Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JUf3Izq4_mSx1iBF9TsKinuxTUA.roa
File: JUf3Izq4_mSx1iBF9TsKinuxTUA.roa (raw, json)
Hash identifier: hzCUYmdGrJpWkpc18eJXnOm3GjPDdAiaU9kVCawpz/E=
Subject key identifier: 25:47:F7:23:3A:B8:FE:64:B1:D6:20:45:F5:3B:0A:8A:7B:B1:4D:40
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0FF0D57D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JUf3Izq4_mSx1iBF9TsKinuxTUA.roa
Signing time: Tue 17 May 2022 11:06:30 +0000
ROA not before: Tue 17 May 2022 11:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 194.87.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267441533 (0xff0d57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 17 11:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2547f7233ab8fe64b1d62045f53b0a8a7bb14d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:2b:d5:56:09:5e:ba:87:f9:db:88:69:09:
17:30:4d:22:ea:35:da:99:4f:b5:7b:bc:89:0f:f3:
ff:6c:8e:65:b3:11:1d:ef:b6:8c:22:14:00:5e:40:
50:94:9d:92:ea:16:99:0f:04:a7:09:bd:4c:45:00:
ed:96:95:4c:90:66:08:97:f4:47:6f:dd:3f:ff:50:
62:4e:e5:7d:b2:18:b9:bf:25:75:d9:8f:05:bf:63:
bd:b6:b2:c6:ca:da:41:76:b5:e3:21:dd:ec:94:13:
25:17:85:a8:be:cc:86:78:ac:9c:05:64:59:87:82:
ea:33:f2:60:b9:26:cd:39:44:79:e0:6d:91:58:fb:
53:2e:1e:05:e4:24:63:a6:fe:72:ed:b3:b2:4a:2e:
97:4f:b3:63:d4:30:c5:06:89:12:ff:ca:ff:cd:42:
31:52:ad:6d:88:79:97:ae:6b:3d:b3:f4:00:8f:91:
42:9f:3d:08:d3:76:b6:2b:33:3a:57:8c:6e:6a:83:
d0:ab:da:fb:e6:79:83:32:a1:71:02:c8:94:eb:7f:
b0:aa:31:fa:58:53:9a:e3:32:b1:82:ed:4a:e0:84:
24:7f:da:63:7d:89:e2:db:d5:38:34:73:92:5e:ee:
66:b2:37:86:b3:fe:8c:55:e1:b8:46:a7:21:88:53:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:F7:23:3A:B8:FE:64:B1:D6:20:45:F5:3B:0A:8A:7B:B1:4D:40
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JUf3Izq4_mSx1iBF9TsKinuxTUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.188.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1e:49:3c:ad:ae:87:e9:b9:95:f4:68:64:f2:e1:8b:d6:ba:
1c:16:6e:c8:55:28:dc:e0:c9:e5:cd:52:fd:07:83:88:b1:92:
09:74:b9:74:d4:07:af:61:fc:d5:69:94:48:c7:3b:c0:f7:cd:
6a:60:fc:f1:65:00:21:c4:d4:b0:fa:16:ad:66:e8:5c:01:14:
57:4f:95:13:72:d2:32:0f:31:42:61:bf:b4:a6:4a:0c:ac:7d:
3a:e5:e4:2c:ae:58:9c:5e:bd:dd:fe:83:cf:22:fb:0b:f7:41:
d5:b6:c1:5e:cf:41:64:86:06:53:4a:a2:ed:d8:2a:1c:04:9d:
62:89:31:ac:e9:00:90:9c:6e:af:20:d4:bc:20:37:84:ed:59:
9d:89:a4:4f:b0:e9:21:3d:6d:68:f5:db:5e:b5:44:dd:de:c5:
37:38:de:12:59:8e:c3:34:c5:b4:72:ff:6e:d0:7e:7e:c0:8e:
09:2a:d8:cd:1a:0c:dc:c0:fe:fd:f5:f8:2a:06:02:d9:e4:3f:
56:c5:7d:88:bc:b1:74:87:4e:ae:28:12:41:a4:86:40:02:14:
a2:5a:3d:37:df:ba:b9:87:42:06:cf:10:f9:ac:6c:36:b4:d3:
d5:58:cc:b0:ae:e1:37:bb:70:6d:45:5e:37:b1:e6:e3:a2:7b:
6d:cd:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org