Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/ddkhBm-X9aPXcO4k6ISDw0DGFzo.roa
File: ddkhBm-X9aPXcO4k6ISDw0DGFzo.roa (raw, json)
Hash identifier: h81Ms2PluyUD+zdVCbk17yEAn7YWbqWkGU6IpGnmEMc=
Subject key identifier: 75:D9:21:06:6F:97:F5:A3:D7:70:EE:24:E8:84:83:C3:40:C6:17:3A
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 09249E62
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/ddkhBm-X9aPXcO4k6ISDw0DGFzo.roa
Signing time: Sat 01 Jan 2022 06:54:05 +0000
ROA not before: Sat 01 Jan 2022 06:54:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24956
IP address blocks: 194.120.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153394786 (0x9249e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Jan 1 06:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75d921066f97f5a3d770ee24e88483c340c6173a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:6e:76:e0:07:9d:a8:d2:fd:f2:41:70:cb:
42:02:5b:23:d5:ad:1d:63:c3:cd:b2:8f:7c:80:69:
b3:8e:46:26:66:59:05:03:2f:18:bf:92:a9:79:80:
c6:06:0e:30:5e:f8:62:e6:32:36:28:39:ee:ca:99:
9a:f3:3d:35:be:85:7c:13:51:0b:2e:94:47:8b:ca:
9f:45:29:d3:b1:f6:0d:35:b0:26:12:46:e0:9c:ff:
b1:7b:96:ca:b9:94:17:b4:ea:c3:e3:b9:19:c5:9e:
4c:e6:49:3c:14:ba:58:4e:b0:f7:23:af:97:81:d7:
9a:e0:26:35:81:2f:e6:e7:98:a0:b1:a7:33:4f:8d:
f2:fb:5b:da:9a:03:89:34:ad:06:5f:42:24:70:69:
1e:23:6c:9f:df:0e:d4:ea:05:cb:43:d9:e4:03:74:
a0:84:0e:ec:2c:15:0d:7b:cd:b8:d7:59:a3:29:48:
1b:bd:80:8a:c9:36:6a:68:85:46:47:fa:c8:36:d4:
52:c7:a4:7d:31:71:44:21:b3:7b:4e:6b:53:8c:47:
d6:1a:bf:15:89:f7:48:c9:d0:b5:ac:bf:c9:c2:83:
e3:49:dc:99:54:e7:07:17:6c:74:78:f1:45:66:6b:
c2:69:3c:89:83:8b:66:66:32:24:7a:be:96:ae:77:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D9:21:06:6F:97:F5:A3:D7:70:EE:24:E8:84:83:C3:40:C6:17:3A
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/ddkhBm-X9aPXcO4k6ISDw0DGFzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.234.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d3:18:a7:fc:25:08:8b:8e:c7:55:bc:17:bb:4e:9f:0b:e9:
e8:8b:a6:cc:b2:58:b9:af:04:70:68:48:e3:f8:5b:6b:0a:8e:
fe:cf:2e:ce:a2:5a:af:b4:e3:86:e1:ad:cb:d6:59:49:0b:50:
a2:0e:16:d7:87:52:e3:d4:70:59:5c:7c:7b:d1:e2:fe:b8:47:
9f:c6:5e:cd:04:24:94:fa:5c:53:1f:6d:7e:e5:e5:81:6e:a2:
36:5e:25:e5:ca:90:e0:67:93:f8:f9:ab:56:d3:6c:3b:5e:5d:
7b:b1:48:6f:a9:a2:cb:50:8e:32:37:76:a9:39:8e:22:b4:7c:
3a:43:f2:1e:95:bc:76:9d:fb:cb:10:ba:f4:f1:c4:46:17:9e:
5b:94:f5:be:4f:44:c4:58:6f:df:4b:3b:94:f9:ac:ff:17:e2:
11:27:ca:ab:a1:69:ed:71:51:93:65:18:48:f7:db:8b:90:a2:
1e:db:53:b2:67:49:7f:b9:47:99:32:b1:eb:c5:88:2d:55:11:
2b:18:92:11:5b:ab:d6:08:09:9c:47:e6:0a:a8:b8:98:9b:02:
e4:be:47:29:fc:ea:c3:ee:b9:e7:94:e1:b9:a9:a2:f3:77:fd:
44:0c:4d:54:28:ac:94:15:b2:d9:41:d4:52:6e:76:09:d9:1b:
da:71:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:50 2024 by rpki-client on console-fra.rpki-client.org