Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/clqpsQsxj3vUG6_ngjP-CNiX-EQ.roa
File: clqpsQsxj3vUG6_ngjP-CNiX-EQ.roa (raw, json)
Hash identifier: XnBYTZBfUS6GExp6HZb6tmlnMuiAYGeV3xShO1UEvIQ=
Subject key identifier: 72:5A:A9:B1:0B:31:8F:7B:D4:1B:AF:E7:82:33:FE:08:D8:97:F8:44
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E1155CB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/clqpsQsxj3vUG6_ngjP-CNiX-EQ.roa
Signing time: Sat 01 Jan 2022 01:58:11 +0000
ROA not before: Sat 01 Jan 2022 01:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 195.133.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236017099 (0xe1155cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=725aa9b10b318f7bd41bafe78233fe08d897f844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:2c:04:23:7f:7b:77:2b:dc:0a:8d:c0:2b:
d0:32:69:a9:a3:8e:41:24:aa:45:c2:cd:5d:6a:4d:
10:c4:c5:24:88:ff:b2:bd:ae:bf:02:92:03:e5:5d:
2b:44:47:ab:4a:7c:70:f2:da:04:8b:1c:a6:8f:89:
0a:a6:a0:c2:f4:59:23:dd:b4:4d:74:0c:ff:f4:2e:
c5:c9:ef:a4:19:af:0d:40:42:e4:8d:ac:a6:df:68:
1b:6e:f3:3a:85:e7:11:da:3c:3f:57:e0:30:ba:d8:
d0:2a:43:e4:24:58:5a:76:aa:1b:9e:92:0d:db:52:
94:76:f3:b7:84:2f:c1:ca:69:fc:07:af:23:1f:6f:
9b:75:88:f5:de:8c:10:5d:0d:37:a1:ac:1b:3f:e2:
c0:f7:25:54:2d:eb:ea:6d:b0:d1:92:bb:67:0c:36:
50:ba:cf:56:68:48:d6:ca:74:56:a4:00:94:e8:31:
2c:f2:a6:be:11:b0:c6:d9:e3:26:eb:ad:b8:8b:85:
d9:0a:6d:14:77:3b:14:2d:b9:72:51:7b:19:7b:a9:
12:23:92:7d:85:fd:74:7c:ba:99:34:87:32:e7:3b:
08:7a:ef:30:34:35:79:37:eb:ef:2c:e9:af:c2:e8:
41:fb:76:8b:f9:f9:cc:c9:2a:b6:b7:be:4f:15:e8:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5A:A9:B1:0B:31:8F:7B:D4:1B:AF:E7:82:33:FE:08:D8:97:F8:44
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/clqpsQsxj3vUG6_ngjP-CNiX-EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.0.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8e:b6:95:ec:f0:1a:4b:c4:e2:39:99:95:03:90:60:c0:82:
bc:db:4e:20:02:49:c1:6f:20:c3:1c:0b:91:49:2b:98:bb:10:
bb:19:5c:e0:df:d3:84:cf:ad:07:f3:dc:a1:8a:cf:67:a7:6b:
1b:15:f2:e2:cc:17:b6:23:8f:26:6c:13:d1:03:5e:fb:fb:fb:
76:a6:1f:c7:d8:50:92:e3:7b:3e:ac:02:4a:57:b0:00:bb:c2:
ff:87:83:6d:2b:71:f6:a7:3f:40:6f:77:e1:0e:a4:1e:69:dd:
1f:34:be:bb:45:51:7f:bd:e1:bb:96:38:ad:3c:30:20:d5:42:
bd:40:9e:cb:f6:69:74:54:cc:93:e5:2c:c5:e5:28:67:2f:db:
aa:ce:c1:1d:93:2d:ad:ea:ea:36:dc:8e:35:2c:e7:f7:d7:ff:
4e:77:6c:6d:d0:7d:81:b7:4b:5f:50:7a:65:af:be:39:74:9a:
1b:9a:d1:d2:32:1b:22:84:2a:d4:1b:f7:aa:69:59:c7:18:98:
20:bc:15:86:20:14:c2:a3:1b:3f:48:49:13:31:64:05:f1:e4:
b8:30:3b:1b:4f:7f:ff:a1:50:4d:70:95:73:2f:3c:c8:36:08:
d0:9d:c7:ef:73:62:01:e1:b7:8e:57:6a:4c:c2:15:ca:71:89:
94:76:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org