Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/7OmPB-b_drzRwHkHEelbFxV-fpo.roa
File: 7OmPB-b_drzRwHkHEelbFxV-fpo.roa (raw, json)
Hash identifier: oSGyyNfStDV+NsXePKs9aXaLSzpSkYaterhbcTe+TDI=
Subject key identifier: EC:E9:8F:07:E6:FF:76:BC:D1:C0:79:07:11:E9:5B:17:15:7E:7E:9A
Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial: 055CDFD5
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/7OmPB-b_drzRwHkHEelbFxV-fpo.roa
Signing time: Sat 01 Jan 2022 12:02:51 +0000
ROA not before: Sat 01 Jan 2022 12:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 194.11.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89972693 (0x55cdfd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
Validity
Not Before: Jan 1 12:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ece98f07e6ff76bcd1c0790711e95b17157e7e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:eb:25:16:43:00:a8:65:1e:2c:a3:68:63:
b0:01:bb:4b:16:af:8e:eb:d9:74:fe:3c:72:c7:6e:
44:29:75:9f:72:8b:8c:76:20:23:b1:fb:59:83:13:
ed:d1:3a:e2:45:55:e2:05:3b:43:aa:9c:3c:66:b7:
44:7f:39:2c:c5:a6:6f:91:60:20:0e:8a:0c:ae:ac:
57:24:85:52:af:fb:94:42:9e:ad:38:74:77:f9:a3:
12:1a:c5:6d:c8:b8:6f:3c:cd:09:6b:5e:50:33:7e:
eb:77:7a:de:c4:95:84:6a:77:0e:b2:e0:f0:53:37:
4a:26:77:60:63:10:bd:25:9b:93:93:1b:3c:a6:ca:
29:3f:29:96:3e:b3:bc:41:5a:a1:12:ed:47:6d:b2:
2a:27:7d:30:be:ae:29:10:bc:5f:98:81:d1:d9:31:
29:37:6c:be:7a:5d:0f:b2:d7:67:cc:0d:ac:b7:99:
e1:35:a6:23:d7:dd:41:7d:a5:0a:65:8c:55:15:e3:
95:e1:9d:df:eb:d9:41:c9:8d:bc:68:8f:d6:b5:6d:
df:ff:ac:f6:2a:2b:8d:20:74:d8:8f:69:de:5a:c0:
d2:89:2f:0c:9d:48:c7:18:59:71:f2:12:e9:38:68:
dc:72:33:80:41:84:04:74:e2:b2:61:57:92:7d:a3:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:8F:07:E6:FF:76:BC:D1:C0:79:07:11:E9:5B:17:15:7E:7E:9A
X509v3 Authority Key Identifier:
keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/7OmPB-b_drzRwHkHEelbFxV-fpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.160.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b6:13:bd:74:45:dd:dd:a6:cf:2d:56:c3:07:a5:22:46:3a:
f8:11:9d:77:78:ad:90:ae:34:8e:09:03:fe:c8:6a:e1:b6:db:
c8:d5:b9:c3:e4:23:5e:58:ee:2b:8b:c0:5c:7d:6e:a1:7a:7d:
d1:9d:c3:c6:93:d5:ba:da:33:df:47:2f:cc:3a:25:15:4b:ec:
90:84:7a:18:44:08:6d:c4:f7:7d:bd:e5:ac:4e:49:0b:6e:b5:
98:51:34:dc:30:ba:71:21:e1:9c:ea:10:cf:44:55:9c:8a:db:
66:0a:57:11:1c:52:01:8b:89:aa:54:56:ba:1e:f7:13:85:97:
3b:80:9e:ca:1b:df:97:68:39:44:6e:31:17:43:d7:3b:3c:46:
b3:e8:fe:58:4d:cd:d8:e5:a4:af:10:39:85:56:55:14:31:30:
2f:3c:92:e1:b5:a8:c8:df:4b:33:0b:10:d2:30:54:fb:db:8e:
76:2b:1b:b9:18:86:df:6d:5f:08:83:1c:36:56:65:06:fe:a9:
0e:74:65:d0:98:eb:fd:93:f7:d8:fd:ca:42:ee:38:9c:cc:cd:
b1:65:90:49:54:53:68:68:0b:8b:09:be:bc:1b:1f:25:e1:9a:
c7:34:36:f5:fe:d3:5d:b9:88:c6:8f:73:14:f8:56:16:35:33:
a2:fe:bb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:52 2024 by rpki-client on console-fra.rpki-client.org