Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/_i1JHu9V6FmSDMSZrqxFtnVvqDg.roa
File: _i1JHu9V6FmSDMSZrqxFtnVvqDg.roa (raw, json)
Hash identifier: uxizrrPs5dHGZ1tWW2p+lpupky3kwQbpbwLzBqVP434=
Subject key identifier: FE:2D:49:1E:EF:55:E8:59:92:0C:C4:99:AE:AC:45:B6:75:6F:A8:38
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 08E74605
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/_i1JHu9V6FmSDMSZrqxFtnVvqDg.roa
Signing time: Fri 28 Jan 2022 08:31:37 +0000
ROA not before: Fri 28 Jan 2022 08:31:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 194.150.74.0/24 maxlen: 24
194.150.73.0/24 maxlen: 24
194.150.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149374469 (0x8e74605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 28 08:31:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe2d491eef55e859920cc499aeac45b6756fa838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:6a:26:02:67:a0:d4:60:4b:69:24:bc:3b:
ec:6e:75:d4:ba:32:b1:af:3a:51:42:36:8d:83:17:
e3:ce:dc:c1:69:28:d3:4e:20:59:0b:b5:56:75:84:
53:19:9b:cc:88:37:12:76:42:3c:8a:02:36:fa:ec:
d7:62:3d:f3:86:fc:59:03:5b:f6:f1:01:87:94:28:
bb:9d:b0:97:7a:1a:d8:31:28:23:63:83:30:e1:15:
45:ab:22:a4:a1:62:39:7c:89:cd:37:16:51:6a:aa:
7e:79:49:5c:78:42:6e:4c:96:44:13:33:b5:3e:95:
d9:af:37:d9:2b:2d:15:c6:45:04:fc:40:52:10:45:
d9:7f:92:a5:1d:11:e9:c9:81:90:65:da:15:a4:e9:
27:e8:fe:2e:01:f0:5b:84:fb:7f:ee:ca:ea:70:f2:
53:1e:d5:44:48:f0:a6:5c:5c:ba:55:30:54:3b:cb:
0d:51:30:62:b3:d9:e1:fc:c1:3a:b5:63:c9:8f:0d:
48:3a:63:7c:5d:76:32:ef:0a:90:a0:07:60:4a:e4:
50:a9:47:57:c9:97:d7:1c:84:94:53:57:0e:7e:ec:
64:af:8a:53:ce:56:e0:5f:d5:b9:33:1e:02:0a:1e:
99:a4:ae:73:c2:b9:1e:cf:bb:05:8a:00:ad:94:b8:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:49:1E:EF:55:E8:59:92:0C:C4:99:AE:AC:45:B6:75:6F:A8:38
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/_i1JHu9V6FmSDMSZrqxFtnVvqDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0-194.150.75.255
Signature Algorithm: sha256WithRSAEncryption
96:73:f2:f9:51:6f:64:94:1f:d4:cf:ae:0a:15:e6:f7:47:d3:
bf:3c:03:ae:4b:5f:91:0b:28:58:36:86:9d:f1:82:d9:ec:4d:
02:22:81:6d:77:fc:23:54:46:71:d3:50:2f:6c:f0:1d:ea:3c:
ae:2d:82:ca:ea:2e:a1:ce:c4:37:a5:b6:5e:84:9f:c0:02:dd:
67:78:83:67:6a:5d:2b:10:62:5e:73:ed:2e:1d:cc:60:0d:56:
6c:2d:0a:15:ca:55:c7:82:af:7b:4a:d2:a1:1b:de:d9:b7:ce:
ec:bf:4c:62:d0:de:24:f7:a7:40:9d:60:09:8b:28:b7:03:ad:
5a:1f:d0:f2:ce:a6:d5:9d:6e:bb:5b:b8:d5:04:9e:63:45:b7:
10:f6:9e:39:3b:a6:35:cd:5d:ac:f1:ed:79:59:75:3e:f0:72:
99:b5:7f:aa:12:b6:32:89:cf:38:dd:a0:2a:0a:7e:ad:47:64:
d9:a5:12:bc:03:16:8f:46:c1:66:d1:28:46:86:3a:ab:42:b7:
c0:dc:99:c3:18:6b:33:a7:06:04:dd:df:a5:19:38:63:03:36:
b5:49:6b:99:ce:68:ef:36:11:eb:8f:0b:9a:b0:2b:a2:38:49:
3c:ac:3c:7c:8e:12:64:18:a6:c6:21:40:a5:4d:a9:8a:69:59:
53:f8:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:51 2024 by rpki-client on console-ams.rpki-client.org