Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/s05uqMU6P3RbLlXT54GmR209kCg.roa
File: s05uqMU6P3RbLlXT54GmR209kCg.roa (raw, json)
Hash identifier: 7FNGecSY9OCZahzpxR8dR5Pej5LGYZzwvXytjvwGA9E=
Subject key identifier: B3:4E:6E:A8:C5:3A:3F:74:5B:2E:55:D3:E7:81:A6:47:6D:3D:90:28
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 2448
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/s05uqMU6P3RbLlXT54GmR209kCg.roa
Signing time: Sat 22 Jan 2022 21:44:40 +0000
ROA not before: Sat 22 Jan 2022 21:44:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1764
IP address blocks: 195.242.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9288 (0x2448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jan 22 21:44:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b34e6ea8c53a3f745b2e55d3e781a6476d3d9028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:5c:0c:a6:e8:32:fb:de:74:6d:7e:6a:35:
c0:7d:06:1c:76:12:70:e3:e8:b2:b8:ac:5a:cd:8e:
c4:fa:34:7e:4f:fa:5f:03:fa:71:e1:aa:2a:4b:ea:
2b:84:c0:94:94:85:81:60:c4:9e:ff:87:f6:47:fe:
50:cd:04:a3:62:bd:df:c2:f4:2d:f1:ef:5f:49:30:
08:b0:68:a3:81:fe:cf:d2:e0:22:57:8b:f0:8d:48:
f7:28:cf:82:cb:de:78:42:13:5e:68:15:f7:80:ce:
42:a1:57:fd:c6:91:a0:df:e4:87:15:f6:3e:c8:54:
6d:a5:57:54:9b:5b:ff:b5:dd:91:ee:fb:21:ac:a3:
c4:b5:ad:57:ca:a1:7f:25:89:09:4f:b5:70:53:e1:
a8:fc:68:5c:16:41:b1:71:4e:70:0b:60:e8:2c:47:
70:2c:e6:d8:03:56:7a:00:57:45:a1:0e:cc:4e:93:
65:a3:56:e3:b7:74:ba:11:2d:8c:1d:6b:34:36:da:
e3:df:c2:51:0e:f8:53:65:0a:fe:70:04:7f:c8:df:
8e:ad:9a:03:ab:7d:b5:28:81:f4:3d:9e:91:5d:21:
b5:3c:e7:60:65:af:04:a2:44:7f:63:b2:40:ff:1e:
7b:74:be:c6:72:26:14:2b:73:b5:b5:11:a5:d1:ab:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:6E:A8:C5:3A:3F:74:5B:2E:55:D3:E7:81:A6:47:6D:3D:90:28
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/s05uqMU6P3RbLlXT54GmR209kCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
38:12:d1:82:1b:11:1a:99:97:d0:e7:a3:c9:14:a1:18:7f:ab:
a4:38:a6:34:ea:cd:46:c3:a8:a8:99:20:7d:51:50:67:de:b7:
25:64:d6:23:78:54:82:f0:d5:9f:56:fd:3b:af:7b:7d:4a:66:
e9:f2:1e:a7:68:18:69:16:e0:55:68:b4:f9:ef:00:b0:2f:17:
68:bd:da:d1:1e:27:48:94:18:9d:83:87:2e:a2:80:f9:cb:1a:
d5:7c:56:06:10:5d:63:8a:90:fb:43:c1:bd:94:24:93:f3:26:
8a:29:d2:2e:ac:5a:47:43:2e:5d:28:a5:7d:8d:9e:37:76:ad:
93:d9:a8:51:00:91:6d:ce:45:8f:40:32:1d:06:1b:6a:54:9d:
62:56:a2:4a:99:0f:1a:27:cf:af:31:2b:b2:75:4d:2a:4c:f9:
95:47:bf:94:c0:f5:d5:1e:c6:fc:4e:22:1d:73:fa:8e:d0:3c:
92:ed:66:51:5d:76:5f:2e:ee:51:bc:97:aa:ee:35:64:51:cb:
69:82:90:02:5c:e9:9e:2e:36:c0:d1:b8:31:3c:6f:77:a1:6d:
e2:84:28:c8:26:8d:7a:68:a6:33:e1:3f:b4:83:9b:14:21:89:
84:04:ac:73:93:9d:b4:b2:80:6b:59:91:d9:af:db:d0:cf:55:
88:8a:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:41 2024 by rpki-client on console-ams.rpki-client.org