Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/2n_J5gXSXAG6Q2anjOFH2c28Jcg.roa
File: 2n_J5gXSXAG6Q2anjOFH2c28Jcg.roa (raw, json)
Hash identifier: MnMGnZAmh8znxjibY6R645+niqQ1NAXT/kbcfu6Xaxg=
Subject key identifier: DA:7F:C9:E6:05:D2:5C:01:BA:43:66:A7:8C:E1:47:D9:CD:BC:25:C8
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CEC8EC7
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/2n_J5gXSXAG6Q2anjOFH2c28Jcg.roa
Signing time: Tue 19 Apr 2022 13:44:46 +0000
ROA not before: Tue 19 Apr 2022 13:44:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 194.195.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216829639 (0xcec8ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 19 13:44:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da7fc9e605d25c01ba4366a78ce147d9cdbc25c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:82:b1:8b:ca:b7:68:41:e8:89:74:e3:e3:58:
97:95:c8:5f:78:0d:0e:4e:bb:69:f6:fd:d3:1f:ce:
f0:db:6f:69:34:91:de:3e:6f:b5:8a:52:c0:60:4f:
d6:b4:f6:72:a2:be:76:46:83:30:bc:5f:fd:7a:2f:
5e:a0:1d:d2:f2:0e:6b:2a:60:e8:83:1a:1d:6d:e5:
a9:03:dc:bb:6d:9d:3f:f4:87:73:01:0c:76:39:64:
30:4e:b9:40:ed:ea:dc:4c:d7:60:d4:85:29:38:91:
ad:8c:cb:10:b9:dd:89:27:a4:da:f2:59:d2:a6:2d:
a3:24:42:4a:8e:d7:ff:72:9d:93:d2:54:45:d3:cf:
09:e0:2f:63:a5:19:61:3c:1a:5a:1a:8c:f3:07:76:
6e:a6:39:3f:f5:db:6a:e7:c8:f7:53:3e:07:0a:1d:
ea:5b:d3:8b:bf:cf:40:c4:ca:11:5f:9f:30:28:1f:
7d:d9:d5:7f:d6:f2:b2:6f:21:65:75:37:fe:60:5c:
78:d3:77:9d:ae:18:a7:82:c7:bc:a6:81:4e:86:6d:
50:6b:20:22:4d:5d:f7:e0:e4:e0:db:07:86:76:01:
f9:f0:07:ce:1d:ea:f2:d9:8f:0f:0b:d8:d4:37:ff:
a2:4e:0c:82:63:b0:27:1e:c5:e6:cd:84:ff:e4:f8:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:C9:E6:05:D2:5C:01:BA:43:66:A7:8C:E1:47:D9:CD:BC:25:C8
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/2n_J5gXSXAG6Q2anjOFH2c28Jcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.101.0/24
Signature Algorithm: sha256WithRSAEncryption
00:59:11:0a:6a:52:12:10:89:33:f3:70:bd:26:7d:6c:70:83:
3f:75:4f:cf:1d:53:0b:5e:e2:7f:65:82:57:ca:75:9c:2b:c0:
8f:40:88:d4:6e:b3:51:6e:ef:14:f1:3c:80:77:a9:86:2a:56:
2c:c6:8f:eb:45:33:f8:eb:cc:6b:3e:37:87:16:f2:ec:72:ac:
c7:99:38:87:9c:f2:d5:a9:ea:d5:23:c8:f6:c1:4c:db:09:86:
80:1a:85:30:50:6f:41:b4:f7:b1:e3:9f:17:ad:c0:1f:19:e0:
85:bd:9b:7a:78:78:8c:33:df:ad:26:06:a0:03:43:ae:fa:3a:
91:d7:8d:1f:70:55:b8:21:4d:26:99:ce:5e:62:1a:78:ff:b4:
ed:90:19:82:1a:75:ec:af:c1:15:a4:57:02:bf:d0:81:bf:70:
69:9a:81:42:70:26:46:54:22:61:1e:e0:46:5a:57:10:60:78:
64:92:27:cd:b8:33:1d:15:34:50:e8:7e:a8:c9:e3:98:2c:5c:
a3:88:6a:df:eb:11:96:2d:a0:f3:45:a6:38:a1:47:68:02:c3:
be:55:ce:3b:42:12:78:dc:c1:fe:07:dd:2f:05:3e:3a:b4:04:
7e:94:5f:72:2b:94:b2:4d:90:23:b4:ab:6b:48:50:5c:44:d3:
25:76:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org