Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-AvQLEh89N8LOVZNTNc6KoSLxlc.roa
File: 1-AvQLEh89N8LOVZNTNc6KoSLxlc.roa (raw, json)
Hash identifier: LQw01Cqt6nJoggJXCCdRAcCf4BJsli3QEr9Nmwafmnk=
Subject key identifier: F8:0B:D0:2C:48:7C:F4:DF:0B:39:56:4D:4C:D7:3A:2A:84:8B:C6:57
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 139D03A4
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-AvQLEh89N8LOVZNTNc6KoSLxlc.roa
Signing time: Tue 04 Jan 2022 16:54:43 +0000
ROA not before: Tue 04 Jan 2022 16:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203025
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.184.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329057188 (0x139d03a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 4 16:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f80bd02c487cf4df0b39564d4cd73a2a848bc657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:a1:e3:f8:1d:74:a5:0a:ef:15:e6:c4:ea:
6c:2b:ef:9f:f3:29:a4:fe:28:c9:2f:2c:aa:3e:96:
45:94:da:78:2f:a5:79:bc:1f:85:7e:d7:37:b5:f9:
e2:15:73:ca:93:e3:9b:4f:49:ae:71:e0:9f:c6:f3:
42:8c:7b:fa:f9:53:59:09:c5:46:1c:98:a5:02:e0:
dd:c1:14:9a:a0:1d:28:44:09:9f:f4:6a:2a:cb:bf:
e1:c1:69:1a:5f:cc:c6:72:f8:3b:38:d3:79:9b:d8:
ad:a7:45:3b:4b:8d:34:31:05:2c:79:ed:96:87:c0:
c0:85:4f:09:ef:6d:f9:df:41:ff:6d:c0:8b:af:37:
99:42:d7:8d:48:05:97:45:e9:08:23:e7:a5:d9:8b:
22:dc:9f:0e:88:96:4d:62:17:5d:b0:8f:fc:fc:5c:
77:00:60:24:d8:45:85:f9:53:4c:82:c8:ad:6a:fe:
62:80:b3:c2:36:08:60:11:ab:f3:7e:2b:61:87:f9:
d1:c5:68:06:4f:be:ed:49:17:5d:d4:07:68:4b:b4:
17:ba:e5:b6:19:c9:03:f2:28:ac:a9:2a:1e:90:c6:
f9:e3:7f:86:01:e7:3d:ec:e7:6e:1c:d8:50:f4:60:
01:89:83:38:64:64:68:ed:c5:d3:1c:dc:b8:15:1a:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0B:D0:2C:48:7C:F4:DF:0B:39:56:4D:4C:D7:3A:2A:84:8B:C6:57
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-AvQLEh89N8LOVZNTNc6KoSLxlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.184.0/23
194.50.188.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:b0:cc:4e:fb:bf:bc:58:14:4f:16:72:b5:79:1f:fe:f7:dd:
b9:50:be:10:af:2c:cb:ba:ab:3b:3d:50:24:3a:ff:af:02:8b:
5c:4f:02:fd:c4:7c:e7:0e:44:df:28:0a:6f:0f:fd:5e:6e:3f:
e3:5d:0f:dd:e7:e6:59:1b:d8:c4:7d:79:80:c1:cc:b7:4d:5d:
a1:79:b5:9c:17:fa:74:4f:7f:c5:50:fd:8d:8b:27:34:a3:ce:
fd:21:b7:0a:f0:23:05:e0:c7:ca:ba:60:13:5e:45:a4:0c:9f:
15:66:27:73:19:9e:91:9c:67:31:38:d5:ca:29:ca:56:2b:c0:
46:49:94:6e:97:89:8d:bd:c8:09:04:fc:45:e8:be:cc:cb:e5:
88:9f:f1:c6:90:fb:03:c0:36:78:59:a5:36:31:9a:a6:28:d9:
16:1c:d0:90:62:d7:26:fd:6f:99:ab:0c:28:c7:d1:e0:24:55:
06:b5:c9:1d:e6:58:fd:75:23:99:52:62:56:e9:3e:f8:04:40:
c2:ed:5e:bd:6e:df:8e:55:14:55:b9:c1:04:ae:08:9b:31:70:
a1:8b:c5:ae:6f:2b:8c:01:b7:c7:d7:ea:af:03:57:af:37:8a:
f0:42:b5:50:ea:c4:13:90:23:d0:0f:9c:a5:64:48:6a:ff:e3:
f1:0f:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org