Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rsoVkGZSs8ISIq-SiM45JoACk7I.roa
File: rsoVkGZSs8ISIq-SiM45JoACk7I.roa (raw, json)
Hash identifier: t9znJqOcjVmVvVWBHh1NB+ZneUVvUnNWLm26bZ8y26Y=
Subject key identifier: AE:CA:15:90:66:52:B3:C2:12:22:AF:92:88:CE:39:26:80:02:93:B2
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09ED463E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rsoVkGZSs8ISIq-SiM45JoACk7I.roa
Signing time: Thu 10 Mar 2022 21:45:41 +0000
ROA not before: Thu 10 Mar 2022 21:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46664
IP address blocks: 194.31.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166544958 (0x9ed463e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 10 21:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeca15906652b3c21222af9288ce3926800293b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:cb:67:0d:3b:c3:36:da:19:17:b8:50:0f:
39:aa:0b:3f:2d:3b:d2:5a:70:a4:57:1e:8d:4f:78:
22:e9:9c:ec:66:c1:ec:ca:b3:d2:3f:8b:9f:19:e9:
cc:bc:cf:93:7a:a0:d4:3e:03:40:f9:e5:34:ab:d3:
c8:1f:af:0d:59:fe:36:c5:50:de:00:3c:b9:ac:1b:
40:6c:82:c7:ce:d5:9e:a4:86:a2:6f:56:15:a2:03:
2b:63:e9:76:96:95:5f:85:61:b5:d0:7f:42:85:1d:
9d:80:c7:5b:67:ec:f4:c0:c2:25:fc:53:b1:f1:ac:
9a:99:74:b0:50:b0:fd:22:86:1f:1f:71:21:ec:ce:
b4:cd:27:ad:37:81:e9:e7:b3:19:57:bc:34:47:5e:
68:d7:7a:84:b4:c0:78:4d:ca:bd:a5:d2:be:c7:2a:
e8:b3:cf:5c:76:cd:c4:f6:29:3a:a8:2f:c8:32:04:
bb:64:6e:11:5d:ba:61:f0:31:3a:7a:de:8f:1e:b9:
ce:14:91:89:8a:2e:39:b5:31:63:b6:59:c1:d1:81:
08:33:cd:2b:1b:a7:9e:3a:5c:b3:d9:24:fd:f7:97:
d9:6a:51:4c:e0:85:5a:52:8c:8a:d4:c3:e3:7e:ad:
30:1b:c7:0f:9e:17:5c:4b:42:a4:c0:0a:3b:fb:aa:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CA:15:90:66:52:B3:C2:12:22:AF:92:88:CE:39:26:80:02:93:B2
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rsoVkGZSs8ISIq-SiM45JoACk7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f4:5c:76:d6:45:06:c9:58:d3:b9:c5:1e:0b:dc:48:00:97:
c3:3a:ec:00:0f:37:a8:90:15:15:4d:00:a0:12:9a:b7:80:12:
8d:e6:2a:4e:05:db:12:72:7f:cc:d9:95:fa:dc:13:6f:7e:9e:
d3:d5:99:20:d8:2f:f1:85:dc:d7:75:ae:8a:ff:bc:b7:6e:82:
67:69:b9:e1:b1:91:23:17:00:6a:a5:f6:07:92:79:54:07:e7:
5c:64:09:fa:02:46:db:a4:73:f5:5d:bb:98:5d:70:d3:be:02:
7e:80:64:d9:e1:a8:57:c5:95:70:5b:28:91:fd:ba:e8:5d:f6:
32:97:96:62:3e:09:c3:10:43:b9:9d:ed:bd:9b:94:cc:0a:e1:
da:26:ba:28:5e:16:ab:d3:4c:54:c4:d1:44:8a:23:f3:52:f3:
f0:ff:fd:2d:6f:aa:6c:fc:8e:a8:8c:74:89:ea:36:de:41:21:
5d:08:49:e6:bf:a3:a7:df:ac:6a:b6:d1:ee:1b:0f:9c:0c:de:
97:1d:ef:a4:8d:b0:94:aa:6c:47:c6:f8:a4:81:b7:e7:6b:e5:
dd:8f:50:75:98:0a:18:ee:af:95:8d:0d:94:93:ba:42:84:b2:
10:8e:77:c3:16:ef:b6:a8:5b:19:80:bf:5c:df:be:89:07:91:
93:93:b0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org