Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/De41YX7yTKReIt0KjHZXI5eQFhE.roa
File: De41YX7yTKReIt0KjHZXI5eQFhE.roa (raw, json)
Hash identifier: 0zCxf2Vv0GGH2Dd/clS3kHPzX//EK8ehoV6p1/d0Nns=
Subject key identifier: 0D:EE:35:61:7E:F2:4C:A4:5E:22:DD:0A:8C:76:57:23:97:90:16:11
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: 013A3C94
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/De41YX7yTKReIt0KjHZXI5eQFhE.roa
Signing time: Wed 02 Feb 2022 18:32:02 +0000
ROA not before: Wed 02 Feb 2022 18:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20593812 (0x13a3c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Feb 2 18:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dee35617ef24ca45e22dd0a8c76572397901611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:7d:99:de:37:62:6d:cd:4c:94:7c:d1:8d:
09:70:1e:b9:2a:8b:71:60:73:cb:99:18:52:df:a5:
f1:ed:38:03:05:ac:62:f0:34:d3:a4:19:7c:c1:85:
cd:85:17:a1:e1:13:74:94:da:f8:91:8e:f1:76:bd:
89:3a:2d:60:4c:34:8e:2d:10:4f:86:7c:1d:40:91:
b7:01:d9:60:0b:18:cc:d6:36:9d:12:b6:40:42:56:
7b:8a:dd:f7:d1:2c:7f:2d:6f:90:48:56:dd:a5:77:
db:50:d6:87:37:15:8a:80:6b:c7:be:1b:c7:c7:00:
b6:f3:f8:93:da:6e:f4:88:15:40:78:c0:af:e8:d4:
c0:39:ab:f0:03:ba:15:b9:49:f1:e2:ad:75:e3:99:
38:ef:d3:26:fa:00:f8:6d:76:0a:b9:c9:b8:2b:f5:
26:d2:53:54:33:c8:c8:69:6c:64:d2:8b:ad:0b:b9:
6c:32:fc:5c:5f:17:35:eb:7a:b0:84:da:45:3e:41:
fe:6a:0f:a5:c7:67:9d:f1:83:04:53:0f:d3:f8:1e:
b2:6b:d4:98:f7:7b:5b:fa:eb:03:38:67:bf:cc:75:
5a:2f:04:05:14:5b:e7:e4:76:12:6a:4c:e4:63:a6:
be:ee:1f:63:93:6f:31:f3:27:46:1e:88:45:e7:b7:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EE:35:61:7E:F2:4C:A4:5E:22:DD:0A:8C:76:57:23:97:90:16:11
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/De41YX7yTKReIt0KjHZXI5eQFhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ae:5b:fd:88:97:ac:d6:e2:a3:bf:65:3a:4d:06:bb:80:e1:
86:e8:c0:42:1b:41:a2:1f:c3:c7:f0:51:0d:71:39:fb:8f:3e:
d7:c8:4d:c5:19:35:4e:8d:21:6b:2b:01:9f:ee:7c:1f:92:94:
da:1d:a2:27:a3:81:3a:7a:2b:c7:25:e3:ed:01:69:c1:5c:ed:
0c:7b:bb:60:ba:eb:a7:f3:24:79:00:44:03:21:cd:be:a8:61:
78:c5:a3:20:e5:d3:f1:a9:58:30:7c:e2:e0:fe:ce:31:cd:07:
8c:e1:26:1d:5c:2c:e0:9d:d7:dd:0e:3b:2c:2f:55:69:ef:15:
37:7e:f6:42:15:09:44:83:4d:97:2a:22:bc:05:a8:05:c2:54:
f4:37:f3:1c:24:9a:3d:f7:75:a6:6f:f7:36:6e:4c:5e:24:d4:
97:b2:81:fc:5f:a2:59:cb:1a:43:4f:cc:77:46:dc:ed:d0:b0:
27:da:11:c7:2e:e7:a1:93:ab:d3:82:f0:d0:66:d4:cb:04:8e:
a1:38:61:5e:38:00:b3:6d:1d:56:b1:7f:48:6f:f6:73:cd:68:
5d:c4:77:59:0a:2b:fa:3e:df:85:55:9a:7f:59:f4:64:45:45:
1f:a5:1c:67:60:7f:2e:69:74:1c:c3:1f:77:20:4d:f4:d7:52:
ca:8a:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org