Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/0jLs29iOT6PNuMRDVWqom_ngXa0.roa
File: 0jLs29iOT6PNuMRDVWqom_ngXa0.roa (raw, json)
Hash identifier: BHbCfDrPc0c2fam7j0GF0QPQZxIbmdiuaOnTlt1MjXU=
Subject key identifier: D2:32:EC:DB:D8:8E:4F:A3:CD:B8:C4:43:55:6A:A8:9B:F9:E0:5D:AD
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08EF6F78
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/0jLs29iOT6PNuMRDVWqom_ngXa0.roa
Signing time: Thu 24 Mar 2022 10:00:04 +0000
ROA not before: Thu 24 Mar 2022 10:00:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211743
IP address blocks: 195.26.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149909368 (0x8ef6f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 24 10:00:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d232ecdbd88e4fa3cdb8c443556aa89bf9e05dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:28:06:e7:9a:a1:b9:e1:d6:d3:16:d5:d8:
e8:76:db:01:77:7d:20:98:f4:7e:a3:8a:d7:56:48:
2b:3d:fe:af:e6:94:ce:30:68:7c:d6:a3:1c:fb:5b:
b7:23:c3:79:a2:7b:fe:e7:c9:b2:58:77:83:cd:22:
6c:c1:f1:71:81:38:6f:3e:e9:d8:f3:b7:b7:88:1e:
a8:54:9a:fb:f3:43:fc:01:af:68:7d:c6:4e:f9:68:
0d:f0:15:24:20:71:d7:3e:20:f8:dc:ae:3e:da:4b:
3c:57:59:6f:8a:97:a7:d2:ba:7e:b2:51:8b:54:1c:
7b:61:fc:e5:2f:90:a8:5b:7f:16:e5:60:f1:2c:52:
db:8d:c0:22:bf:67:54:01:df:9d:e2:ca:d5:1a:d3:
7a:bc:73:f3:5a:22:57:82:ac:c3:1d:96:2f:ed:a2:
2c:5b:33:1d:69:8f:91:47:0f:ed:bc:54:73:67:36:
0a:1c:b0:76:89:76:dc:a1:06:d3:81:fe:6d:22:8e:
2a:d3:85:d8:36:64:a3:b6:89:94:5c:8a:75:2b:88:
96:de:15:82:ad:38:48:09:02:33:c0:6c:8a:47:6d:
3e:96:04:e9:19:b0:41:5e:53:59:6c:59:db:e7:33:
5e:2c:7d:4f:02:5d:cd:6a:b5:d6:36:48:6e:5a:5c:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:EC:DB:D8:8E:4F:A3:CD:B8:C4:43:55:6A:A8:9B:F9:E0:5D:AD
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/0jLs29iOT6PNuMRDVWqom_ngXa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.6.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9a:c3:12:5f:27:91:05:f3:bf:ee:d6:b6:66:ee:6b:18:4b:
41:a0:35:39:e3:23:67:1d:af:4b:17:98:8c:20:06:f4:00:b5:
88:be:83:17:cf:2c:c8:a8:f0:ef:f6:48:05:56:ab:19:cb:b9:
7d:e8:7b:bd:ab:87:f4:db:c8:e4:03:24:93:fb:38:4e:da:b8:
60:f4:ea:2a:5e:88:2a:bc:18:2e:3f:0b:36:42:93:32:b6:a1:
1b:a6:f0:aa:b8:92:f2:a7:d2:a8:84:60:fc:c3:05:d3:d1:13:
09:47:63:95:94:77:73:6a:d7:d4:16:01:d9:99:af:9e:d0:87:
15:da:e9:b3:6f:ca:6f:9a:77:8f:c9:dd:0e:d8:42:ac:51:53:
9b:1a:24:7d:fa:c1:5e:b8:6f:f6:4d:74:43:a8:d1:4d:21:83:
67:20:0d:21:a8:9a:34:3e:41:1c:d1:22:51:af:b4:8e:41:35:
24:5b:da:ae:fc:79:fd:2c:1b:2a:75:3f:c2:9c:f5:4b:50:31:
1f:81:82:be:b9:f9:17:69:9b:75:9e:8f:9e:25:5d:b6:4a:20:
ab:74:b4:f8:8a:89:85:b7:eb:b7:85:b4:5c:79:cc:9f:ce:f5:
5d:63:7e:cc:8a:63:cf:64:ec:7b:de:e1:a0:bc:10:28:62:85:
ae:2c:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org