:bd:48:4f:b5:c4:0b:4f:58:84:08:c2:
e0:5d:53:da:66:a4:75:80:ce:d7:ab:03:34:5f:60:9c:17:15:
c5:78:64:3a:ad:29:09:c0:ef:f0:e9:b4:db:2f:57:5e:d1:6a:
b0:4f:55:b1:34:e9:64:4b:09:42:e0:54:25:e1:dc:a2:9e:95:
72:b5:a0:e8:da:d6:a8:f1:21:e9:b4:93:15:33:62:c8:07:2e:
77:99:01:1a:ce:d7:00:0d:85:3e:9d:8e:70:db:bf:8c:c7:06:
6e:8b:39:6c:34:e9:77:94:09:a5:6a:04:fa:c1:66:5b:8b:05:
cf:b1:1e:36:82:c1:a6:d7:b4:37:eb:07:bb:bb:3c:f1:8e:1a:
c8:39:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:44 2024 by rpki-client on console-ams.rpki-client.org