Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/hX7hqAULlYbR6SH7Ab0W-0FRx4U.roa
File: hX7hqAULlYbR6SH7Ab0W-0FRx4U.roa (raw, json)
Hash identifier: ML/nPgNJwtD8GLSbEIypwUd4BN7zMjZXKw83qrP9T2E=
Subject key identifier: 85:7E:E1:A8:05:0B:95:86:D1:E9:21:FB:01:BD:16:FB:41:51:C7:85
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 06BC050D
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/hX7hqAULlYbR6SH7Ab0W-0FRx4U.roa
Signing time: Sat 01 Jan 2022 12:04:36 +0000
ROA not before: Sat 01 Jan 2022 12:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60631
IP address blocks: 194.5.175.0/24 maxlen: 24
194.5.188.0/24 maxlen: 24
194.5.195.0/24 maxlen: 24
194.5.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112985357 (0x6bc050d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Jan 1 12:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=857ee1a8050b9586d1e921fb01bd16fb4151c785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:ae:86:2f:04:94:17:e6:96:a0:ec:bf:47:
7e:a3:b7:98:75:89:5f:26:74:2e:b2:bd:49:a6:15:
55:23:c1:39:7f:e4:cc:1d:33:04:07:d5:b6:b8:dc:
b8:b6:55:69:94:15:b7:b5:c3:d7:df:34:b2:c4:55:
9d:fc:0b:fe:6c:60:a8:f1:81:d3:36:2e:ac:79:ba:
9a:94:5e:ea:b0:52:7a:5b:a3:1a:42:9e:0f:c3:37:
be:1b:b2:8d:7d:9f:a3:92:c1:62:16:47:96:40:cd:
56:6b:96:fd:3f:b2:b9:80:c1:8e:64:b0:e3:71:5a:
0d:46:1a:56:d2:49:3d:55:9d:49:9c:c4:80:ed:ac:
ab:9f:56:73:73:f8:3b:76:65:f2:e4:9b:ca:67:f4:
20:ec:e2:81:83:de:3d:b7:9c:b7:31:35:fc:e5:5a:
ce:38:8e:c5:bb:e3:92:8a:94:1f:af:4a:b4:d6:48:
ae:52:d5:95:61:db:3e:34:64:e5:32:18:e6:6e:57:
b9:66:a7:7e:2a:e0:af:5c:66:68:94:be:1e:f4:4b:
4e:2d:aa:38:05:d1:f6:50:23:e4:06:b3:e7:51:5a:
24:bb:97:54:12:48:12:4b:c9:3d:92:4e:a7:35:31:
91:ff:0c:77:a7:56:0c:78:03:f6:0e:fa:1f:3b:62:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:E1:A8:05:0B:95:86:D1:E9:21:FB:01:BD:16:FB:41:51:C7:85
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/hX7hqAULlYbR6SH7Ab0W-0FRx4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.175.0/24
194.5.188.0/24
194.5.195.0/24
194.5.205.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7e:e0:b5:08:e8:e3:a6:99:4f:3f:c5:e8:89:fb:f3:68:7f:
76:4c:44:5c:7f:98:ac:7e:dd:51:c0:10:d6:48:1a:7b:df:cb:
d3:c4:06:0b:0d:3f:23:62:c8:43:84:24:e2:bb:49:8c:cb:88:
0c:c5:ea:c0:5e:54:c8:49:66:6b:26:da:d3:0c:d6:31:f2:4c:
77:06:72:f9:ab:64:be:30:5c:7f:ce:3f:87:bc:53:29:00:36:
a6:9d:c3:61:7b:58:d4:a5:e7:88:c5:e9:f8:31:84:e3:c7:3a:
96:21:c9:d1:32:0c:5e:32:8e:1f:10:36:93:43:41:20:65:e6:
f4:21:13:93:33:77:b8:d6:b7:27:fc:7e:b6:13:88:18:af:4a:
24:39:8f:53:24:22:4f:9e:68:21:15:64:9b:df:e4:ee:ed:79:
f8:8c:77:a8:6f:19:0d:e2:0d:d6:bd:63:2c:97:f4:e5:9a:a6:
02:47:6b:be:e8:b5:95:14:2b:e8:20:b4:6d:9f:73:0b:c4:90:
62:fa:da:cb:86:3a:c3:da:d1:81:ce:8e:bd:45:0a:51:24:e1:
31:3b:9f:fc:73:94:25:95:98:1f:b8:0c:cb:0b:66:e6:b9:e0:
fc:a9:d0:f6:59:b2:52:a0:51:41:b7:b1:78:e8:97:90:8f:c5:
fa:a9:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:12 2024 by rpki-client on console-fra.rpki-client.org