Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/2Wj3EY_ketlUEbwZ6HI2qKEY6yA.roa
File: 2Wj3EY_ketlUEbwZ6HI2qKEY6yA.roa (raw, json)
Hash identifier: Y9TbCixXv6F8gP/RfhDiUXyoC26FiJEGZ80o5LFusc8=
Subject key identifier: D9:68:F7:11:8F:E4:7A:D9:54:11:BC:19:E8:72:36:A8:A1:18:EB:20
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4496C745
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/2Wj3EY_ketlUEbwZ6HI2qKEY6yA.roa
Signing time: Sat 01 Jan 2022 03:58:41 +0000
ROA not before: Sat 01 Jan 2022 03:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206713
IP address blocks: 194.51.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150732101 (0x4496c745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d968f7118fe47ad95411bc19e87236a8a118eb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:7e:5c:e1:39:4f:ed:4b:b8:99:66:bd:b5:
1a:e3:6e:d6:ca:17:6c:b2:22:83:1d:56:70:c6:5b:
fc:72:63:aa:da:3b:db:20:1c:26:01:37:51:ea:2a:
77:2a:a1:6e:2b:60:8d:35:70:7f:82:20:5e:a4:45:
f5:3f:0d:35:93:cb:91:0e:19:d4:f7:e8:8d:b9:96:
76:3f:e5:ae:ed:a1:9b:ff:3d:c1:42:a4:ab:47:8c:
42:d5:10:48:69:36:59:da:85:54:28:3a:63:b3:93:
2e:5b:14:0d:fe:1d:08:80:c7:4b:b1:45:6d:1a:4b:
a8:d3:06:1e:aa:f3:f3:c5:56:1b:22:1f:2f:62:12:
7e:ce:de:29:2c:ba:15:76:5f:ae:fa:7d:a5:e9:3a:
55:54:e5:0e:4d:4d:9b:cf:94:09:1c:df:23:0b:22:
09:14:87:64:e3:54:ea:9e:fd:c3:97:ef:b2:fb:6f:
1e:71:66:61:7c:42:4a:d5:da:8a:a0:4c:62:2d:dd:
ce:64:91:0f:ab:f6:0e:3d:8b:ac:18:c9:50:ec:d1:
fd:5a:f8:cc:84:81:64:0b:d1:ce:5f:d3:23:2c:b2:
5d:93:c9:7c:83:15:73:bd:76:1e:44:1a:c1:c0:a1:
aa:dd:53:14:61:dc:7e:b3:de:f0:d4:9c:f6:45:4b:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:F7:11:8F:E4:7A:D9:54:11:BC:19:E8:72:36:A8:A1:18:EB:20
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/2Wj3EY_ketlUEbwZ6HI2qKEY6yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.51.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9b:6b:e4:00:3a:15:f8:4e:29:89:4e:00:5c:1b:ab:5c:e3:
1b:f2:6d:b7:b4:07:99:17:c6:f4:cf:55:a1:c9:98:91:43:31:
bb:8c:10:68:1d:26:d7:61:bd:56:16:79:0c:84:ec:2a:0f:b1:
b0:77:85:93:40:78:89:91:53:1a:1d:2a:57:48:42:20:53:13:
69:8d:b4:1b:a7:3b:50:70:43:c8:6c:bd:5f:82:c4:25:8d:48:
2e:05:72:c9:b0:53:98:bb:de:83:3f:ee:f7:21:f9:c6:4e:d7:
74:ce:32:b0:e2:17:bb:f5:4b:a9:02:02:02:dc:22:42:3a:c8:
e2:66:ae:20:69:5e:98:86:6e:da:2e:7e:ee:26:0d:36:6d:d6:
fd:35:1e:cb:59:22:a3:c0:b1:82:ac:20:29:94:43:cd:e6:12:
8e:8e:6e:66:ca:1c:39:ce:a8:c3:9d:89:2f:5d:3e:48:f2:b5:
2e:cf:28:df:fe:34:40:c6:64:20:a1:0f:ab:df:b7:9b:e6:a2:
04:f5:9d:ed:32:88:4d:50:8c:38:1a:29:3b:ed:ad:3d:36:a5:
c4:88:05:17:74:4c:13:b5:42:db:68:16:70:5c:10:36:52:e9:
be:a0:65:a3:91:9e:d1:c5:04:40:90:a9:0b:90:71:c6:b1:11:
18:45:35:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org