Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/_JRwF530NRXNvr9819abil2IJBc.roa
File: _JRwF530NRXNvr9819abil2IJBc.roa (raw, json)
Hash identifier: ZhRwaE+89rqi1ZDKdSWiu53QNaCh90G74K4MX+zetCc=
Subject key identifier: FC:94:70:17:9D:F4:35:15:CD:BE:BF:7C:D7:D6:9B:8A:5D:88:24:17
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 0A272EA9
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/_JRwF530NRXNvr9819abil2IJBc.roa
Signing time: Sat 01 Jan 2022 05:00:57 +0000
ROA not before: Sat 01 Jan 2022 05:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31481
IP address blocks: 195.225.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170340009 (0xa272ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Jan 1 05:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc9470179df43515cdbebf7cd7d69b8a5d882417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:0c:b4:c7:f6:a0:3e:5c:87:e7:36:78:4b:
7c:f4:26:0e:72:c5:00:8c:40:95:b7:97:95:a0:8d:
9a:e9:b1:d2:6c:70:f5:58:0b:a8:65:e1:5e:9c:07:
db:e1:36:47:bb:c8:49:74:c4:17:45:4a:ab:2c:dd:
be:8c:52:e0:62:b1:8f:1c:5c:1f:b1:6e:f6:f3:6b:
90:08:b5:8c:dd:4d:8d:7e:b4:a9:60:05:10:87:c8:
42:ce:0d:0e:4f:fc:fc:30:59:49:85:0f:78:1a:40:
a4:ea:95:a7:b7:11:f7:aa:af:e7:fc:14:de:4e:ee:
1b:b8:b4:41:d3:33:41:a0:34:81:c3:39:22:3e:76:
e2:0d:72:ad:2a:fa:ed:69:8a:c6:6a:14:7a:1d:da:
00:10:09:c9:f0:b0:60:ef:0c:23:ea:a6:86:b0:ee:
23:8e:d4:6c:74:26:f4:9f:d8:41:af:a2:59:2b:af:
ac:e6:3a:84:6d:de:7e:5c:56:ef:11:68:54:94:92:
69:25:93:4e:f2:a5:c4:43:60:71:85:79:3a:ea:8b:
a9:6d:0f:62:97:08:e0:4f:ee:3c:3a:3f:c5:e3:20:
81:11:7c:af:0a:4c:c1:92:d5:0b:94:29:e6:f9:fd:
ad:b1:17:77:52:36:55:c6:f2:47:dc:d5:13:6e:0a:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:70:17:9D:F4:35:15:CD:BE:BF:7C:D7:D6:9B:8A:5D:88:24:17
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/_JRwF530NRXNvr9819abil2IJBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.152.0/22
Signature Algorithm: sha256WithRSAEncryption
94:17:38:8b:8e:e2:33:09:e0:47:2c:9d:e3:23:05:d3:ca:34:
85:31:04:00:38:fc:aa:74:49:6c:64:e4:bd:5c:d0:c7:32:d6:
f7:57:f7:ef:f2:3b:16:a6:b0:3a:81:52:1f:1f:28:72:54:d6:
01:04:86:07:32:b5:77:b6:25:61:6b:5c:cc:d9:47:ac:d5:98:
e1:7a:97:80:57:fb:f8:c6:44:54:38:a3:7d:b8:0e:c6:2f:9c:
1f:1b:09:62:cd:d3:2a:b3:a0:99:e7:9b:ee:f8:fc:fb:fc:2a:
1f:f8:78:8a:d3:9f:50:a6:b8:9f:29:22:38:c6:d2:1f:bc:b1:
7b:19:43:38:29:12:91:d6:34:b8:4d:23:f0:49:34:0e:c1:90:
c1:ea:c8:d4:a0:55:dc:fa:29:3e:70:70:80:14:9c:ba:4c:6f:
7e:44:b3:84:77:57:a7:ff:91:93:2f:d5:3f:11:55:37:a0:25:
b7:7e:f0:b1:1f:64:42:2b:97:0c:fe:76:72:cb:d8:32:01:1e:
3b:e9:ef:a9:0d:79:f2:6a:48:1d:d9:f5:61:6c:e3:68:3f:ac:
cb:c3:8a:43:51:38:10:86:05:bf:61:97:17:51:17:8b:db:47:
fd:0b:81:3f:58:2d:a1:04:b4:ba:b5:1c:81:96:8c:8c:ef:9b:
c2:fd:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:57 2024 by rpki-client on console-fra.rpki-client.org