Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/g0SqUPjZnP7XH8MyjvFvCBw3TV8.roa
File: g0SqUPjZnP7XH8MyjvFvCBw3TV8.roa (raw, json)
Hash identifier: 8T3eO94SjJFbMKgrLwwrtapz0IjDUNCPetvnVjqd9Hk=
Subject key identifier: 83:44:AA:50:F8:D9:9C:FE:D7:1F:C3:32:8E:F1:6F:08:1C:37:4D:5F
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 024AD02A
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/g0SqUPjZnP7XH8MyjvFvCBw3TV8.roa
Signing time: Sat 01 Jan 2022 04:56:10 +0000
ROA not before: Sat 01 Jan 2022 04:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9031
IP address blocks: 94.105.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38457386 (0x24ad02a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Jan 1 04:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8344aa50f8d99cfed71fc3328ef16f081c374d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:88:ed:59:46:66:36:52:f0:ed:ca:fc:8e:
50:e8:31:97:9c:42:79:8c:07:33:a3:ab:ac:02:83:
f1:46:e9:0b:1f:db:94:03:9a:08:fd:02:e9:db:fb:
89:4d:fe:cf:d8:89:03:e1:fc:95:fe:47:fe:6c:3d:
61:fe:cd:79:d8:07:13:1a:ce:7f:2f:02:67:84:d6:
ed:f6:fd:05:51:8a:0e:27:82:23:d1:68:90:21:39:
0c:75:32:03:9f:4d:99:35:f0:0d:67:d5:47:a1:e1:
92:2b:7c:5a:f8:e4:86:dd:43:00:ec:cc:43:4c:66:
50:5d:17:a6:5d:6b:cc:b9:27:d9:5c:77:1a:b1:82:
e1:e4:a1:04:de:fd:7c:9e:e1:ba:fe:cc:c2:15:90:
b8:18:ef:e7:6e:d5:bc:c2:78:71:5f:37:70:91:6c:
c1:a4:ff:d9:b0:4b:dc:28:b0:3b:01:53:bf:e5:a1:
4c:27:61:93:d0:d9:09:9d:5f:b0:b2:23:c1:a7:c7:
c9:3b:4d:00:2b:0e:d8:1d:cf:cd:68:ec:00:07:5b:
36:43:93:34:22:20:f0:be:5d:f8:29:bc:45:85:d2:
ea:72:0b:1a:6e:2e:d6:f4:4a:ed:da:a5:36:6a:5d:
33:93:22:b4:8e:3f:65:32:54:ee:cb:5c:47:07:0d:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:44:AA:50:F8:D9:9C:FE:D7:1F:C3:32:8E:F1:6F:08:1C:37:4D:5F
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/g0SqUPjZnP7XH8MyjvFvCBw3TV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.105.96.0/19
Signature Algorithm: sha256WithRSAEncryption
34:0d:a3:17:40:24:fe:93:92:01:ef:a2:e9:15:77:7c:c0:8a:
0b:99:44:2b:2a:f3:a0:86:e7:ea:c1:13:ac:21:96:c5:79:94:
d1:32:5c:fd:e6:86:00:d1:32:ea:57:49:f4:8d:8b:8a:b8:69:
6b:f8:a6:b3:bf:d8:5a:13:d1:10:74:3e:04:ee:1a:b3:bd:47:
fc:d4:ff:82:89:48:5a:16:db:3b:a7:29:3c:61:48:63:cf:15:
3d:f1:80:03:30:58:ae:94:be:c3:07:72:df:8d:a4:01:c8:14:
05:71:35:07:0d:e8:c9:fb:19:df:a6:dd:45:fa:25:a1:69:09:
03:3c:29:14:7c:55:50:58:9b:ce:6f:ed:f8:d5:e6:ab:ba:d0:
99:d0:e4:c0:f1:ea:40:95:47:9d:ad:c0:bd:98:d8:cd:04:45:
ef:df:67:89:9d:b0:39:00:87:51:71:8e:bd:2d:13:ba:7f:1a:
68:fb:78:50:ea:96:f5:13:94:c4:2b:c5:51:09:0a:8d:f1:b3:
42:f3:82:cf:a4:fd:2a:01:35:88:cc:19:5c:81:1a:c3:9f:9b:
82:90:a8:16:c3:de:f4:be:a9:36:bf:a0:80:0e:90:ea:1d:ba:
e1:5b:19:3f:7b:63:4e:12:75:b6:7b:ce:22:fb:3d:3b:79:5c:
78:78:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:58 2024 by rpki-client on console-fra.rpki-client.org