Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/oIhrznPnwp2KcnJU7IfHkpnxtc4.roa
File: oIhrznPnwp2KcnJU7IfHkpnxtc4.roa (raw, json)
Hash identifier: 0nebYVcBxpnQGThUsKvGXwPCPNxjFTkz4oQr62kjp+g=
Subject key identifier: A0:88:6B:CE:73:E7:C2:9D:8A:72:72:54:EC:87:C7:92:99:F1:B5:CE
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 38113362
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/oIhrznPnwp2KcnJU7IfHkpnxtc4.roa
Signing time: Sat 01 Jan 2022 02:57:33 +0000
ROA not before: Sat 01 Jan 2022 02:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42168
IP address blocks: 194.230.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940651362 (0x38113362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 02:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0886bce73e7c29d8a727254ec87c79299f1b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:e9:5c:44:4c:a2:ca:12:79:f7:c3:e3:41:
a0:dc:f3:c8:b8:96:e7:35:92:d1:c2:64:33:9d:a3:
85:04:6a:f3:da:0b:4c:ae:f6:2f:e7:16:67:23:41:
6a:22:0f:94:55:d7:ae:6e:0b:5e:95:c9:18:58:d7:
45:13:e3:32:08:32:a8:12:e2:e6:55:f4:e7:9c:44:
f7:2a:8d:c0:c8:8b:a4:b8:58:29:e7:7c:99:83:a4:
50:62:09:52:6c:78:84:71:81:cc:73:54:a8:89:89:
ee:6f:89:41:6b:62:34:8d:9f:37:6e:f5:25:87:cd:
25:0b:1e:96:cc:6e:58:20:ea:f3:25:8a:bd:35:25:
47:45:e7:60:c0:1b:0d:8e:8c:d5:37:51:ef:67:d4:
29:d5:9b:c5:eb:e9:f8:bf:56:54:3b:40:30:13:73:
2c:e8:2c:03:6c:3c:e5:fb:e2:1e:42:72:75:53:b5:
b2:74:3f:0b:a5:86:c3:fb:a8:a3:cb:0e:68:15:17:
3f:58:2f:63:c7:e1:6e:fb:b8:94:cc:5c:80:30:9c:
98:68:a8:a9:51:eb:96:52:d4:c6:74:46:19:6b:20:
42:b7:cb:dc:87:e0:2c:6b:45:b6:67:64:83:43:a1:
98:9c:2b:46:46:a0:2e:29:35:7b:3b:60:59:53:78:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:6B:CE:73:E7:C2:9D:8A:72:72:54:EC:87:C7:92:99:F1:B5:CE
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/oIhrznPnwp2KcnJU7IfHkpnxtc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.230.110.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c0:45:39:2e:7f:9a:7f:13:ff:ca:11:bc:6b:84:e4:60:de:
bb:41:9f:1f:6f:58:31:6f:3e:3f:f8:37:80:6a:ee:3d:e1:cc:
74:0d:64:fa:8c:24:44:fd:66:16:80:5d:c0:c8:47:c8:96:58:
9d:f4:71:c0:a7:db:22:09:1b:91:92:48:c0:95:a0:c6:a0:fc:
5d:5a:42:a4:f9:0b:7e:82:77:57:ba:ec:df:bd:b1:6d:2a:79:
d8:96:6a:4e:fc:52:2c:0d:88:bc:64:a5:84:9c:ee:9d:d7:98:
17:70:cb:e7:5f:7a:08:95:36:04:3a:7a:ab:6a:0b:34:9f:d3:
ee:a4:40:4c:6f:1f:00:41:57:ef:9b:51:ae:90:9d:54:57:b3:
f4:f8:09:69:e4:f5:39:e3:c4:1e:72:2d:fd:55:d2:6d:de:d3:
44:5b:78:6e:21:7e:20:a0:ab:86:59:87:c1:1b:b1:dd:dd:e6:
a4:0e:b8:14:41:0f:d0:2b:f0:e2:83:ba:ac:f9:1f:cf:58:38:
63:2e:7d:04:af:c4:7e:3d:df:4e:c1:92:76:89:c1:48:0e:c5:
fa:48:44:b6:a0:cc:f4:06:50:5e:98:b8:87:78:85:73:61:44:
9d:0d:89:97:20:71:f6:01:20:1a:bc:b9:8d:01:0a:22:d9:1c:
88:05:88:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org