Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/i2DGMaUDkKV_t_lIJWH27xkt2S4.roa
File: i2DGMaUDkKV_t_lIJWH27xkt2S4.roa (raw, json)
Hash identifier: fJzhOmeHM7CeLtxazWReK/i/HeEcLzcWdv8cfB/XVU4=
Subject key identifier: 8B:60:C6:31:A5:03:90:A5:7F:B7:F9:48:25:61:F6:EF:19:2D:D9:2E
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 05612657
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/i2DGMaUDkKV_t_lIJWH27xkt2S4.roa
Signing time: Sat 01 Jan 2022 15:59:32 +0000
ROA not before: Sat 01 Jan 2022 15:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41332
IP address blocks: 194.8.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90252887 (0x5612657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Jan 1 15:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b60c631a50390a57fb7f9482561f6ef192dd92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:d5:fc:86:98:0c:a9:6e:0a:1e:91:2a:ee:
21:c5:19:cf:16:0e:69:ab:10:e6:f0:e2:90:f8:c3:
fb:9f:06:26:d4:92:d8:60:d0:cc:06:2c:b2:70:6b:
b0:27:20:7b:12:5c:cb:0e:64:44:f7:ee:bd:81:e4:
e2:be:93:f5:c0:0c:0b:58:0a:69:25:99:af:a8:73:
7c:cd:f6:35:00:df:b3:b1:23:c3:db:02:8a:16:a2:
29:d6:c5:a6:05:32:c7:a9:a4:70:a1:4b:e4:13:ea:
1f:20:65:f1:67:a8:9f:ee:c7:4a:23:42:2e:17:8b:
8a:5e:8c:07:bf:7c:57:4d:ae:c0:60:af:87:77:e1:
83:9b:49:44:0c:65:f2:c8:fe:f3:fa:31:0a:be:9e:
4b:b4:17:a8:f9:b7:6f:64:9d:89:3b:41:1f:0c:6e:
9a:db:ab:1f:6d:23:1a:04:ff:c8:ca:94:49:85:c4:
2e:e5:d1:51:52:db:dc:23:c7:ef:24:43:e5:f3:1a:
f4:12:77:65:42:da:7a:1e:b4:fd:47:54:bb:8c:98:
eb:1e:49:5e:20:32:1d:64:b9:fb:06:ac:da:7f:bb:
4f:72:d3:52:cf:cb:7a:64:ce:b3:54:19:6a:2a:85:
25:61:85:f8:d8:19:08:f1:c0:74:ef:d4:9b:24:5e:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:C6:31:A5:03:90:A5:7F:B7:F9:48:25:61:F6:EF:19:2D:D9:2E
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/i2DGMaUDkKV_t_lIJWH27xkt2S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:43:40:57:e3:e0:d0:46:72:9d:f2:09:b1:ff:0a:52:d9:29:
ff:e3:40:38:ed:2d:f2:6d:fc:98:c8:65:97:fa:1f:3d:86:6f:
ca:e2:69:f7:fa:62:fc:03:b5:95:97:e4:3c:5e:82:2d:f7:18:
8d:63:f8:26:c8:d3:12:29:5b:fe:8b:b0:21:a8:24:8b:71:61:
23:7b:33:4e:1a:74:63:83:94:ad:63:3a:01:91:6d:55:cf:c4:
fe:58:2d:45:1b:0c:89:3a:03:1c:79:92:f2:77:7f:f6:da:fe:
ab:e3:64:fe:0d:53:b8:f7:74:f4:8d:f2:b8:a2:1f:65:7c:6a:
94:44:e3:19:c9:1d:b9:0c:a1:b4:48:2e:98:d5:4e:f1:ce:ab:
92:2f:ff:8b:eb:18:00:68:a6:e8:69:3d:3e:34:62:7a:d7:6c:
71:f8:09:6f:04:2a:ba:4b:13:3c:a9:72:ab:37:dc:6f:7e:12:
c5:e0:6c:cc:9a:96:7f:98:e7:91:8e:d2:b9:6b:e5:4e:11:88:
73:e8:cf:36:58:b4:a1:33:22:e6:6b:df:8f:12:51:65:a2:e3:
ba:42:56:1b:6f:5c:40:58:c4:3d:04:a3:c9:4e:37:4b:c5:de:
f5:02:49:45:73:ec:8a:33:d5:41:fa:75:09:c0:4e:d6:33:32:
29:be:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:33 2024 by rpki-client on console-fra.rpki-client.org