Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/CofOaXJoDKyrhOO2OBIUuRT7gZA.roa
File: CofOaXJoDKyrhOO2OBIUuRT7gZA.roa (raw, json)
Hash identifier: WZK7leJsyHzTPzgCOx0WLVGPFCssBtM2IjsuA6nT/0Q=
Subject key identifier: 0A:87:CE:69:72:68:0C:AC:AB:84:E3:B6:38:12:14:B9:14:FB:81:90
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 03BB3D39
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/CofOaXJoDKyrhOO2OBIUuRT7gZA.roa
Signing time: Sat 01 Jan 2022 06:54:56 +0000
ROA not before: Sat 01 Jan 2022 06:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15461
IP address blocks: 213.174.29.0/24 maxlen: 32
194.44.38.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62602553 (0x3bb3d39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 1 06:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a87ce6972680cacab84e3b6381214b914fb8190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:6f:1f:98:e2:e2:9f:3d:f4:8e:9c:3b:e0:
7f:2b:ef:46:85:d0:c7:b8:cb:a7:e9:36:cb:87:50:
08:85:91:01:c0:14:3b:95:fa:15:ce:2f:32:0a:76:
64:2f:c5:b8:ab:12:21:ba:2f:e0:c5:7b:83:2a:e1:
a4:67:c7:d8:f7:52:62:45:c1:88:e0:fb:7b:1e:5d:
97:2b:d0:e5:15:32:a9:75:17:ef:cb:de:87:5d:83:
81:3f:e1:5d:c5:84:f4:c1:f4:bc:aa:b1:b8:7f:a1:
df:fb:31:7f:8f:1e:53:2f:53:39:ed:a4:3d:ea:49:
f1:0d:fc:92:5b:89:c2:57:ec:d8:3d:af:15:a4:6e:
82:3d:3e:09:f1:97:5c:88:d7:e1:2d:67:52:45:9b:
ef:3b:50:85:0e:75:7e:d0:9d:ed:14:54:4d:0b:98:
71:f6:22:13:f3:a8:98:0b:cd:38:fe:c5:ea:e0:9d:
83:b2:7e:79:e2:2f:eb:f8:72:b8:69:51:9d:5e:d0:
8e:6c:3b:c8:1f:54:aa:97:78:00:c0:e9:6e:40:c3:
df:aa:de:88:ad:79:33:c8:0b:05:3e:b0:5a:d5:5a:
fe:8a:f9:5a:de:8f:31:50:0b:85:61:75:94:17:d9:
7c:9a:14:92:ad:71:95:30:fa:12:31:f9:48:e8:db:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:CE:69:72:68:0C:AC:AB:84:E3:B6:38:12:14:B9:14:FB:81:90
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/CofOaXJoDKyrhOO2OBIUuRT7gZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.38.0/23
213.174.29.0/24
Signature Algorithm: sha256WithRSAEncryption
68:36:59:1a:08:d6:1d:2b:9f:fe:00:2a:d3:b5:e3:58:79:e0:
21:3d:3e:00:40:6a:3c:85:ce:49:53:17:c3:f4:71:9f:61:eb:
e3:8c:5d:a4:8e:ae:4d:81:44:b3:ff:b5:1a:49:e3:ac:d3:14:
b4:d4:d6:d5:b5:27:c2:b7:d0:a0:f1:65:c1:f2:fa:3d:12:af:
9e:1b:ec:e1:b7:e0:6a:85:02:b5:b2:c4:83:a6:fd:56:7f:8d:
d6:89:28:dc:0e:7f:a4:9c:e0:71:23:ef:66:58:9c:61:3d:91:
ad:c6:4b:41:a3:50:ee:07:e4:1c:0e:26:39:2b:ba:49:8b:11:
5a:9b:ec:52:de:42:1d:4e:54:64:a5:52:97:c9:3b:03:19:cf:
45:a4:9c:7f:5b:54:5c:06:22:01:f2:08:0c:d9:ae:76:13:c5:
b8:d7:b3:fb:19:c0:df:7e:09:70:78:7e:c1:ee:a6:94:af:e9:
6e:50:0c:8d:6a:a7:3b:c7:01:12:3e:88:b4:e3:f3:87:e4:21:
c8:e0:2f:da:e5:0c:1a:00:96:ca:41:78:a6:b0:05:00:05:0b:
6f:97:67:fc:af:35:a8:ca:56:e2:9a:f0:aa:d5:fd:01:28:62:
9b:a0:98:ea:21:63:31:df:00:0e:c8:4e:99:bd:55:ce:cc:14:
b5:96:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:28 2024 by rpki-client on console-fra.rpki-client.org