Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/7n7CCHAKiAUlQXWDwEW-JxJStGY.roa
File: 7n7CCHAKiAUlQXWDwEW-JxJStGY.roa (raw, json)
Hash identifier: KtvpnZ2+q/ZB4lW3UE2RmqrnNAXUlDa0lCqH9PPS5vg=
Subject key identifier: EE:7E:C2:08:70:0A:88:05:25:41:75:83:C0:45:BE:27:12:52:B4:66
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 07915A56
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/7n7CCHAKiAUlQXWDwEW-JxJStGY.roa
Signing time: Sat 01 Jan 2022 05:55:51 +0000
ROA not before: Sat 01 Jan 2022 05:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12586
IP address blocks: 195.162.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126966358 (0x7915a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Jan 1 05:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee7ec208700a880525417583c045be271252b466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:77:f1:d0:3b:94:4a:9e:cf:5b:f2:d8:72:
3d:1d:99:ff:b8:46:28:28:05:60:73:df:ee:72:5f:
f0:33:7b:3c:1d:2f:58:ce:2c:98:44:91:46:a8:98:
d5:f3:5a:80:9f:2e:f2:0f:c5:6b:86:7b:9a:30:c2:
d9:02:00:3e:f7:18:02:c1:d8:e7:b8:d8:08:c1:f6:
06:16:98:07:11:f7:e9:8a:df:12:a3:b4:99:53:aa:
78:8f:65:4f:19:31:07:1c:bd:50:1e:e1:f5:d2:70:
ae:c4:3e:69:0b:0c:85:e4:44:40:b5:a7:4e:fd:ce:
0f:1c:50:09:4b:28:0c:e5:be:fa:dd:fd:ab:77:95:
2b:8f:05:a3:30:e8:54:8d:86:7a:45:61:ee:67:e8:
91:95:45:87:78:84:89:ed:fe:1a:15:91:fd:b1:b2:
4a:5e:97:36:d7:07:e7:53:4b:2b:d0:f0:2c:c1:5b:
67:61:51:a1:ad:6b:c8:5e:df:bd:65:34:8f:11:37:
ac:7b:a8:dc:94:a8:4a:e6:6f:f9:c6:ea:c2:ce:c7:
c1:38:9f:e6:c2:95:29:e0:93:87:e9:17:14:6e:21:
8a:51:74:07:e3:3e:78:42:60:7c:1d:a2:fb:63:c8:
98:c5:60:5c:57:49:1c:0f:21:ff:1f:5a:11:b1:41:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7E:C2:08:70:0A:88:05:25:41:75:83:C0:45:BE:27:12:52:B4:66
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/7n7CCHAKiAUlQXWDwEW-JxJStGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.4.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:7b:a3:48:e0:c4:6d:0c:63:77:d9:c0:91:4e:cb:c9:64:bd:
14:9e:a0:23:e7:ac:ba:35:e6:c6:f9:71:c8:7d:a7:3c:06:93:
54:db:38:f1:76:d0:da:4d:de:5f:df:c4:27:6f:03:75:48:77:
0d:a6:30:66:c7:d9:11:0a:60:ac:2e:61:68:d4:38:74:eb:de:
25:bb:1f:3f:c2:89:8a:22:97:21:0f:05:b3:69:11:bb:df:c1:
48:63:0c:b1:cf:09:9f:d5:54:ce:bf:b9:2a:37:bb:be:5d:cd:
b9:9b:16:17:e1:f2:93:a9:14:e2:29:f0:c2:31:0a:33:ab:01:
8d:de:38:e6:06:3e:92:27:58:c7:7b:7c:7d:bf:7b:ee:c7:5e:
48:f9:c0:50:06:cb:87:9b:5d:d6:10:32:98:41:b4:b4:12:e7:
6d:21:69:22:74:07:5f:0c:09:ae:9f:19:d2:2a:dc:68:db:fb:
b9:27:b9:9f:90:4c:7b:54:92:4a:de:38:ef:47:7f:12:f2:33:
e3:fd:91:78:f4:db:52:25:34:26:80:9f:3b:f4:97:f6:58:ea:
06:56:ad:fa:5a:76:56:cd:b3:2d:63:a0:dc:c9:38:e9:e2:8d:
b8:b9:1a:52:8e:f9:98:68:d2:11:2d:04:cd:80:83:b7:8d:b9:
d5:1d:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:30 2024 by rpki-client on console-fra.rpki-client.org