Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/dd9eR3_uJWN_QJbt2hrvc3F4I_M.roa
File: dd9eR3_uJWN_QJbt2hrvc3F4I_M.roa (raw, json)
Hash identifier: fhiBFlS75zR+B3NYPicK1TWpk0Zumc9eS6zMyFAgcXg=
Subject key identifier: 75:DF:5E:47:7F:EE:25:63:7F:40:96:ED:DA:1A:EF:73:71:78:23:F3
Certificate issuer: /CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Certificate serial: 0553D9C3
Authority key identifier: 04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/dd9eR3_uJWN_QJbt2hrvc3F4I_M.roa
Signing time: Sat 01 Jan 2022 02:58:10 +0000
ROA not before: Sat 01 Jan 2022 02:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198537
IP address blocks: 195.14.26.0/23 maxlen: 23
195.14.112.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89381315 (0x553d9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Validity
Not Before: Jan 1 02:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75df5e477fee25637f4096edda1aef73717823f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:4b:ad:e8:33:63:5f:b8:51:c8:ff:71:50:
ed:43:49:36:a4:d6:fd:27:c0:89:cd:4a:db:c0:01:
5b:42:61:a8:4b:d0:f3:8b:72:97:e1:04:70:30:be:
02:0f:a1:b1:69:b5:60:ed:e5:bf:b8:55:47:55:70:
85:fb:49:42:33:b7:53:42:85:e5:5d:23:1f:c1:22:
b2:cb:8a:68:81:5e:5a:33:eb:d4:93:d7:bb:6c:56:
49:41:27:9b:fd:71:cc:87:bd:54:19:9d:61:44:9e:
b5:4c:17:58:06:10:d6:93:09:96:9d:ab:0f:3c:76:
f3:c5:b3:1c:e7:58:a4:66:1d:b3:3f:b9:ee:13:9a:
68:f5:3c:2b:10:ef:16:ef:f7:04:0f:eb:b2:3a:5f:
6a:22:11:00:85:dd:25:bc:d0:cc:51:a0:d4:36:4e:
32:6d:b3:03:e8:cd:99:5b:eb:3d:77:d2:77:6b:51:
28:f7:c6:d3:64:38:a3:5f:20:a6:4a:ac:5b:74:d9:
60:90:f3:e6:c5:62:f8:3c:9b:13:b6:a1:be:61:c7:
cb:05:4a:49:21:61:76:d6:c0:fe:c0:89:74:be:c1:
ef:d1:f2:09:52:d0:d8:9b:49:bc:34:dc:bc:12:24:
ff:84:76:f0:f6:ab:06:a0:69:92:16:94:fe:80:02:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:5E:47:7F:EE:25:63:7F:40:96:ED:DA:1A:EF:73:71:78:23:F3
X509v3 Authority Key Identifier:
keyid:04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/dd9eR3_uJWN_QJbt2hrvc3F4I_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.26.0/23
195.14.112.0/23
Signature Algorithm: sha256WithRSAEncryption
68:8c:f8:60:8b:43:1b:8a:d3:31:cf:cd:51:9e:47:29:a4:22:
26:36:bc:37:64:c8:f0:b2:c0:08:bd:44:0e:be:c4:76:dd:0e:
8a:a7:ec:69:59:14:a0:85:24:bf:55:a6:30:c9:3a:59:35:1d:
e7:3e:87:33:ef:4f:2c:5a:73:bc:9d:88:d1:4c:aa:c5:a2:bf:
87:71:8d:38:94:2f:b1:ad:ba:bc:cf:b6:98:5d:1b:c8:9d:af:
4e:b2:cd:79:1c:96:c8:2a:ce:44:6a:02:4d:aa:37:67:d7:e7:
d0:2d:fb:72:e6:f4:ed:d7:ae:e3:63:41:8e:a2:5d:a4:c1:d2:
3d:fa:94:08:09:3f:9f:8c:c8:e9:d8:93:9e:07:07:53:2a:e2:
6a:e6:33:ff:b0:4a:48:84:21:89:98:26:08:3d:5d:35:84:8c:
df:13:5a:7b:1a:c6:44:d5:c6:90:10:66:13:0f:50:4a:ed:ec:
d6:ac:d8:59:92:35:74:dd:fc:e9:0f:64:85:a9:b0:54:27:26:
8b:38:7f:ef:9e:2a:a2:d8:57:dc:1f:e5:25:c1:04:96:3f:c9:
6d:b0:1e:39:a4:70:d1:99:4c:1b:ee:9d:c4:30:c3:e2:d9:61:
b2:30:95:65:6f:5f:1b:83:f3:ad:a3:2d:7b:b8:23:be:cf:d7:
6e:86:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:48 2024 by rpki-client on console-ams.rpki-client.org