Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/S1CyLMzNmn_Ebg1Q6dagPEun_T0.roa
File: S1CyLMzNmn_Ebg1Q6dagPEun_T0.roa (raw, json)
Hash identifier: kmbnNc5B30/RAS+8XkE4fDDj752jUI6wAPv8FuMZZX8=
Subject key identifier: 4B:50:B2:2C:CC:CD:9A:7F:C4:6E:0D:50:E9:D6:A0:3C:4B:A7:FD:3D
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 08EEA5E1
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/S1CyLMzNmn_Ebg1Q6dagPEun_T0.roa
Signing time: Sat 01 Jan 2022 11:59:41 +0000
ROA not before: Sat 01 Jan 2022 11:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 194.53.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149857761 (0x8eea5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 1 11:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b50b22ccccd9a7fc46e0d50e9d6a03c4ba7fd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:d5:d1:c9:0d:64:24:f2:c8:c7:9d:4d:c5:
8e:9b:af:1d:f2:e2:c8:6e:fc:0a:d1:ad:00:fe:40:
cd:34:51:c5:6f:6f:a7:64:9d:bf:bb:2b:25:8f:b3:
2a:a8:01:14:45:f6:31:ba:df:77:9c:54:03:83:9c:
3a:f6:e3:7f:2d:1d:3b:d5:ca:bf:72:18:53:92:21:
6a:db:89:8c:bd:16:73:02:40:3c:88:94:d3:80:0e:
93:55:e0:ad:87:e9:9b:ee:8e:c1:cc:cc:f7:a5:4d:
5a:2e:bd:27:73:f5:7f:b2:84:ca:33:81:25:18:a9:
bd:9c:7e:c3:e5:99:06:47:49:ff:94:7f:ac:0b:17:
71:f6:dc:3d:7b:56:b0:73:17:ba:73:f1:05:64:6f:
2b:b9:15:c1:1f:8d:28:77:bc:1e:e0:8d:17:40:e4:
29:a5:2b:0d:c0:d9:93:b5:1f:da:ef:6b:50:aa:a8:
35:34:d6:0c:96:13:db:30:34:ae:e1:f9:46:a0:b6:
3e:4d:bf:a5:f7:c2:71:d0:13:1a:82:53:46:b5:32:
82:e7:41:67:15:72:c3:48:70:53:87:67:0f:d2:27:
d1:85:b2:39:55:ac:da:4e:39:35:01:23:5a:61:75:
8e:2a:cc:12:96:52:ea:fb:ca:4e:c8:17:e3:19:4a:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:B2:2C:CC:CD:9A:7F:C4:6E:0D:50:E9:D6:A0:3C:4B:A7:FD:3D
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/S1CyLMzNmn_Ebg1Q6dagPEun_T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.200.0/24
Signature Algorithm: sha256WithRSAEncryption
82:90:32:5a:69:32:8c:11:ec:1f:a1:51:40:7d:2a:86:9e:84:
83:42:2d:8f:12:46:c3:ce:16:70:91:fa:fb:35:bd:1d:b7:71:
c8:4a:bb:43:be:26:bc:22:f6:0a:72:46:87:f8:a2:8f:d7:79:
c9:5c:5b:22:86:9b:fe:a4:20:7f:78:33:35:67:26:51:b1:f2:
f4:ad:b3:54:55:87:e4:9b:5f:57:84:c9:3a:47:fa:71:b0:d2:
be:76:40:41:77:f1:24:7c:31:6e:b9:3b:6f:1c:ca:ab:6f:77:
c3:1c:7f:b9:6a:af:b3:c6:86:68:ef:a9:08:b3:e1:23:d0:65:
a0:30:4b:12:31:4a:f6:09:1b:fb:0c:e0:a9:f2:10:3d:c7:a2:
d9:1e:ed:35:46:3a:64:2b:fa:ba:3d:3c:a3:c9:7d:c3:72:90:
1c:9c:94:5d:af:eb:97:4b:dd:f7:ee:8e:60:79:79:be:d5:f2:
3c:15:e7:4d:77:e1:28:56:db:a3:35:02:24:03:61:ff:2a:18:
ca:f9:46:69:dd:d8:a9:0f:33:7b:c6:db:8f:fb:34:9a:c3:d6:
b9:97:cf:65:cc:a0:1f:13:1a:3b:79:9c:28:d9:c8:3d:3c:7d:
94:75:b7:75:fa:14:46:31:2b:90:f9:60:04:9c:8e:cd:bc:8b:
4e:ca:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org