Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ODLvKSAKtnnj32P7ytqgAnZkS_k.roa
File: ODLvKSAKtnnj32P7ytqgAnZkS_k.roa (raw, json)
Hash identifier: +pfjsYXUHfStL7bWcdAY/TveyjpCLdnSJ1VIwoiZs3E=
Subject key identifier: 38:32:EF:29:20:0A:B6:79:E3:DF:63:FB:CA:DA:A0:02:76:64:4B:F9
Certificate issuer: /CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
Certificate serial: 017DB2FB
Authority key identifier: AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ODLvKSAKtnnj32P7ytqgAnZkS_k.roa
Signing time: Sat 01 Jan 2022 12:58:16 +0000
ROA not before: Sat 01 Jan 2022 12:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42724
IP address blocks: 194.62.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25015035 (0x17db2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
Validity
Not Before: Jan 1 12:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3832ef29200ab679e3df63fbcadaa00276644bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:4f:b2:ff:2d:90:bb:c0:b0:a5:07:b7:81:
b1:c9:ee:53:b6:5c:11:5a:3e:e9:c6:fa:5d:ec:56:
26:da:b8:ca:28:4a:5e:99:44:07:93:3f:0a:b1:ce:
88:b0:7a:e8:1e:4d:da:47:3f:6a:76:ed:1e:85:3d:
7c:1b:34:d5:7a:17:60:96:ae:49:60:44:20:fb:fb:
b3:8b:8f:1d:b8:0d:55:95:82:be:3c:f3:90:6b:5c:
4a:2f:20:0e:ba:29:41:93:01:cd:8d:b3:14:82:f9:
4c:e5:c9:e1:56:0b:0b:3c:21:74:34:0e:c4:28:8f:
29:cd:d8:04:38:4c:05:3f:2a:cc:ec:9d:f7:4e:b6:
53:dc:a4:3f:0f:84:19:d6:5c:5f:cf:dc:e1:2f:dc:
d7:ab:ee:55:0d:37:60:8d:1c:bc:9f:be:83:73:fd:
7b:1d:fd:c2:f3:db:03:b7:23:53:d8:d4:60:fa:a8:
a1:86:dc:a7:fb:2c:3c:6b:15:99:a5:a7:e2:14:87:
fc:ff:11:2b:f6:94:e4:ee:72:55:ef:6e:07:e8:2d:
b5:2c:a6:af:50:2b:0c:b7:e4:d5:11:d0:ad:57:4f:
74:3f:9b:50:81:04:5c:5e:77:8c:13:72:68:22:1f:
bd:7c:fe:20:b6:9a:bd:73:ec:3e:31:cb:d7:17:e6:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:EF:29:20:0A:B6:79:E3:DF:63:FB:CA:DA:A0:02:76:64:4B:F9
X509v3 Authority Key Identifier:
keyid:AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ODLvKSAKtnnj32P7ytqgAnZkS_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ruLrw_wwvH251TdgeQxTph32ZzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:08:06:be:13:88:50:58:25:6d:9f:b4:d1:4d:f4:38:c2:12:
0b:34:9c:e4:54:98:a0:05:69:3b:68:42:c8:6e:ca:1a:ab:89:
eb:e1:19:a4:a7:a9:fc:92:60:05:65:23:d3:9f:3e:98:97:7c:
f9:cf:9b:2f:8b:f7:01:62:b9:94:87:66:9a:95:3d:e9:b5:60:
3f:71:bf:5f:7f:db:63:1d:87:9b:5d:d4:3a:0e:68:aa:02:a4:
ed:b4:c9:ff:8d:a9:00:a1:e7:a1:2f:22:d5:36:fb:76:cc:8c:
a6:4a:91:5c:70:cf:85:b0:db:7b:72:56:a0:d7:fe:c2:ba:82:
8e:01:e5:e7:f8:11:64:8a:b7:0a:c2:cf:c0:29:ec:12:f3:65:
d5:bd:5b:d6:7a:be:d7:05:60:0b:77:3c:cc:29:89:93:f5:39:
c5:42:a3:a6:e9:2d:96:d3:f1:31:c4:14:ae:72:d4:4d:93:88:
3d:68:45:4f:14:99:10:0b:12:59:3f:10:37:95:18:f2:fb:d0:
e6:28:23:06:f8:4a:c6:57:46:8a:d4:cf:dd:b9:bb:62:c4:5e:
f3:e2:13:b2:c4:68:f8:0c:01:92:e9:42:90:a0:1f:a3:0e:66:
4c:d7:fa:05:79:09:a5:c4:eb:3d:1c:02:1f:8b:8f:1b:1f:00:
2e:41:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:46 2023 by rpki-client on console-fra.rpki-client.org