Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/xzXYgfqGle2GS2ocOPlkMR480_k.roa
File: xzXYgfqGle2GS2ocOPlkMR480_k.roa (raw, json)
Hash identifier: eMmbLnTtxS0hyfPFnIZ2JUkxupyrbSHQpS3BarvQesY=
Subject key identifier: C7:35:D8:81:FA:86:95:ED:86:4B:6A:1C:38:F9:64:31:1E:3C:D3:F9
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 0209821A
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/xzXYgfqGle2GS2ocOPlkMR480_k.roa
Signing time: Sat 01 Jan 2022 05:53:42 +0000
ROA not before: Sat 01 Jan 2022 05:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42415
IP address blocks: 194.6.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34177562 (0x209821a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jan 1 05:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c735d881fa8695ed864b6a1c38f964311e3cd3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:36:87:cd:91:8f:a1:64:70:44:52:6c:c0:
14:b5:1b:bc:9c:5c:a1:98:f0:85:9f:d4:3a:22:2d:
a4:b5:42:59:75:3e:d2:76:09:11:92:c3:ef:8b:88:
6c:db:4b:72:c1:c2:d8:36:02:d5:75:15:31:94:12:
22:88:c9:32:78:7b:f9:83:5e:15:e7:c9:26:ce:8a:
f8:fd:53:77:86:97:4d:0f:d9:47:96:3e:24:23:60:
da:6c:e5:16:f7:46:39:f3:29:b1:44:34:eb:21:c2:
b6:b4:db:c2:05:b6:06:8b:a2:24:55:70:24:a1:f0:
7e:f1:9b:58:e8:9a:0e:f8:5c:99:b2:77:ed:ee:1f:
43:85:d0:ba:08:50:eb:39:54:fd:0a:26:31:10:db:
04:32:80:ea:4d:c5:ea:0e:44:c4:1b:ad:45:f7:49:
ea:b9:0a:15:4a:16:d1:01:26:6e:06:3d:37:54:da:
fb:35:08:ac:72:d1:76:40:d0:7f:f6:8c:5a:02:a8:
78:be:77:09:4f:73:8d:6d:78:ad:4b:e7:43:fa:85:
a5:f6:f1:29:cf:55:49:70:e5:3a:9c:98:59:e5:49:
5b:b5:19:65:91:a5:36:6e:04:f0:b1:c1:a2:a7:a7:
16:03:74:97:35:79:4b:a4:d2:68:75:0a:b0:90:8c:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:D8:81:FA:86:95:ED:86:4B:6A:1C:38:F9:64:31:1E:3C:D3:F9
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/xzXYgfqGle2GS2ocOPlkMR480_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.255.0/24
Signature Algorithm: sha256WithRSAEncryption
80:12:a3:34:c5:fb:0a:6d:56:b6:35:f5:2e:7b:cc:c1:d5:4c:
be:0c:6f:97:63:13:e0:a8:31:c6:71:9b:73:c9:c9:79:2e:f9:
7f:67:f1:a5:69:a0:f6:38:8b:01:9b:6f:29:8e:f3:72:fb:d8:
d6:30:1e:2c:0e:30:ee:05:3a:73:4d:e1:1e:92:af:44:ac:4f:
cb:ca:80:45:d0:4c:18:3a:21:b1:33:bf:91:71:63:df:fb:3c:
d5:60:6a:3f:c1:05:c2:a2:1f:06:50:68:43:3b:17:12:bc:0d:
63:81:db:bd:66:38:49:d3:8b:7c:56:86:55:32:06:1a:cb:2a:
98:78:78:d7:ab:94:42:74:a3:38:4d:c2:bf:d8:6f:b4:f2:c6:
9a:6c:e1:3b:07:63:2f:8f:67:65:8f:2c:45:70:dc:a2:8a:4e:
a7:b2:cc:33:b9:5d:13:22:65:88:94:5e:c9:f4:c2:7b:cf:2a:
cf:3b:8b:37:b2:83:12:fe:1a:bd:28:42:d0:fe:b1:dc:a2:f8:
6b:36:0d:77:5e:56:31:81:fc:da:2b:06:a7:20:30:fb:78:34:
92:a6:1f:f1:ca:cf:ee:0d:70:0a:60:07:a9:5f:85:4f:c8:f5:
ff:1f:8c:5d:8e:90:61:97:6b:27:80:f8:3b:e9:3c:ef:f7:6b:
74:27:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:58 2024 by rpki-client on console-fra.rpki-client.org