Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ij1gFnJqC1AHe3WOEjnX_vNwiOE.roa
File: ij1gFnJqC1AHe3WOEjnX_vNwiOE.roa (raw, json)
Hash identifier: Z/qWhBWHZdyi4LqPEW+0P6lY6EbHaByLRAo1+2AeFrg=
Subject key identifier: 8A:3D:60:16:72:6A:0B:50:07:7B:75:8E:12:39:D7:FE:F3:70:88:E1
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 1071519B
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ij1gFnJqC1AHe3WOEjnX_vNwiOE.roa
Signing time: Tue 05 Apr 2022 15:30:24 +0000
ROA not before: Tue 05 Apr 2022 15:30:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43581
IP address blocks: 194.226.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275861915 (0x1071519b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Apr 5 15:30:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a3d6016726a0b50077b758e1239d7fef37088e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:c1:0d:69:31:e6:28:25:33:e8:7b:f7:f4:
82:92:2c:27:55:f6:b1:e4:73:cf:73:3b:75:b7:48:
31:23:f5:b2:d7:d2:ea:63:2e:0a:6e:f9:dd:65:cb:
42:8b:27:78:8c:b3:0a:7a:df:4a:ae:b5:f7:a9:37:
83:d1:53:c3:f9:2a:ba:2d:5e:f1:ae:a4:33:53:ec:
5e:f5:b4:16:c8:ea:a0:1b:91:5a:7f:3b:c1:2c:2b:
19:6a:b0:c9:78:4d:66:eb:87:30:b5:ea:a9:cf:85:
75:de:f5:d2:4c:2c:25:4a:17:e8:50:0d:15:ee:9d:
73:39:91:73:92:9a:52:75:c9:22:9a:fa:ad:a9:97:
09:8a:5d:b4:46:96:da:59:ed:cc:83:4b:6a:e8:cc:
8f:b4:52:7f:cd:d1:32:91:a0:7e:68:42:eb:31:c6:
25:30:c7:0f:0d:ad:7c:5c:fd:0b:c1:35:1b:7a:48:
c5:97:0f:d7:2b:73:d3:54:27:4b:6f:fb:65:dc:dc:
49:d6:62:68:94:fd:1e:41:e5:82:29:f8:a8:a2:3b:
57:cb:de:1d:b2:e6:14:1a:9a:3a:30:74:5b:20:32:
8e:cd:b7:ee:dc:6d:26:c3:bd:ca:a7:c0:bf:ad:16:
c4:b5:9e:5f:ef:d3:b2:6b:61:00:fd:46:d8:87:21:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3D:60:16:72:6A:0B:50:07:7B:75:8E:12:39:D7:FE:F3:70:88:E1
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ij1gFnJqC1AHe3WOEjnX_vNwiOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.49.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:00:e4:4a:04:e2:d0:ff:6f:64:8e:a4:57:3b:34:37:34:f9:
9f:f3:2f:0b:8d:3a:8a:6c:3d:ad:fe:e8:40:1d:61:86:e0:11:
b5:d8:4d:66:f5:fe:6c:3c:12:8b:49:31:27:2f:c4:e9:65:3e:
6b:20:be:87:31:f1:33:f4:51:21:db:dc:9c:15:40:a0:79:cc:
b8:b0:82:3f:f7:1d:cd:13:6f:74:c8:22:fd:86:df:c3:f6:3e:
79:f1:b1:20:1d:a1:00:d4:59:53:65:4e:36:4f:f1:8f:4d:7b:
57:27:07:59:c4:65:a0:c6:31:eb:24:11:80:31:75:02:e7:fa:
31:b3:e6:1a:10:0e:d4:f5:7d:03:a3:4b:0f:76:4d:be:87:5d:
68:3e:3f:67:9a:1e:26:cc:86:85:cf:41:d1:57:d1:1e:52:b0:
34:70:2b:ac:26:1e:e1:ef:a9:1d:5d:27:d2:71:c2:bd:62:97:
7a:34:8e:a7:91:fb:a3:97:61:58:96:2b:71:ef:83:b5:04:88:
61:49:b3:3a:46:bf:c4:2a:52:1e:8b:2f:a9:97:8a:31:61:70:
01:fc:87:c5:29:74:7c:73:1e:5d:fd:04:31:31:66:f4:f5:d1:
d2:89:3b:56:1f:27:b2:8a:97:9c:ed:ed:49:c3:70:1d:f3:c8:
d4:44:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org