Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/AqBnN0rfbqJcewOk6sAnG_8gmds.roa
File: AqBnN0rfbqJcewOk6sAnG_8gmds.roa (raw, json)
Hash identifier: /zyemwUDLFeXLE78ORFE7m0noJk56z32JZooA8mwbF0=
Subject key identifier: 02:A0:67:37:4A:DF:6E:A2:5C:7B:03:A4:EA:C0:27:1B:FF:20:99:DB
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 08CCF401
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/AqBnN0rfbqJcewOk6sAnG_8gmds.roa
Signing time: Sat 01 Jan 2022 15:04:51 +0000
ROA not before: Sat 01 Jan 2022 15:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57342
IP address blocks: 194.76.112.0/24 maxlen: 24
2a0c:ffc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147649537 (0x8ccf401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 1 15:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02a067374adf6ea25c7b03a4eac0271bff2099db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:3c:5c:32:5d:4c:32:ef:45:b2:e8:46:b1:
a4:1f:1b:5a:3d:37:a3:c4:a0:61:71:15:b1:b8:0c:
29:b6:8a:e0:dd:97:29:2a:1c:0f:96:9a:88:b7:6d:
95:ec:3b:9f:3d:b0:00:1e:d8:22:0a:dc:4a:95:13:
f8:90:6a:5b:74:9a:28:03:fb:33:14:79:2b:50:3c:
38:ab:a5:9e:75:81:37:ff:86:58:d9:3f:19:a5:b9:
07:b9:58:ee:2b:7c:23:fe:80:f9:a6:37:38:ac:21:
5c:35:bd:35:4d:47:df:2f:df:2e:dd:71:1e:a6:00:
77:9b:48:b0:d5:56:d7:f7:9b:3b:f3:22:c1:32:69:
6e:4e:13:eb:b8:66:75:0d:8e:56:68:0a:c2:e2:09:
d0:4b:8b:1a:20:2f:99:4c:12:73:86:c5:70:9c:1b:
10:16:57:7f:23:f3:03:27:59:30:52:47:17:7d:33:
58:7c:3d:0b:41:75:70:df:15:31:27:79:e8:b4:c5:
1d:06:25:95:15:3e:b4:73:f1:d8:3f:05:99:b7:81:
43:0d:9f:05:d6:13:b3:ba:1f:f5:05:ef:af:34:c0:
5c:9d:4a:56:8d:7a:e4:c8:a3:dc:3c:c4:ef:4b:d4:
85:6c:d9:04:5f:22:3b:b4:8f:74:8b:cd:4f:3a:ac:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:67:37:4A:DF:6E:A2:5C:7B:03:A4:EA:C0:27:1B:FF:20:99:DB
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/AqBnN0rfbqJcewOk6sAnG_8gmds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.112.0/24
IPv6:
2a0c:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
80:e7:18:ca:84:c1:b9:09:ca:01:c0:28:3e:0d:91:8e:7e:b9:
74:18:79:7b:ff:cd:92:97:a6:9e:32:71:e9:bb:1c:0a:6f:e2:
d9:0a:d1:cf:5b:f8:86:5c:fc:1e:92:7a:2b:86:e3:c0:3e:94:
5a:9b:32:82:cb:1b:d7:ba:8a:c0:77:34:0a:72:7b:18:8e:59:
f5:7d:bb:13:16:8b:fb:bc:39:02:de:a4:71:5c:f9:1a:ce:58:
99:a4:10:2a:97:97:f0:5b:b1:29:c5:46:70:49:8f:a6:31:51:
4a:2d:77:b4:b1:d8:96:cd:66:fa:e6:98:ae:6b:cf:03:01:91:
c6:66:40:68:9e:69:ca:33:c8:e1:67:c8:9c:37:da:e1:65:60:
5d:b0:20:4e:46:db:f1:47:07:4b:1e:60:92:da:95:0d:05:f4:
46:bb:a8:55:df:d1:c7:e6:7c:02:3d:31:6c:4e:56:af:d7:49:
71:53:8a:34:71:68:8b:01:ef:20:d6:76:b2:27:5f:58:2c:ef:
81:75:88:0d:ff:92:e8:43:63:be:68:0e:4e:d8:e6:ab:3d:a4:
8b:72:f2:8b:46:4c:d1:c5:91:d2:24:cf:23:e4:a6:5b:4a:97:
cc:4a:c0:b5:d7:63:5d:9b:db:ef:7a:02:67:bb:7f:24:31:16:
f4:74:cf:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECMz0ATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MWVmOTY5NGFhNDhkODEyNzllOGVkZTQzMDc5NWYyNzY4ZDJkZDUyMB4XDTIyMDEw
MTE1MDQ1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDJhMDY3Mzc0YWRm
NmVhMjVjN2IwM2E0ZWFjMDI3MWJmZjIwOTlkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7WPFwyXUwy70Wy6EaxpB8bWj03o8SgYXEVsbgMKbaK4N2X
KSocD5aaiLdtlew7nz2wAB7YIgrcSpUT+JBqW3SaKAP7MxR5K1A8OKulnnWBN/+G
WNk/GaW5B7lY7it8I/6A+aY3OKwhXDW9NU1H3y/fLt1xHqYAd5tIsNVW1/ebO/Mi
wTJpbk4T67hmdQ2OVmgKwuIJ0EuLGiAvmUwSc4bFcJwbEBZXfyPzAydZMFJHF30z
WHw9C0F1cN8VMSd56LTFHQYllRU+tHPx2D8FmbeBQw2fBdYTs7of9QXvrzTAXJ1K
Vo165Mij3DzE70vUhWzZBF8iO7SPdIvNTzqsFhUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQCoGc3St9uolx7A6TqwCcb/yCZ2zAfBgNVHSMEGDAWgBTh75aUqkjYEnno
7eQweV8naNLdUjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRlLVdsS3BJMkJKNTZPM2tNSGxmSjJqUzNWSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvYjA1NjY3LWU4NTAtNGM0NS1hZWUzLWFkZWQxYzQ2OWVhZi8x
L0FxQm5OMHJmYnFKY2V3T2s2c0FuR184Z21kcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
YjA1NjY3LWU4NTAtNGM0NS1hZWUzLWFkZWQxYzQ2OWVhZi8xLzRlLVdsS3BJMkJK
NTZPM2tNSGxmSjJqUzNWSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMJMcDAPBAIAAjAJAwcAKgz/wAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCA5xjKhMG5CcoBwCg+DZGOfrl0GHl7/82Sl6ae
MnHpuxwKb+LZCtHPW/iGXPweknorhuPAPpRamzKCyxvXuorAdzQKcnsYjln1fbsT
Fov7vDkC3qRxXPkazliZpBAql5fwW7EpxUZwSY+mMVFKLXe0sdiWzWb65piua88D
AZHGZkBonmnKM8jhZ8icN9rhZWBdsCBORtvxRwdLHmCS2pUNBfRGu6hV39HH5nwC
PTFsTlav10lxU4o0cWiLAe8g1nayJ19YLO+BdYgN/5LoQ2O+aA5O2OarPaSLcvKL
RkzRxZHSJM8j5KZbSpfMSsC112Ndm9vvegJnu38kMRb0dM+2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org