Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/IiM1QRfjLUe2iVUgS-Kxbekg0k4.roa
File: IiM1QRfjLUe2iVUgS-Kxbekg0k4.roa (raw, json)
Hash identifier: QI+ttRYkUJOjYlnhDIEekkwitAJnKRpjnnExic/YuxU=
Subject key identifier: 22:23:35:41:17:E3:2D:47:B6:89:55:20:4B:E2:B1:6D:E9:20:D2:4E
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 1AB18F1A
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/IiM1QRfjLUe2iVUgS-Kxbekg0k4.roa
Signing time: Sat 01 Jan 2022 15:59:07 +0000
ROA not before: Sat 01 Jan 2022 15:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48053
IP address blocks: 194.0.4.0/24 maxlen: 24
2001:678:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447844122 (0x1ab18f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jan 1 15:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2223354117e32d47b68955204be2b16de920d24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:ae:f3:3f:94:62:cf:42:32:68:3f:af:9c:
eb:57:82:f3:a9:6e:54:c9:ed:c8:a0:a2:7e:e2:f5:
fe:90:e6:9c:c1:fe:d6:e9:db:d2:66:24:8c:27:69:
91:52:94:6f:62:4e:0b:9d:3e:6c:1d:77:e7:4d:52:
71:d4:6e:c6:24:20:13:f7:4b:8c:a5:89:fe:84:6b:
91:1a:98:33:ae:47:d2:c4:b8:99:c9:a2:1b:78:45:
cb:08:a7:6e:16:96:68:23:76:85:a6:c0:26:e4:cd:
4c:2a:b0:21:b2:2a:f5:ba:05:24:3d:3d:f4:fe:b2:
2e:33:c4:22:11:e7:93:0b:3b:a6:57:40:2e:d7:01:
bf:a6:57:e1:58:98:50:b5:0e:7a:2d:02:c6:b6:95:
6f:08:ac:66:35:00:51:b6:fa:06:1a:a8:fd:93:d2:
28:2b:78:0f:61:be:85:5a:6f:58:86:56:ee:33:ba:
bc:b4:50:fc:d2:a9:d6:b7:71:b0:cd:b9:77:45:16:
e5:65:de:8e:b3:5d:93:ef:d3:df:44:67:16:77:cd:
4e:6f:4f:0c:9d:ac:46:3b:7b:9f:93:0e:5a:91:cc:
52:24:f9:21:37:01:28:d2:8e:28:b3:7f:ba:2f:41:
44:44:6c:13:48:a0:ee:45:65:57:cd:76:3e:92:56:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:23:35:41:17:E3:2D:47:B6:89:55:20:4B:E2:B1:6D:E9:20:D2:4E
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/IiM1QRfjLUe2iVUgS-Kxbekg0k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.4.0/24
IPv6:
2001:678:7::/48
Signature Algorithm: sha256WithRSAEncryption
73:c8:7b:e5:c1:8f:9a:5f:a5:00:89:01:f8:91:68:81:50:f0:
cb:bb:46:ab:5f:7e:f6:88:3c:1c:51:11:40:b2:65:5d:a5:b6:
d2:be:53:45:c2:3b:f2:c0:2d:e4:0d:47:6a:d5:20:59:31:94:
cf:c4:a8:db:2a:21:c4:5b:82:59:79:ed:ad:14:ef:bb:57:47:
95:e1:03:fa:f0:52:28:e6:fa:27:5d:74:eb:5a:83:b8:34:d7:
04:c8:62:4c:e6:6d:1e:8d:59:42:40:8c:69:d4:c6:4d:7c:bb:
12:d8:d2:dc:3f:72:1e:35:ce:6d:53:88:1a:82:a5:7b:35:37:
f2:4e:9b:4b:15:a2:45:90:d7:05:58:48:39:c7:40:db:91:00:
1c:06:71:62:51:c4:97:c6:66:f4:32:30:32:f6:ae:66:aa:73:
77:25:84:05:45:cc:f7:42:db:a1:04:10:81:e4:79:cb:0d:a2:
1a:33:5f:93:76:18:05:a7:1b:2e:0f:eb:24:cd:59:d9:09:20:
43:e1:b0:32:80:97:5d:4c:34:ff:f2:a0:20:07:af:5b:ac:0b:
d6:ea:b3:be:02:2d:b8:00:95:44:b0:5d:97:b8:2b:e1:2c:c9:
e3:eb:93:b4:64:14:ac:18:cb:ca:65:45:ae:8b:de:00:00:2d:
fc:17:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:05 2024 by rpki-client on console-fra.rpki-client.org