Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/1-qWVuywQ8RVDWhTGt7UBL2_WJss.roa
File: 1-qWVuywQ8RVDWhTGt7UBL2_WJss.roa (raw, json)
Hash identifier: xAz0NMqh+OdjiSlvyg7ouXjo2SOBqWq4EXG18Xh3dPY=
Subject key identifier: FA:A5:95:BB:2C:10:F1:15:43:5A:14:C6:B7:B5:01:2F:6F:D6:26:CB
Certificate issuer: /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial: 0674F056
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/1-qWVuywQ8RVDWhTGt7UBL2_WJss.roa
Signing time: Sat 05 Mar 2022 16:32:08 +0000
ROA not before: Sat 05 Mar 2022 16:32:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207727
IP address blocks: 194.165.35.0/24 maxlen: 24
194.165.38.0/24 maxlen: 24
194.165.58.0/24 maxlen: 24
194.165.56.0/24 maxlen: 24
2a10:2a80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108326998 (0x674f056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
Validity
Not Before: Mar 5 16:32:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faa595bb2c10f115435a14c6b7b5012f6fd626cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:95:89:1c:c4:89:8a:4d:8a:7d:04:26:f3:
6a:6d:9c:e1:55:18:f4:26:27:f5:0f:f8:38:c2:d3:
e2:ce:96:65:1d:9f:9a:c4:db:51:11:1d:ea:de:4f:
38:5f:76:73:e8:62:db:e6:6f:f9:cc:58:6f:8f:74:
35:95:2b:da:b9:a6:a3:0a:d4:1c:ab:3b:af:2e:d1:
bd:f9:e3:95:42:06:82:c6:7b:8d:6b:a6:6d:84:48:
26:f2:ae:82:8f:00:9c:63:dc:11:40:04:9e:55:c1:
38:e6:17:06:1c:5f:81:8b:99:35:39:fe:2e:61:eb:
b7:e2:73:e6:67:53:20:a7:83:7f:e4:c6:27:d8:f5:
51:3a:b4:6f:1c:96:7b:d2:84:29:04:e7:dd:28:fa:
18:23:5a:68:f0:0a:33:02:4d:ed:8f:42:ff:95:90:
0f:48:61:0f:d9:d9:70:81:7e:44:f3:4a:e2:a0:a5:
8c:0c:23:d7:b8:14:d4:09:b8:96:12:db:c5:8d:38:
6c:45:6d:90:e3:51:e2:69:31:4c:89:11:13:4a:bd:
e4:28:92:8d:e6:a9:88:10:d5:fc:7b:55:2f:13:03:
c4:96:c9:c2:e6:51:ed:a1:4c:1e:43:c7:87:0d:1b:
39:54:59:ab:73:6e:79:35:f3:52:b5:e6:db:a3:b2:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:95:BB:2C:10:F1:15:43:5A:14:C6:B7:B5:01:2F:6F:D6:26:CB
X509v3 Authority Key Identifier:
keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/1-qWVuywQ8RVDWhTGt7UBL2_WJss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.35.0/24
194.165.38.0/24
194.165.56.0/24
194.165.58.0/24
IPv6:
2a10:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
1d:02:65:02:53:a8:fc:87:6f:3c:e4:32:cf:eb:55:c3:21:08:
b4:39:d0:e2:9a:7e:89:88:98:98:99:82:6a:88:e4:b3:f6:15:
b4:dc:5c:aa:a0:74:a3:42:1c:ee:be:f1:60:d7:fd:f7:64:ec:
06:17:62:27:dd:d7:6b:bc:48:ec:e7:57:07:3f:64:bb:1f:9f:
87:fc:d4:26:84:d1:c3:b8:6c:61:17:52:5c:dc:6c:34:47:64:
a7:2e:cf:2e:fc:07:c4:68:f1:85:b7:5c:84:c1:e1:d6:40:d8:
f7:26:58:df:b5:6a:9e:22:a4:dd:df:fb:b5:bc:f4:85:d7:f6:
de:bc:fe:9a:3a:2d:54:c1:89:f6:3d:a3:2b:bd:fb:c7:7b:cf:
80:98:c4:01:7d:9a:85:2d:1a:54:a1:d5:bf:a0:32:36:29:09:
d9:30:ae:11:a8:a4:41:05:a2:8c:6f:cc:8d:76:2c:9e:cb:a8:
1f:cd:f9:d8:5b:28:94:86:36:b2:d7:45:51:79:d4:0b:1c:7a:
6c:03:be:00:35:99:32:53:24:e4:0e:97:c9:12:e8:ff:ac:1c:
37:32:4d:7e:4f:4d:ce:e0:01:f1:13:e6:8c:fe:2c:5e:79:03:
20:59:dc:5b:ab:80:4f:35:68:6e:5d:d6:fd:05:2e:8d:84:a6:
5d:3b:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:40 2024 by rpki-client on console-ams.rpki-client.org