Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/Gg1KjvtrvBn2H-tHVf_pghtVEqc.roa
File: Gg1KjvtrvBn2H-tHVf_pghtVEqc.roa (raw, json)
Hash identifier: dFjIL0Ag+J4MrXTcPe77YsgAbwMw2OS6tm7jm9+fNnM=
Subject key identifier: 1A:0D:4A:8E:FB:6B:BC:19:F6:1F:EB:47:55:FF:E9:82:1B:55:12:A7
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 76F0
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/Gg1KjvtrvBn2H-tHVf_pghtVEqc.roa
Signing time: Tue 26 Apr 2022 15:15:51 +0000
ROA not before: Tue 26 Apr 2022 15:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.102.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30448 (0x76f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Apr 26 15:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a0d4a8efb6bbc19f61feb4755ffe9821b5512a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:bc:77:dc:4a:df:74:cd:5e:1d:3f:2b:90:
0c:e9:6b:3e:c5:43:5e:df:16:55:4d:b1:4d:16:b7:
f3:85:e8:45:d2:17:40:57:21:6a:a0:f7:f4:fc:de:
3a:ad:03:d4:52:90:7f:f6:3d:d2:69:92:84:c2:8b:
e8:ca:26:93:20:16:0c:12:55:9a:8e:70:c7:ee:53:
92:79:f2:a5:52:2e:0e:ae:1a:0c:46:5c:0f:5b:67:
d4:66:8a:45:5b:fc:61:a1:b9:2c:01:4d:c2:0e:aa:
77:13:c2:38:96:4a:2a:0d:72:00:4e:e5:94:6c:5f:
f3:aa:59:7b:68:1a:85:91:fa:90:4c:0c:54:d0:9e:
9f:0b:83:cc:b0:cb:b3:99:6c:dd:43:57:55:49:41:
10:83:27:09:f0:a1:a1:02:8e:86:bc:f4:18:e8:f7:
98:e6:f6:0c:02:6d:a4:f0:9c:e6:e5:bc:70:22:78:
e9:fb:c2:7e:ad:28:c7:18:8d:be:76:4b:6e:f6:56:
a7:0a:d3:31:ec:d3:44:11:da:03:0d:4e:4c:7f:fb:
02:ec:9c:f9:6a:f8:d6:cf:2c:f1:99:8d:1b:14:46:
75:72:80:74:2c:63:2c:e9:33:87:16:e0:e5:b9:eb:
7a:a8:ab:77:b5:dc:25:63:b9:c1:dd:67:65:e3:b5:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:4A:8E:FB:6B:BC:19:F6:1F:EB:47:55:FF:E9:82:1B:55:12:A7
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/Gg1KjvtrvBn2H-tHVf_pghtVEqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.102.0/23
Signature Algorithm: sha256WithRSAEncryption
db:e3:73:60:a9:c1:72:da:13:f9:4e:98:ef:e1:41:87:5e:cb:
81:5a:f3:81:92:03:d1:32:1c:28:c9:c4:d8:92:4c:a5:03:30:
81:a3:96:3e:9a:08:4c:6f:54:94:44:97:12:83:3e:3a:5a:74:
29:a0:70:32:ab:75:0f:f1:d6:b9:17:e9:26:df:a9:04:da:e9:
5f:af:a4:35:17:e1:3c:5b:45:f7:39:40:91:c5:5e:3e:00:ef:
d1:71:41:26:d7:2d:f1:93:cb:74:bc:89:34:6c:5a:f7:d1:82:
1d:b1:f1:bc:b6:73:c4:4b:c4:61:6f:99:94:fb:83:d4:e4:c1:
2f:07:12:aa:54:50:de:85:8f:ac:98:bb:54:05:5b:91:61:25:
24:5f:0e:e3:81:1e:44:62:6b:1e:1b:e7:4a:ae:41:e8:4e:59:
7b:36:98:a2:ef:17:d1:af:0c:c9:73:e0:d3:cf:1e:35:b4:66:
a9:fd:0a:c5:bd:d3:e4:a7:d4:af:da:78:6a:3f:27:03:43:cd:
fe:e1:9e:0e:a5:1b:86:db:e9:bd:84:5a:5d:1b:3e:22:0b:59:
2a:e5:99:8a:b9:f1:30:a8:fc:14:cf:53:33:fb:94:96:31:37:
0b:38:3e:36:2e:d2:fa:b0:3a:b8:3c:ec:1b:84:dd:12:12:a7:
a5:0a:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:38 2024 by rpki-client on console-ams.rpki-client.org