Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OiHcQWlRfWd5X2doojftjmObjB8.roa
File: OiHcQWlRfWd5X2doojftjmObjB8.roa (raw, json)
Hash identifier: ZjEsZR4dk0dH9vZZKy+k9kGMEYMoO4ju5BiVpByOYcs=
Subject key identifier: 3A:21:DC:41:69:51:7D:67:79:5F:67:68:A2:37:ED:8E:63:9B:8C:1F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E1298E9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OiHcQWlRfWd5X2doojftjmObjB8.roa
Signing time: Sat 01 Jan 2022 01:58:12 +0000
ROA not before: Sat 01 Jan 2022 01:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24961
IP address blocks: 194.87.138.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236099817 (0xe1298e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a21dc4169517d67795f6768a237ed8e639b8c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:28:e2:8c:4f:f3:6a:20:ab:b4:7e:d0:85:
ec:a1:91:08:c3:ce:4a:5c:8b:3e:a2:92:b4:48:86:
b7:a8:70:41:83:27:99:5e:b3:9f:2d:4f:9b:c3:b9:
fa:3f:3e:ce:a1:f9:bc:cd:be:29:9e:90:79:ca:68:
02:ea:3f:e5:2c:81:99:02:12:c6:86:16:b6:19:2c:
20:4b:aa:f5:cc:3e:0d:f4:62:a6:c5:9a:09:c3:4d:
89:32:80:92:3e:3f:73:0d:83:0f:e8:c6:5b:8c:68:
84:c0:3d:b9:c4:bf:3a:da:b0:50:b1:45:36:20:9a:
60:39:50:ee:fb:ba:48:30:68:bf:aa:e1:8f:ab:a4:
95:74:81:88:d8:b5:1f:02:db:1e:e0:44:20:61:00:
95:4a:0a:9b:de:35:42:69:77:78:92:a6:26:18:8c:
90:be:cb:c1:0e:6a:7f:a8:be:6b:25:ee:47:1c:02:
10:77:f6:94:e8:5f:3a:f7:62:4d:bc:c7:11:08:76:
3d:4c:5b:c3:32:4a:67:51:50:b8:75:77:48:66:59:
c4:aa:da:c8:80:7d:fb:68:ab:87:2d:f0:4b:96:69:
65:73:b1:b6:ba:ca:b9:ca:a4:25:e9:12:5b:d3:f8:
75:05:48:02:83:b9:36:ac:2d:9d:9e:d4:70:f3:53:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:DC:41:69:51:7D:67:79:5F:67:68:A2:37:ED:8E:63:9B:8C:1F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OiHcQWlRfWd5X2doojftjmObjB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:d7:cf:4b:dc:b0:5d:d5:02:6b:48:9c:fe:de:a9:89:34:3d:
79:2c:ec:7d:15:37:f7:fc:9a:54:56:a1:1f:f7:67:f7:90:78:
e8:20:f6:37:38:e0:7b:d3:98:43:db:fc:82:0c:00:ee:26:6d:
65:8c:c5:c4:a4:f2:b2:2d:d2:1a:96:57:24:8f:f1:41:7d:21:
8b:60:4e:59:a1:49:5a:e7:e8:6b:a0:83:8f:7f:2f:41:6f:5b:
e2:f6:7f:c4:ad:d1:34:10:04:61:41:33:93:7e:1c:f1:2d:60:
87:d7:b3:a5:08:a4:4c:45:53:bc:da:10:50:50:e5:bf:f2:6e:
7d:5a:ed:e7:7a:a1:a4:82:5b:67:21:b7:8e:b0:ec:0f:f4:73:
64:b8:aa:2c:59:c8:29:48:c2:b6:0e:28:82:f4:e4:c3:db:ac:
cc:9d:08:3e:76:49:59:90:68:a1:bb:d8:3e:e5:a1:a8:1c:a6:
fa:3f:9e:07:1b:aa:d8:fe:30:52:71:58:af:8a:a4:e0:47:60:
03:e0:bd:bc:20:7e:96:62:27:19:96:11:d4:74:e6:0f:ae:d2:
90:5b:77:43:52:fd:ce:aa:33:ad:9c:8a:e4:1d:05:52:96:3a:
e1:7f:89:1b:6d:93:74:33:ef:0b:1f:57:97:91:cd:e2:a6:18:
1d:14:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org