Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/D-QiDZ9E0Fr75SaJnyzf9sGK878.roa
File: D-QiDZ9E0Fr75SaJnyzf9sGK878.roa (raw, json)
Hash identifier: Scgy1VDlCGEDrd6R4GCQ5VgDLlbLgz6x17AqUlPDN3E=
Subject key identifier: 0F:E4:22:0D:9F:44:D0:5A:FB:E5:26:89:9F:2C:DF:F6:C1:8A:F3:BF
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 027E0DED
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/D-QiDZ9E0Fr75SaJnyzf9sGK878.roa
Signing time: Mon 31 Jan 2022 10:33:39 +0000
ROA not before: Mon 31 Jan 2022 10:33:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.115.212.0/24 maxlen: 24
194.115.212.0/22 maxlen: 22
194.115.213.0/24 maxlen: 24
194.115.215.0/24 maxlen: 24
194.115.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41815533 (0x27e0ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Jan 31 10:33:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fe4220d9f44d05afbe526899f2cdff6c18af3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:b4:9a:60:d1:f6:de:9e:04:d6:4a:7e:85:
c8:66:48:f8:be:28:ec:04:ef:bb:4f:69:98:64:a1:
9c:e8:58:64:c0:f4:de:21:24:25:1f:4a:af:d1:1d:
2c:ef:1e:c1:39:c1:f4:e7:2b:ee:8f:03:37:f0:01:
4c:ef:ee:3d:67:54:cb:96:9d:ce:b7:fd:42:8d:7d:
84:f5:4b:ce:82:9d:d1:5f:9d:3b:e0:2f:57:ef:8a:
4f:77:85:a6:e3:35:67:c3:aa:d6:c2:33:31:1b:1f:
39:ac:4c:77:2b:a5:cb:41:d8:9c:7a:12:d2:ec:62:
69:57:e4:d7:38:67:0b:20:fa:37:d8:f9:66:00:01:
f8:ff:db:d8:53:a7:40:80:e5:ad:7f:44:fe:4d:88:
a5:9f:7e:98:d8:bb:ec:27:86:c8:ea:82:f6:e8:10:
83:b3:cf:f9:8b:6d:ee:af:4a:36:db:5a:00:12:d3:
7d:a9:6e:22:c9:10:49:af:5c:6f:72:db:c1:87:57:
8e:da:be:4f:94:11:d7:cd:6f:89:08:a4:79:e7:25:
21:ea:4a:dc:3e:33:3a:c4:fe:ea:ab:73:94:f8:0c:
95:aa:e2:17:cd:62:5d:eb:bd:eb:4b:3e:d7:b2:54:
84:4e:8a:de:0d:63:e5:fd:cb:a4:ac:b3:d7:62:5a:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:22:0D:9F:44:D0:5A:FB:E5:26:89:9F:2C:DF:F6:C1:8A:F3:BF
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/D-QiDZ9E0Fr75SaJnyzf9sGK878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:19:42:9d:44:98:a8:2a:b7:23:af:08:4f:b1:dd:43:bd:57:
72:f3:42:a6:09:ad:c4:e4:48:86:52:d7:e2:59:84:a1:de:03:
4d:5b:df:61:87:8c:6f:b2:80:42:db:04:4f:82:f3:a1:e8:ff:
d7:ae:20:a7:3b:83:5a:84:c0:e8:36:cd:15:f7:90:23:31:f7:
74:24:31:c6:79:81:ae:d5:e6:c8:dc:a1:7e:1e:db:ad:c4:09:
9b:8a:50:1f:72:ab:68:44:11:88:8b:66:48:ec:56:3c:ae:5a:
25:50:53:6d:f5:52:38:8f:de:41:46:fa:e7:cf:7f:ca:f3:23:
28:cb:8a:72:6c:80:b6:b0:02:d2:82:f7:ea:bc:c4:f6:4c:41:
29:72:e1:32:ae:4f:c6:03:e7:6d:55:35:49:52:cc:22:ad:7c:
46:ed:e4:5e:2b:e6:c5:3b:ae:17:f7:01:42:62:b0:e7:32:58:
ef:d3:fd:51:79:f5:d2:1a:1f:18:f9:67:70:7e:3a:80:c1:d3:
87:2c:5c:6d:32:3f:fd:1c:cc:02:ae:6c:52:9f:59:46:28:f4:
87:e5:c9:56:5a:0f:63:86:e7:b1:cb:60:0e:b3:e1:9d:83:c3:
68:eb:72:dd:d9:d0:8a:de:03:ee:10:59:75:9c:0c:67:b0:bf:
fb:c4:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:56 2024 by rpki-client on console-ams.rpki-client.org