Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/gVJYKCx7RyT82Opid0Zt4ok61pQ.roa
File: gVJYKCx7RyT82Opid0Zt4ok61pQ.roa (raw, json)
Hash identifier: D3+Osy4hGmmNbYcQ5VgOkaG97ujv3iU3k1wXe8A1gig=
Subject key identifier: 81:52:58:28:2C:7B:47:24:FC:D8:EA:62:77:46:6D:E2:89:3A:D6:94
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 036B4EBC
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/gVJYKCx7RyT82Opid0Zt4ok61pQ.roa
Signing time: Sat 01 Jan 2022 02:54:46 +0000
ROA not before: Sat 01 Jan 2022 02:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.173.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57364156 (0x36b4ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jan 1 02:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=815258282c7b4724fcd8ea6277466de2893ad694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:2c:59:59:f7:4a:0e:33:07:d5:87:9d:fd:
00:b6:ed:cc:18:ef:77:8f:8f:25:1d:c9:d9:63:be:
7f:0d:41:61:56:90:12:95:ca:1f:33:7e:30:b9:5b:
93:27:34:9a:7d:54:24:72:7a:82:93:fa:80:21:9d:
a2:54:a9:09:6b:7f:67:fb:14:70:d7:09:43:f6:e6:
95:63:42:8f:e0:18:72:d9:4a:56:77:ff:d2:bc:de:
e5:c2:76:b3:44:c7:92:9d:28:cd:56:3b:ef:82:f7:
c0:d4:5f:62:e2:aa:bb:92:ff:91:2f:a1:84:42:67:
d6:09:22:70:46:cf:1f:d9:9d:26:24:bb:51:d9:2a:
29:9c:16:11:d8:e5:25:78:e8:db:9b:fe:a4:61:57:
0c:86:97:ec:fe:da:89:76:58:c1:de:db:64:f5:67:
d9:a6:a8:dd:e2:ac:a5:8b:f3:27:91:e0:ec:1d:5a:
a6:35:ca:7d:a0:42:f7:08:36:51:56:a4:d3:3e:5c:
ae:11:10:40:bc:7d:86:56:7c:18:0b:d3:f8:4d:c8:
61:ee:f9:b3:d3:af:d6:20:fb:34:84:21:e6:7d:70:
ce:6c:64:35:89:b4:54:c7:3e:4f:e1:e8:92:de:88:
67:f6:28:a9:b5:d5:e6:32:a5:b8:af:81:c1:86:5f:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:52:58:28:2C:7B:47:24:FC:D8:EA:62:77:46:6D:E2:89:3A:D6:94
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/gVJYKCx7RyT82Opid0Zt4ok61pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.173.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3c:3f:7f:a3:ae:f4:d9:c5:dc:12:45:2e:17:24:fe:37:10:
77:b9:83:71:d6:99:f0:aa:f0:a7:99:b8:42:99:fd:0b:fa:fe:
09:9b:8b:44:ba:c9:54:2c:9c:ec:43:fd:9d:6f:d5:94:80:4e:
11:85:25:b4:35:d6:4f:57:3a:60:52:f0:83:1a:68:d5:31:0b:
b0:e9:c3:0b:68:49:74:53:aa:75:20:be:12:9d:ec:f6:73:af:
6e:9a:80:df:bd:f4:3a:f5:3b:72:f1:9c:54:e5:69:4e:aa:4a:
df:23:2c:d1:7d:75:6e:59:13:1f:4a:79:c9:84:dd:ee:42:a6:
ca:c9:54:46:81:f4:89:80:96:1d:3f:f0:d8:22:ae:e0:dd:c2:
f1:ee:bb:39:af:96:7e:cc:3d:68:59:2e:58:8e:93:a0:0f:4a:
7d:7a:c7:6a:f4:6b:b3:cc:93:bd:3d:98:24:d5:e3:14:f4:21:
bd:a2:da:c1:71:8c:d3:a3:18:7f:c7:ac:11:9a:b2:40:f6:26:
b2:ca:16:f6:e9:2a:90:9e:28:cb:a5:49:a6:75:f1:79:17:7d:
14:43:30:2d:9e:42:e6:68:0f:ea:2b:ed:1a:7f:37:4c:fa:f6:
f9:44:40:1a:f9:20:ed:7b:5d:01:76:29:49:7c:53:ca:ea:85:
29:96:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org