Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/tXjmeAsSzsAZt8P6FK7hQ1gD7j4.roa
File: tXjmeAsSzsAZt8P6FK7hQ1gD7j4.roa (raw, json)
Hash identifier: FCx396DOftsvw2wbeV5eCvaFPEPU45dQt77yzkN5NhM=
Subject key identifier: B5:78:E6:78:0B:12:CE:C0:19:B7:C3:FA:14:AE:E1:43:58:03:EE:3E
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 3F706216
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/tXjmeAsSzsAZt8P6FK7hQ1gD7j4.roa
Signing time: Sat 01 Jan 2022 15:05:12 +0000
ROA not before: Sat 01 Jan 2022 15:05:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25003
IP address blocks: 192.115.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064329750 (0x3f706216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 1 15:05:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b578e6780b12cec019b7c3fa14aee1435803ee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:22:f6:63:7f:0f:4d:50:61:c7:61:b3:91:
5c:4c:1a:ea:64:91:c1:db:78:ab:22:8a:8c:13:f2:
72:97:b6:4f:58:08:eb:27:4c:86:8e:78:84:6b:46:
fc:52:ac:67:07:66:1f:50:ee:1a:19:75:28:54:cb:
b2:19:d2:64:59:c9:a9:c8:c3:90:d1:c9:52:d6:11:
69:f5:68:5f:ec:1f:59:13:fd:f7:50:6a:34:2f:0a:
fa:ba:e0:35:e2:7f:18:23:31:02:c7:d8:c5:11:c3:
44:04:cf:c9:56:22:91:54:e3:7b:3d:72:9d:e2:5e:
93:6e:c6:c7:11:c3:87:1c:ef:a3:36:bb:b4:0c:5a:
aa:72:47:e2:b6:50:02:e3:3a:d5:fb:0d:b0:40:eb:
d0:0f:83:3f:d9:91:db:0c:bc:3a:fa:9a:c1:55:ab:
b0:99:67:d6:66:49:92:4f:64:77:df:07:05:63:14:
03:02:7b:b7:56:b4:ba:8c:42:6a:f9:7f:1e:bb:f8:
db:cf:ec:df:30:8d:a9:a8:15:60:d6:b8:84:0d:2a:
51:f1:e6:af:6a:3b:13:f7:31:90:1e:93:80:69:45:
79:e4:f5:fa:74:30:2e:81:16:52:ba:1e:b3:02:d3:
7a:c2:e1:b1:e6:c7:66:57:02:83:96:ea:8d:b4:71:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:E6:78:0B:12:CE:C0:19:B7:C3:FA:14:AE:E1:43:58:03:EE:3E
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/tXjmeAsSzsAZt8P6FK7hQ1gD7j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
69:fd:0d:21:37:74:55:2c:c6:de:c3:61:94:97:07:12:f7:10:
7e:c3:3b:22:a4:45:2a:9e:dc:94:d1:18:02:f5:36:79:66:c7:
d8:91:85:a3:59:dc:7d:94:eb:f5:0f:69:53:29:02:d1:e8:22:
90:68:95:37:43:63:7a:ba:6a:b5:5b:36:ae:29:0e:d8:3a:d7:
42:45:ac:24:92:ff:63:a8:12:0b:ca:41:91:cf:60:ef:0d:46:
19:0f:18:0e:79:07:c7:bb:00:43:ea:1f:1d:7d:cf:c3:a7:26:
ec:ab:e5:54:99:bd:16:f4:27:cb:c4:59:9f:f1:68:85:7d:92:
70:bf:e9:7e:6c:79:cb:34:01:46:ab:eb:aa:e6:cd:d5:7a:50:
61:44:5a:8e:8a:60:68:c1:a5:12:95:63:a7:c2:22:e1:79:5e:
76:76:7f:c1:bd:56:69:7a:56:03:fb:36:93:af:5a:e4:86:e8:
c7:f3:31:ff:9f:65:da:1b:9b:2a:73:fe:48:91:b6:b6:e7:87:
19:b0:0e:bf:d6:d8:86:e7:8f:f8:18:a3:95:a2:22:fa:d8:86:
c2:8d:a6:eb:02:66:ff:b6:19:f9:c8:76:d6:e1:15:74:85:64:
af:86:3b:32:cf:a6:cf:24:d6:a8:ea:67:72:83:d0:aa:91:0d:
df:3a:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:31 2024 by rpki-client on console-fra.rpki-client.org