Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7ssK65fZNRiiNdSc-v5UQ8ViRXk.roa
File: 7ssK65fZNRiiNdSc-v5UQ8ViRXk.roa (raw, json)
Hash identifier: yYw+XdK1wQo6Hupm2IV/GfA1VT3Z1TZSrnyE8PsCmmU=
Subject key identifier: EE:CB:0A:EB:97:D9:35:18:A2:35:D4:9C:FA:FE:54:43:C5:62:45:79
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184E336CBE15A9769744325DC17E419808A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7ssK65fZNRiiNdSc-v5UQ8ViRXk.roa
Signing time: Mon 05 Dec 2022 16:55:29 +0000
ROA not before: Mon 05 Dec 2022 16:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56382
IP address blocks: 194.50.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:36:cb:e1:5a:97:69:74:43:25:dc:17:e4:19:80:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Dec 5 16:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eecb0aeb97d93518a235d49cfafe5443c5624579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:e8:b3:d3:2d:29:71:2c:4c:4b:a8:81:d8:
3c:c9:58:0b:01:30:a3:83:05:61:c0:e7:27:d8:51:
16:e2:f8:db:b2:b1:b7:54:06:94:34:c5:48:ff:20:
79:44:99:11:84:6e:5c:21:e1:2e:ff:5a:87:0d:47:
f6:a8:79:da:24:0a:ca:a0:41:c1:37:85:64:f8:0b:
0b:8b:e6:bf:ee:77:8b:92:03:d6:78:48:2f:c3:c9:
09:20:46:03:24:cf:2f:42:8b:80:c9:ad:63:25:fa:
79:6d:16:a9:f3:5d:4b:ed:6b:7d:41:99:41:69:dc:
65:78:db:2b:f7:9e:1f:0e:dd:26:9a:4f:71:a5:53:
8f:31:6e:62:cb:f2:c6:d5:8e:d9:db:60:9d:cf:b7:
48:96:06:5f:f6:6a:f3:be:76:7d:7a:63:1f:38:4b:
fa:7e:32:83:da:24:7e:7b:bf:06:0b:36:c2:39:f7:
e1:e4:7c:ef:b0:54:01:48:1a:cf:e6:70:d1:6d:1b:
c7:79:f2:cb:e3:5c:ac:c6:36:bd:e7:de:5f:f1:0b:
bb:dd:6c:89:ea:74:3f:ec:dd:80:84:41:e3:b0:5b:
ce:a5:f8:4d:c3:2d:d6:0c:65:6c:da:56:81:b3:83:
40:dd:6c:ee:22:65:03:57:40:ff:5f:37:dc:e7:74:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CB:0A:EB:97:D9:35:18:A2:35:D4:9C:FA:FE:54:43:C5:62:45:79
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7ssK65fZNRiiNdSc-v5UQ8ViRXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.19.0/24
Signature Algorithm: sha256WithRSAEncryption
09:20:8f:8a:35:dc:2f:51:27:3e:e7:fa:6f:dd:e8:87:42:44:
94:fc:ca:b0:45:46:80:86:63:d3:61:69:3c:c8:7f:58:58:7b:
42:1f:23:3c:2f:a1:a8:fb:2e:58:ff:06:66:0d:92:eb:58:31:
8f:7a:cf:3b:cc:c7:d6:0e:88:05:62:70:bd:cc:ab:74:01:b3:
67:0c:31:3c:90:b0:10:ec:41:4d:38:dc:2e:b2:2d:bd:5f:ca:
cb:ff:02:01:d7:39:d6:4a:b7:7f:30:75:05:e2:83:fa:40:33:
f3:3c:41:50:5c:fb:0f:72:94:90:25:80:a5:ec:aa:0f:22:9b:
ca:64:81:e1:54:98:c9:29:5c:8f:0d:ed:08:58:8a:79:a9:8c:
db:70:ec:d5:a8:bb:16:d2:c6:ec:df:c0:3d:80:dc:55:f5:70:
e4:0c:0a:ec:55:4f:97:a9:43:e9:4d:21:4d:06:eb:e2:27:95:
97:9a:00:13:14:5c:00:f6:6b:4f:bc:ec:b2:6d:04:db:5c:29:
ba:66:25:99:04:0d:23:53:1d:fe:4d:86:36:c8:f8:a0:d6:87:
b1:e1:55:21:05:39:e0:d8:db:fd:5d:c4:af:11:45:23:c0:e3:
47:37:69:f1:26:84:f7:88:ca:3c:3c:a7:a8:14:f5:53:53:c3:
3e:67:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org