Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/aTayC57oHz9-ra5RPny4RVLihAs.roa
File: aTayC57oHz9-ra5RPny4RVLihAs.roa (raw, json)
Hash identifier: lZ60aOIz1wyz17Qyo/wWvz2VrQCL7AnQT6IArUyQ38M=
Subject key identifier: 69:36:B2:0B:9E:E8:1F:3F:7E:AD:AE:51:3E:7C:B8:45:52:E2:84:0B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 094362A2
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/aTayC57oHz9-ra5RPny4RVLihAs.roa
Signing time: Sat 01 Jan 2022 06:00:34 +0000
ROA not before: Sat 01 Jan 2022 06:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60558
IP address blocks: 194.15.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155411106 (0x94362a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6936b20b9ee81f3f7eadae513e7cb84552e2840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:1a:12:30:65:4d:57:f4:f8:24:da:e1:d2:
be:8b:72:42:df:d2:11:d8:45:ea:b1:a4:e0:9f:43:
f0:e7:9e:67:4b:1d:ab:81:48:b9:f4:11:87:3b:3e:
f6:22:d3:c3:31:39:de:dd:c4:95:83:47:c5:20:6d:
3e:d9:03:74:6d:c6:13:e6:29:3d:dc:ab:a5:3e:7f:
39:a7:aa:9c:b3:cd:dd:72:23:69:8b:ff:a9:3b:0b:
fc:70:32:b9:fa:da:67:2b:be:9d:a7:b0:86:da:3a:
86:d9:a4:9c:eb:eb:93:b1:a3:06:84:68:9e:ae:ec:
7a:73:4b:07:50:27:40:cc:9d:42:c2:3e:6c:c3:44:
53:5b:72:3b:b8:34:4d:1d:c1:64:bf:43:2d:ca:25:
21:f1:92:f4:6b:a0:f5:73:a2:81:fc:db:2a:78:18:
97:6a:35:bb:94:cd:28:ae:da:38:5e:69:2e:43:9c:
0d:7c:18:b7:f6:d9:2b:ee:ac:a1:a9:a7:24:92:89:
54:db:95:5b:ae:49:2d:f6:18:f2:0b:00:76:02:34:
59:9c:98:ab:90:32:98:50:2b:ba:af:db:e5:aa:46:
a6:3e:75:7d:ee:3c:a9:41:33:b6:72:c9:39:9c:82:
46:a8:64:54:d8:0d:1d:fe:76:f7:55:80:bf:8a:53:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:B2:0B:9E:E8:1F:3F:7E:AD:AE:51:3E:7C:B8:45:52:E2:84:0B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/aTayC57oHz9-ra5RPny4RVLihAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:41:ee:97:e6:c0:49:0c:03:85:ef:e2:25:39:02:8c:2b:e9:
49:e3:89:31:fb:55:da:9a:83:cf:4e:94:e6:f5:41:87:6e:f9:
23:8e:3a:6c:e3:93:dc:44:e6:13:32:69:21:4a:10:13:ce:67:
41:cd:2f:2a:64:ba:6f:25:7d:f1:35:26:6b:fc:e2:4b:f0:88:
94:a5:9c:07:8e:41:d4:1a:5f:0e:85:51:bd:a6:6a:d2:ba:e8:
bd:6e:48:c5:33:d9:22:da:a2:76:e9:03:89:3f:e4:54:65:27:
b0:ff:2b:e9:93:e1:ca:30:64:7b:f0:88:ae:24:46:2e:93:68:
f6:6e:f6:bf:88:8a:e1:6a:f5:e2:6f:49:41:73:a8:ab:31:56:
88:19:47:66:44:57:1c:cc:ca:21:37:ab:af:d4:ca:17:e3:12:
27:25:19:1c:f6:70:6d:22:38:be:7c:ba:fb:f1:36:38:90:56:
f5:b7:08:8a:2b:a0:16:62:a9:f6:19:4a:fa:ee:4e:a2:58:36:
57:b9:79:d1:56:cc:61:21:14:7f:4e:6b:1c:c9:5c:67:d0:8f:
95:c6:53:c6:a9:90:a1:4d:15:95:b9:0a:ba:81:57:40:15:d4:
ea:85:cd:29:83:b4:66:e7:75:b7:6e:a0:f8:12:37:2e:9c:ac:
bc:4c:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org