Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Q9eVbST-Gl3-8roTy1ANo6fJQTM.roa
File: Q9eVbST-Gl3-8roTy1ANo6fJQTM.roa (raw, json)
Hash identifier: eNXOxp4ycW9eYKZAtYHZAQ/YUbEQPvh3izmSvgUY5Vg=
Subject key identifier: 43:D7:95:6D:24:FE:1A:5D:FE:F2:BA:13:CB:50:0D:A3:A7:C9:41:33
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 448897D2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Q9eVbST-Gl3-8roTy1ANo6fJQTM.roa
Signing time: Sat 01 Jan 2022 03:58:35 +0000
ROA not before: Sat 01 Jan 2022 03:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39771
IP address blocks: 195.6.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149802450 (0x448897d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43d7956d24fe1a5dfef2ba13cb500da3a7c94133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:be:8b:d1:7f:8f:8b:cd:88:24:8a:4f:1d:
81:8b:9b:eb:2e:ba:c3:7e:7c:29:7b:2e:b0:60:0b:
7a:0d:34:d2:3c:f8:3b:83:49:0a:f5:f2:0e:91:93:
08:7b:e8:3d:78:71:c2:37:3f:c6:af:bb:69:7d:49:
3e:55:ea:72:95:fc:01:39:0f:07:42:40:88:0c:61:
21:8d:34:36:66:eb:86:06:b2:57:a9:1b:56:29:da:
b2:22:1a:98:14:36:3d:44:a2:ef:43:5f:7b:af:30:
e4:18:44:86:5a:99:48:e5:b9:83:b6:44:e8:f7:27:
de:b0:d0:f7:7d:f9:8e:6c:b8:00:2f:b0:c8:66:6a:
14:78:70:17:b9:d5:91:9e:03:e1:43:ac:d4:c9:c1:
a2:d3:ef:d2:e8:67:4d:3d:05:a6:3d:78:c6:5a:e4:
fa:1c:03:ff:ad:18:37:f3:78:28:6f:9b:4a:0b:df:
0a:75:dc:6c:92:54:b0:3d:22:d7:27:6e:bd:aa:01:
a3:46:0c:fa:6c:4b:41:7c:c3:69:27:d9:bc:a9:ea:
65:f0:40:df:79:4c:2f:f1:9f:99:6f:b5:97:49:20:
3f:63:d2:63:9d:0a:86:d7:4f:f8:d5:ae:13:03:c1:
c9:ae:ce:1d:de:97:9d:45:bf:96:52:71:92:2d:95:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:95:6D:24:FE:1A:5D:FE:F2:BA:13:CB:50:0D:A3:A7:C9:41:33
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Q9eVbST-Gl3-8roTy1ANo6fJQTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9d:1b:e8:fd:5a:3b:0a:3e:21:f6:96:58:f6:9d:4d:32:68:
e4:95:13:73:f1:c3:e2:09:89:1c:17:0b:46:e4:de:ff:a9:96:
3d:4f:eb:df:70:aa:88:99:9b:3b:60:4e:a5:7d:a3:91:b9:70:
22:2e:2b:2a:99:c0:8f:e0:e9:1a:b0:6f:d9:c8:e8:3a:99:4f:
3b:4f:af:1b:0a:ff:2a:94:ce:fb:8e:76:4d:13:0d:d7:e5:ee:
fa:f6:e2:73:d8:d5:35:3d:83:ff:46:50:9b:b6:91:5e:3b:db:
e1:d9:50:84:52:02:e2:c9:93:34:24:b9:76:a0:96:a1:62:b6:
d4:bb:f8:71:7f:bb:10:2e:98:c4:73:4a:ae:36:df:56:91:47:
9d:68:b1:13:1f:8f:a5:a9:55:93:ff:db:88:2b:59:3c:70:1b:
fc:38:b0:c7:85:53:95:ce:9d:c1:f6:93:9c:51:79:ae:f9:46:
3c:e5:48:16:e3:0a:5c:cc:0a:7e:01:48:b5:7c:56:30:8f:cf:
4a:a6:53:91:03:b2:d0:b2:71:a7:b6:6e:ba:21:72:de:c5:15:
3c:2d:ae:4f:e7:fd:71:2a:bf:cc:f5:20:ab:25:07:24:84:b0:
f5:22:33:2c:b9:29:de:05:a0:95:d9:9a:45:26:d5:ae:73:13:
02:52:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org