Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/cRf4G07yj0oxd9wY0EtnxIztAEE.roa
File: cRf4G07yj0oxd9wY0EtnxIztAEE.roa (raw, json)
Hash identifier: FUazRkuqxwSxwJ3hahT3v+GWHEXSV+dK6Q6BK0+1gjQ=
Subject key identifier: 71:17:F8:1B:4E:F2:8F:4A:31:77:DC:18:D0:4B:67:C4:8C:ED:00:41
Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial: 1C1B
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/cRf4G07yj0oxd9wY0EtnxIztAEE.roa
Signing time: Mon 04 Jul 2022 21:59:08 +0000
ROA not before: Mon 04 Jul 2022 21:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57022
IP address blocks: 194.45.106.0/24 maxlen: 24
194.45.45.0/24 maxlen: 24
194.45.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7195 (0x1c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
Validity
Not Before: Jul 4 21:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7117f81b4ef28f4a3177dc18d04b67c48ced0041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:f1:ac:41:f1:2a:7f:ef:24:41:ec:bb:35:
b2:ee:6b:01:ac:50:69:a5:69:0e:45:0d:f7:d3:be:
f6:b6:50:a8:47:7e:e0:be:97:c3:bd:53:1a:08:b8:
ea:eb:86:50:07:a1:72:04:af:b4:d2:9b:13:23:f4:
46:b7:e6:d8:02:2c:a5:6d:10:9a:9e:0e:55:bb:07:
b6:99:72:38:07:02:5d:58:30:5d:9e:41:c8:dd:2c:
4b:27:e7:09:e9:5e:bc:c8:e9:4b:d7:f8:4a:15:27:
b9:9c:b0:d8:2e:0d:48:b3:c7:b5:a4:57:b5:9d:96:
09:6a:ca:9a:58:52:d0:3a:48:80:a3:7f:dc:bd:7a:
15:16:71:e5:76:fa:81:94:e1:1b:51:45:2e:4d:bb:
ab:54:42:e4:22:33:0a:d3:c2:c2:2d:42:35:5e:b5:
ed:fe:50:7a:aa:60:50:e4:7a:c8:29:ca:b1:56:26:
41:02:da:a6:6d:0d:2e:95:4c:5e:4f:d6:54:ec:fc:
6b:f5:f4:18:bf:69:0e:9f:78:83:b3:ff:9a:1a:9e:
ec:dd:44:7d:e8:e8:6e:96:04:c1:fb:c4:68:aa:04:
6d:df:ea:0a:05:ef:58:89:05:f6:f5:04:5a:a3:89:
f8:6a:70:57:f4:21:4d:44:4e:b7:c2:8f:e3:fe:08:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:F8:1B:4E:F2:8F:4A:31:77:DC:18:D0:4B:67:C4:8C:ED:00:41
X509v3 Authority Key Identifier:
keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/cRf4G07yj0oxd9wY0EtnxIztAEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.45.0/24
194.45.106.0/24
194.45.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:26:d8:6a:49:3f:0e:be:60:ea:ce:90:a0:87:7f:24:09:d6:
39:31:09:e4:82:ef:87:93:03:88:b8:65:f4:b7:b6:24:e9:c7:
ed:40:0c:a4:63:9d:ea:c0:4c:e9:7e:a9:b7:74:a0:7c:4f:bb:
a5:46:5e:c7:3a:cb:5d:04:ef:04:ac:cd:38:c7:67:e3:42:38:
00:8c:ac:b9:18:43:02:e7:03:41:f7:a5:85:c3:ff:a6:c1:9f:
e3:ea:25:c2:6b:d8:38:cf:15:b1:cc:a6:dd:11:aa:c4:62:dc:
d4:80:1a:df:19:05:92:4c:8f:dd:b9:5f:8b:b9:83:7b:aa:18:
dc:b5:f9:39:b5:d6:53:f1:5f:46:df:78:fb:7f:ab:2e:b0:11:
9e:e7:86:69:86:40:ee:25:90:bb:75:43:a3:7c:8d:cc:dd:82:
ee:02:29:e3:db:a3:a9:6c:9f:44:b3:1c:13:9e:08:19:06:23:
ca:61:8e:a4:af:e5:18:b1:f9:ea:a2:e7:fc:ba:4d:b4:02:c5:
a2:57:39:59:56:69:60:9c:a8:5e:06:0e:97:7b:33:3f:4b:e2:
45:80:c8:54:49:1c:bc:27:62:f9:6a:31:2e:d6:1f:54:05:c7:
02:ba:ba:fc:4d:75:0a:f0:b8:b9:6a:99:30:ef:bd:98:ee:3f:
7d:0f:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:20 2024 by rpki-client on console-ams.rpki-client.org