Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/bH4sgfyORyFrTnUIn7AwSBeqptU.roa
File: bH4sgfyORyFrTnUIn7AwSBeqptU.roa (raw, json)
Hash identifier: xvDN1MuINbDyo7BhlpQEJdlriENXj2DR0EJEu3XqNHc=
Subject key identifier: 6C:7E:2C:81:FC:8E:47:21:6B:4E:75:08:9F:B0:30:48:17:AA:A6:D5
Certificate issuer: /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial: 0157A166
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/bH4sgfyORyFrTnUIn7AwSBeqptU.roa
Signing time: Tue 14 Jun 2022 10:56:44 +0000
ROA not before: Tue 14 Jun 2022 10:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207655
IP address blocks: 194.36.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22520166 (0x157a166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Validity
Not Before: Jun 14 10:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c7e2c81fc8e47216b4e75089fb0304817aaa6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:ba:9b:8d:f2:09:55:43:4a:14:c9:a8:8c:
20:f2:5c:d2:46:11:4d:c4:fe:45:c9:b0:13:27:11:
0b:e2:23:ca:df:db:64:e7:ae:21:8a:06:69:98:fc:
0a:6b:33:ca:ae:6d:1c:15:5c:fa:2e:5f:d1:41:ec:
cd:81:6f:16:db:d6:72:fd:e8:a1:7a:68:b2:ec:c2:
eb:8f:3e:26:d8:eb:7a:aa:57:d2:d8:b9:0c:56:d8:
8f:8f:f2:06:3b:6f:47:fe:2c:f5:20:16:d5:10:9c:
4a:01:38:42:10:5e:26:bd:7f:0c:ba:f4:a8:a8:b7:
2d:38:ff:c1:81:90:1c:4d:93:f7:28:ba:ea:96:a0:
c8:27:a5:ba:71:13:f9:e2:9b:40:8b:67:dd:d0:a2:
10:3e:a3:62:ee:0d:7d:7e:cd:76:c5:e7:54:d1:de:
c0:ed:74:ba:25:32:bd:dd:01:1f:a4:4c:f5:ce:c0:
21:f1:25:12:a3:e2:fa:31:03:9e:e9:ea:bf:79:e0:
7c:8b:d1:09:ae:23:8e:32:d1:49:ef:f5:fa:f3:58:
5e:ea:a4:4e:ef:e1:40:fa:88:22:c3:02:b2:3a:fa:
03:a7:e7:97:32:69:50:52:2d:f9:39:90:0c:bc:8a:
93:45:ac:11:50:ac:01:26:2b:4a:87:fb:46:ed:75:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:2C:81:FC:8E:47:21:6B:4E:75:08:9F:B0:30:48:17:AA:A6:D5
X509v3 Authority Key Identifier:
keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/bH4sgfyORyFrTnUIn7AwSBeqptU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:30:40:b1:5a:b8:d9:42:37:b0:06:f7:22:93:b3:96:7e:4a:
df:ed:d9:3d:c0:5a:cf:fc:bb:27:ff:d7:96:cf:70:69:38:62:
b7:d9:74:2f:30:1d:33:b9:6f:06:0f:61:fe:ed:3e:49:b8:d1:
25:40:43:ff:6c:a6:f8:71:c5:c4:0d:8b:27:8b:c9:6e:a5:72:
b7:8e:19:7f:ac:6a:7f:c8:ea:4b:8a:1e:1a:9c:e1:62:c5:10:
36:f7:87:2f:16:49:32:55:c2:6c:ba:8e:76:9f:d7:68:cb:96:
85:fe:a5:d4:04:a5:6f:41:5b:35:50:e9:2c:2e:26:30:e9:a0:
41:c5:bd:ea:1b:c2:60:f2:9a:7e:21:89:c2:e6:e7:bd:0c:cd:
3b:bd:3a:3d:78:d0:2c:96:8a:9f:82:13:46:7a:1e:ea:7e:c9:
b0:c5:4b:5e:7c:c1:2f:fa:a7:4f:59:94:75:5b:29:85:b7:e9:
b7:14:ba:b5:2f:ba:04:3a:18:64:5b:d3:4f:35:22:df:1c:79:
0b:55:78:21:f5:d2:c8:50:4b:33:25:75:14:b8:8a:e2:bc:79:
14:eb:9b:2c:bb:a0:0e:a3:85:68:37:2b:6c:20:3a:05:a7:0e:
f1:53:e4:c9:cf:83:b0:46:47:5a:13:45:32:f7:c3:8a:ea:23:
51:d7:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:55 2023 by rpki-client on console-ams.rpki-client.org