Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/oAX3tp6abGm0kJYj8H7k-ldmQag.roa
File: oAX3tp6abGm0kJYj8H7k-ldmQag.roa (raw, json)
Hash identifier: CSkwI6nMFUZmP1Jvv8MsvulaFGL/K+gtYJEUK1/MMVw=
Subject key identifier: A0:05:F7:B6:9E:9A:6C:69:B4:90:96:23:F0:7E:E4:FA:57:66:41:A8
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F8815EC
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/oAX3tp6abGm0kJYj8H7k-ldmQag.roa
Signing time: Sat 01 Jan 2022 08:05:07 +0000
ROA not before: Sat 01 Jan 2022 08:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62135
IP address blocks: 194.85.254.0/24 maxlen: 24
194.85.255.0/24 maxlen: 24
2a0c:a9c7:3::/48 maxlen: 48
2a0c:a9c7:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260576748 (0xf8815ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a005f7b69e9a6c69b4909623f07ee4fa576641a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:66:08:ac:c1:8b:3a:5b:1d:e4:ff:2a:80:e0:
9a:8c:00:fb:fd:3e:02:ff:00:7d:60:20:55:3a:22:
22:0d:4a:c1:d1:f2:41:4b:c8:c5:72:63:a0:fb:23:
ad:c5:1d:c1:2a:a6:b1:42:15:fa:58:2c:9b:7b:55:
43:3d:ef:eb:c4:64:a2:fb:ca:f7:b2:61:09:f0:bc:
7d:83:76:f4:94:e3:b9:8b:dd:c8:8b:00:22:e6:d4:
32:ef:15:6b:4b:0d:09:53:97:c7:a2:da:21:aa:1b:
8f:42:1c:89:7f:5f:f9:97:86:6d:6d:86:35:b3:60:
f4:fb:02:64:7a:a3:25:c4:7e:94:d3:cc:17:68:0d:
ea:c3:4f:ed:7d:76:a0:cc:3b:99:c5:d9:b1:3e:bc:
4f:33:35:51:6f:32:94:32:8f:62:8a:57:d1:24:bf:
f7:95:58:d0:f7:48:c1:bd:ed:3c:bb:1a:6c:46:b1:
82:34:aa:ef:70:4a:c9:ea:44:74:16:1f:7f:f6:fd:
0a:dc:e6:03:7f:a7:3c:e6:47:1d:5d:62:45:1a:5b:
94:e0:fe:32:45:5e:25:77:12:c9:bc:ad:7c:fe:f8:
93:28:92:45:3b:16:e0:d1:7c:fd:17:02:a4:18:77:
5f:19:e1:48:cf:56:97:44:df:51:2c:e5:68:06:0e:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:F7:B6:9E:9A:6C:69:B4:90:96:23:F0:7E:E4:FA:57:66:41:A8
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/oAX3tp6abGm0kJYj8H7k-ldmQag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.254.0/23
IPv6:
2a0c:a9c7:2::/47
Signature Algorithm: sha256WithRSAEncryption
3f:88:82:c0:37:26:bf:4d:6c:36:5d:26:4e:09:05:11:82:83:
95:55:28:12:d8:8a:0d:97:c3:3c:65:26:0e:4c:42:7a:60:80:
99:4c:45:de:f0:dd:24:88:1c:e3:58:67:6c:b3:1c:41:38:33:
e3:9d:32:16:0b:31:69:f4:38:fe:16:a6:63:e4:46:55:67:04:
d3:19:b8:86:39:93:e0:ce:84:8c:7c:12:59:01:e1:e8:4b:94:
e3:e6:ef:84:2c:01:4d:55:9a:a9:2c:5a:b8:90:4d:8e:db:40:
88:97:58:62:df:4f:62:6e:8f:91:28:68:36:ec:7e:06:ea:e0:
fd:33:fc:e7:09:b6:61:e9:8c:6d:4d:a7:4c:0c:c4:09:6d:8c:
03:31:62:7e:1f:b5:a1:b1:75:c0:b2:cd:db:59:64:1d:d2:33:
93:d3:75:72:5e:88:34:86:37:9b:b5:16:06:37:91:53:3b:80:
91:e7:0a:9f:42:1b:af:46:cf:74:91:e1:8b:00:12:40:cb:6b:
63:11:e1:9b:e8:2c:df:f9:f5:f4:91:bb:52:95:32:df:15:cc:
53:3f:ea:04:0a:45:8f:96:00:ac:d1:fe:7f:71:65:19:4e:17:
ed:10:00:45:f6:92:31:5e:57:23:bf:5b:06:43:3c:86:5b:1c:
3f:a0:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org