Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/b_DdjLp2UqAgnaL83l71J8Nf89I.roa
File: b_DdjLp2UqAgnaL83l71J8Nf89I.roa (raw, json)
Hash identifier: 1sPfrNAFLqdP+NeJgWnBexfv/fRwRGTS8VX/w9UVtxg=
Subject key identifier: 6F:F0:DD:8C:BA:76:52:A0:20:9D:A2:FC:DE:5E:F5:27:C3:5F:F3:D2
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 056BBD26
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/b_DdjLp2UqAgnaL83l71J8Nf89I.roa
Signing time: Sat 01 Jan 2022 06:06:07 +0000
ROA not before: Sat 01 Jan 2022 06:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43122
IP address blocks: 194.110.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90946854 (0x56bbd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Jan 1 06:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ff0dd8cba7652a0209da2fcde5ef527c35ff3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:a5:6e:77:1a:04:6e:63:20:35:45:08:3b:
d1:87:9c:cb:e7:77:8b:ae:97:2c:6f:70:18:e2:e7:
aa:5e:29:54:ca:5d:86:ae:e6:a0:22:31:6c:e8:55:
24:31:2d:02:93:19:51:c6:c2:d0:85:c9:a2:f2:79:
4d:33:87:a1:3e:72:ad:58:b8:fc:27:2f:0f:b6:31:
c3:c1:cd:83:42:3e:8f:24:91:e3:47:08:9a:c1:43:
32:10:e2:64:fe:18:70:3f:b5:5e:63:99:1a:92:9c:
cb:3f:7d:e4:50:45:17:1b:60:75:b2:3a:02:87:48:
0a:8d:22:50:ca:ef:04:77:c1:59:05:1b:8e:33:19:
9c:7f:0a:16:c6:ea:2f:8e:13:34:67:fb:d2:60:7a:
01:a1:33:cf:47:e1:9c:39:4d:57:10:5b:16:3d:b0:
74:37:c2:1c:3a:8c:08:28:10:23:cf:22:83:74:a5:
5d:29:76:18:53:c0:8d:d9:1e:3b:e1:15:17:c1:51:
db:48:4c:10:04:6e:b8:3b:4b:b3:b3:70:37:0c:ef:
b3:33:bf:e1:fd:b8:62:9f:a3:0e:17:85:fa:50:24:
ef:7c:63:fe:42:74:62:49:c5:27:05:10:a0:fd:1a:
2d:0a:a2:a3:d2:af:c6:c2:aa:f5:27:3a:54:86:e9:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:DD:8C:BA:76:52:A0:20:9D:A2:FC:DE:5E:F5:27:C3:5F:F3:D2
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/b_DdjLp2UqAgnaL83l71J8Nf89I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.128.0/24
Signature Algorithm: sha256WithRSAEncryption
53:88:f4:84:d7:ae:00:b1:bd:88:d3:91:65:3d:2a:4c:e1:45:
e9:dd:19:5e:ba:8a:ae:72:9b:2a:3a:58:3e:7f:5a:0a:c6:89:
05:d9:58:30:2b:44:55:8c:e5:11:8b:76:66:88:f9:8f:24:ed:
1e:d4:0e:e1:b5:a8:ae:32:9b:ca:92:09:02:00:50:8f:da:90:
b8:e2:1a:43:f4:e5:75:35:be:82:27:20:4c:71:73:f3:a2:30:
29:55:e3:26:cc:6f:33:2d:97:ca:14:9d:b2:8f:2f:3d:c6:c8:
69:eb:9d:1f:cb:ed:3d:c6:1d:d4:38:a2:c9:1f:4c:36:a7:2b:
8d:29:ae:fb:df:18:a3:2c:ff:67:09:f2:02:a6:c1:b5:a8:d5:
45:26:30:68:f3:94:e3:bb:cc:31:b7:fb:d1:12:68:53:16:9e:
b0:b0:95:e2:9f:b7:71:52:78:d2:35:34:f4:58:a0:8d:66:ff:
1e:ab:14:7b:cb:2d:f0:60:48:00:64:42:15:89:41:4e:79:c4:
bc:98:26:9d:94:0f:93:8e:35:09:f3:80:f1:47:84:08:98:e8:
db:0f:3f:f6:a2:23:be:8a:8b:bb:d3:6b:52:57:0d:d6:49:3f:
99:48:cb:e3:90:b0:09:ac:38:1b:81:da:6b:bb:6f:0a:60:4e:
6c:73:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org