Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/IE7sQHTu79POFxOF6F3ismKhay4.roa
File: IE7sQHTu79POFxOF6F3ismKhay4.roa (raw, json)
Hash identifier: os/tm/5jp+y2gwoEfAfjAipJscNQZX1qCwuAQSLgW8w=
Subject key identifier: 20:4E:EC:40:74:EE:EF:D3:CE:17:13:85:E8:5D:E2:B2:62:A1:6B:2E
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 34BBF761
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/IE7sQHTu79POFxOF6F3ismKhay4.roa
Signing time: Sat 01 Jan 2022 09:01:03 +0000
ROA not before: Sat 01 Jan 2022 09:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12406
IP address blocks: 194.158.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884733793 (0x34bbf761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Jan 1 09:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=204eec4074eeefd3ce171385e85de2b262a16b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:77:fa:1c:29:39:ad:b1:b2:4f:e1:b7:0a:
cd:58:db:9e:dc:d0:bd:1f:77:79:8f:03:c8:29:b2:
da:62:af:71:1b:88:dd:2f:dd:22:c8:ca:6a:a6:9e:
5f:d0:69:06:1c:16:a9:15:5f:ae:4b:a5:35:cd:f3:
75:86:00:3c:46:87:21:9f:8b:9c:5a:58:48:77:58:
7f:39:9d:64:27:8c:28:9b:1b:d9:7b:c6:e6:de:9d:
bb:fe:b5:35:ee:d7:45:77:e6:bc:1c:a2:42:ef:85:
04:6c:aa:a9:39:79:94:f4:55:ae:bb:80:03:31:ce:
06:cc:80:8f:28:25:5d:f8:1a:a7:c7:9b:da:90:85:
51:8e:be:f0:ba:10:3c:8e:dc:c3:f5:5f:fc:f9:b7:
52:df:32:84:8f:8a:9b:fa:b4:5f:53:2b:9e:b2:86:
45:8a:d5:b1:3f:94:83:fb:59:65:99:a7:18:2d:ab:
60:0d:f9:6b:7d:3f:b4:16:58:01:89:57:0f:b2:a0:
12:47:c0:d0:85:85:96:b5:28:9e:5a:5a:1d:5b:d5:
c1:81:d2:76:77:3c:7c:dc:e0:d7:38:b2:ed:e1:1a:
82:62:9a:1d:4d:97:34:b6:6b:42:8c:85:eb:69:ab:
85:05:06:ec:e0:99:98:b9:3b:dd:dd:45:70:97:28:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:EC:40:74:EE:EF:D3:CE:17:13:85:E8:5D:E2:B2:62:A1:6B:2E
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/IE7sQHTu79POFxOF6F3ismKhay4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.158.192.0/19
Signature Algorithm: sha256WithRSAEncryption
33:b5:a9:b8:73:e9:d6:e5:e1:b1:09:b4:70:a1:d8:fa:7e:7a:
05:9b:d9:a4:1d:d1:b8:fd:4f:b3:97:8a:a2:89:be:4f:8a:b4:
d2:45:f2:82:57:19:a3:78:60:2b:17:50:8b:3d:26:3b:51:43:
fc:8c:c8:c2:75:f0:d8:4c:d8:57:68:bd:81:9b:c6:18:da:2d:
71:a9:45:a1:c1:33:a7:c4:09:c6:5b:8f:45:b2:95:12:66:e2:
89:0e:c0:94:1a:b1:01:bf:9c:84:92:92:0d:7e:b3:81:46:b3:
d1:f6:e4:f8:64:85:33:e8:7c:fa:1f:6c:0f:cc:48:ab:2e:0c:
db:7b:d4:1c:c6:61:38:c3:45:7a:3a:57:24:c6:b2:2c:f7:aa:
34:ec:4b:4e:62:67:4f:a5:6d:ec:4d:ab:1b:bd:b6:07:ee:be:
8d:70:97:a1:aa:8f:ee:0e:f3:7b:96:af:db:80:51:fb:a2:14:
c1:83:2a:02:23:dd:5b:3b:f2:f2:94:7d:3e:5d:6d:44:3e:47:
e0:c0:ad:6c:b6:27:0c:19:3d:93:7c:17:6b:81:ea:e7:9f:59:
e1:f9:5e:f6:30:69:03:0a:7c:1a:72:46:85:17:de:b0:1f:64:
8c:d3:56:35:84:2c:46:3a:e2:06:8a:f8:5e:1e:19:45:44:af:
75:03:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org