Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/OKPjmJwSTzdiW5LLU2ijfaUJE5c.roa
File: OKPjmJwSTzdiW5LLU2ijfaUJE5c.roa (raw, json)
Hash identifier: xGmiFgxd59cVT1w87Z9kdLgPwnkodpQFna3xs5BOrIk=
Subject key identifier: 38:A3:E3:98:9C:12:4F:37:62:5B:92:CB:53:68:A3:7D:A5:09:13:97
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 1C94F262
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/OKPjmJwSTzdiW5LLU2ijfaUJE5c.roa
Signing time: Tue 17 May 2022 15:00:11 +0000
ROA not before: Tue 17 May 2022 15:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199579
IP address blocks: 82.196.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479523426 (0x1c94f262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: May 17 15:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38a3e3989c124f37625b92cb5368a37da5091397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:0a:93:f5:56:ee:0f:ba:34:ee:d3:03:95:
ff:47:69:77:b8:a9:6d:3f:b1:4e:d2:53:35:21:9a:
62:64:6f:d0:69:ad:8f:16:f7:c9:28:0c:52:4c:4b:
51:10:6c:bf:53:41:fe:01:75:ac:d8:ca:db:36:b5:
0c:29:e8:3d:8f:f3:6e:9a:7d:78:47:b9:c9:35:2d:
81:2f:ca:42:aa:bc:3b:cf:40:20:3b:da:d2:55:ca:
77:6a:c9:38:2b:55:5b:14:6f:be:f6:5d:6a:37:39:
fc:fb:b8:62:47:8d:af:85:1d:ba:a7:96:7e:27:0f:
1a:c2:2a:36:21:72:bf:63:19:ca:06:31:cc:d8:32:
b9:d3:0b:8a:63:6b:d4:78:6a:e0:08:35:a3:63:02:
27:eb:49:e4:1d:23:01:d7:23:f6:d6:75:df:b3:c4:
05:b9:29:34:74:93:42:0e:be:c2:78:73:29:47:fa:
fd:04:62:36:23:fc:df:dd:cf:60:f6:e9:3f:b1:5d:
c6:cf:66:49:bc:e7:05:75:14:66:b0:83:9a:3d:fd:
50:dd:85:8c:18:b4:bc:22:66:62:ce:b1:db:bf:e7:
a1:c7:76:0e:4e:41:c6:b1:87:35:6f:2f:fa:76:46:
1b:52:10:bd:ad:7c:ae:22:6c:17:e0:4d:82:d2:67:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:E3:98:9C:12:4F:37:62:5B:92:CB:53:68:A3:7D:A5:09:13:97
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/OKPjmJwSTzdiW5LLU2ijfaUJE5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fc:3e:1c:b5:cd:d8:3a:01:38:7b:76:3c:3d:64:b4:16:2d:
70:f8:9b:87:c6:fa:74:24:c3:83:50:66:2b:7a:42:ea:4f:ba:
35:28:17:f2:e0:a2:57:ab:0a:ce:9d:d4:58:cb:b3:3b:9c:11:
10:41:7b:f7:f3:b7:37:5e:fb:c4:5f:c1:06:9a:7f:ad:12:5f:
bf:59:0d:6c:59:50:17:4a:b9:43:f4:c2:8d:0c:57:a6:bf:1d:
cd:3d:68:43:48:0f:3c:7a:a1:f6:3a:65:87:84:07:e8:65:4b:
00:fa:b1:71:1b:df:b9:c6:2c:94:9b:70:f4:54:53:1c:35:9f:
8e:20:5b:b7:60:66:8f:88:a9:4b:79:63:e5:0e:74:e4:11:b8:
30:78:89:1d:9f:f1:04:af:51:57:ca:b0:10:9e:55:fc:90:fb:
f7:1c:21:90:54:87:99:ca:fc:43:c7:c4:fd:fc:e1:63:f8:13:
bb:9c:5b:c5:ab:4f:dc:a5:98:10:61:39:02:fb:64:34:c3:e0:
1d:6f:bf:a4:90:2e:40:33:c8:99:f3:af:e3:5e:c5:17:d3:37:
08:6f:39:2e:f8:7f:d6:9d:69:12:50:f1:a3:0c:a3:cc:ec:18:
70:c4:c5:26:a3:3d:60:e0:2d:f2:1e:15:81:23:bc:32:d7:24:
31:58:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org