Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/i09PGh17SU2HRqajwF8koFtLjNo.roa
File: i09PGh17SU2HRqajwF8koFtLjNo.roa (raw, json)
Hash identifier: COaHb4zI0N+ItxcpUBMwan4VQYKwA2RcXIDEvH/WwwU=
Subject key identifier: 8B:4F:4F:1A:1D:7B:49:4D:87:46:A6:A3:C0:5F:24:A0:5B:4B:8C:DA
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F871E48
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/i09PGh17SU2HRqajwF8koFtLjNo.roa
Signing time: Sat 01 Jan 2022 08:05:07 +0000
ROA not before: Sat 01 Jan 2022 08:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61378
IP address blocks: 195.19.193.0/24 maxlen: 24
194.226.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260513352 (0xf871e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4f4f1a1d7b494d8746a6a3c05f24a05b4b8cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:aa:a5:f8:84:f4:b2:54:22:e8:02:06:98:
b8:9f:ac:64:8c:45:af:47:ca:69:96:ab:0d:a2:2e:
69:03:78:db:cc:09:a7:1a:0c:72:85:91:f7:cf:17:
39:25:ed:8c:d5:b8:81:83:ae:3e:03:51:cf:c7:cf:
a3:63:87:3d:8c:d0:42:0b:ab:4f:b4:69:1a:5d:9f:
ec:47:7f:57:b8:8c:f1:5d:dc:42:b9:a1:ac:34:cc:
6f:c2:27:39:95:3d:aa:71:ba:85:ba:fc:c4:54:f3:
e6:3b:b8:6f:39:04:cf:9a:7a:06:27:46:f8:b4:85:
b7:78:dc:7d:09:e0:6d:6b:7d:2d:79:76:29:28:6b:
b3:71:bd:e5:c7:6a:61:28:40:29:b2:28:ac:4f:e5:
0d:90:a5:74:9d:f4:2e:39:3d:7e:98:89:f0:fa:42:
c3:41:c8:91:93:7b:2d:28:54:cd:0c:5c:3e:d0:28:
18:d0:3f:ee:b8:fb:52:ae:bc:1f:be:27:ab:eb:9e:
29:d3:9b:e6:08:04:46:1e:8d:42:ed:da:cb:0d:61:
7c:f5:be:2d:ca:e9:e6:25:44:8a:33:50:33:79:61:
52:5f:52:bf:61:16:98:ee:b8:86:a5:c0:f0:7a:55:
bb:ed:40:49:75:fe:7b:c6:0e:4b:40:05:ce:0c:75:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4F:4F:1A:1D:7B:49:4D:87:46:A6:A3:C0:5F:24:A0:5B:4B:8C:DA
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/i09PGh17SU2HRqajwF8koFtLjNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.182.0/24
195.19.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bc:8a:61:5a:0a:58:7a:ab:a0:00:ea:67:a6:82:21:cc:f4:
67:b5:cf:40:8c:2a:99:c2:3b:ee:1c:ac:a0:6f:f3:8a:24:67:
39:17:62:d0:4c:33:de:b6:84:a8:fc:4b:57:78:40:0c:0b:49:
bf:6f:5f:e7:67:05:4d:a3:69:23:92:52:de:34:cf:1e:b6:a5:
91:a0:0f:0d:93:92:03:ab:9b:39:d1:16:07:a3:f6:6b:69:04:
9f:2e:3d:80:49:87:21:4d:23:e4:36:26:c2:3b:c5:76:5d:23:
41:ed:86:51:a4:a2:9a:9e:5f:a7:35:a7:80:13:95:55:13:4d:
dc:33:bc:b6:6c:a1:7c:42:de:7f:e7:35:f5:3f:42:c2:e3:88:
66:5c:d9:1d:47:e5:3d:7b:62:ef:70:df:e8:aa:a8:44:a1:a6:
6a:2c:b2:74:13:f6:98:7d:ce:2c:99:7d:5c:1d:03:7e:ef:f1:
55:4d:4b:67:a8:88:37:5a:00:da:1d:8d:2e:83:31:04:a7:d3:
eb:8b:90:2b:20:f2:cb:9b:26:0f:3a:8e:32:7a:cb:21:88:49:
e6:5b:0d:6a:08:f1:52:06:30:97:09:b5:92:23:ac:d9:80:cb:
53:ce:cc:5c:36:7d:68:48:03:36:e4:4c:f7:b5:0b:68:21:4f:
5e:2b:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org