Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/ouSzfZCqGIRtfEdwARX2nRHE6_c.roa
File: ouSzfZCqGIRtfEdwARX2nRHE6_c.roa (raw, json)
Hash identifier: WL0V94qmTLbL1afds4/dXGOJM7Z1VwB4RFQdx15jc8w=
Subject key identifier: A2:E4:B3:7D:90:AA:18:84:6D:7C:47:70:01:15:F6:9D:11:C4:EB:F7
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 035D60E4
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/ouSzfZCqGIRtfEdwARX2nRHE6_c.roa
Signing time: Sat 01 Jan 2022 06:03:55 +0000
ROA not before: Sat 01 Jan 2022 06:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198567
IP address blocks: 194.153.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56451300 (0x35d60e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Jan 1 06:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2e4b37d90aa18846d7c47700115f69d11c4ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:88:fc:9b:f2:f6:94:d4:4c:1f:a5:6e:73:
eb:8b:92:27:15:15:8e:96:f2:d5:35:ae:4c:d2:6b:
38:b1:48:8f:78:f0:98:c1:38:53:9a:e7:19:af:24:
6c:ab:7a:b5:ea:d2:42:99:17:5a:01:c6:9c:0e:6f:
4e:d7:16:5f:fd:1e:f4:80:4e:59:35:4a:b4:c0:48:
47:8a:26:39:ba:62:23:d7:d2:c0:1e:a7:e9:1c:6a:
a8:17:0e:d4:b0:bb:3f:f1:ad:d4:78:21:73:b4:20:
e9:ea:b4:4a:a9:58:0c:20:b4:eb:0c:24:17:e5:a8:
85:88:6f:5d:1e:c5:29:f0:ee:b8:6b:2e:9c:1d:f5:
60:d1:08:a7:ca:46:d9:1b:22:6a:8e:1f:60:d9:5a:
6a:c5:be:b4:cd:f5:7f:d7:42:15:5c:c5:f6:f1:8d:
06:13:33:d5:86:d3:90:db:2c:a6:2e:d0:4b:45:5e:
60:8e:99:51:b4:46:0d:f8:5e:07:40:7d:ad:b9:f0:
89:47:de:56:d1:a7:05:a2:72:60:12:a4:04:2f:66:
e5:48:a4:0b:b3:11:d2:c7:c3:0c:40:bc:90:a8:f2:
69:e1:84:f2:a7:62:0b:5a:cc:b1:d4:88:bf:b7:7c:
89:f3:02:05:30:af:7c:7f:b1:37:95:53:c2:09:37:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E4:B3:7D:90:AA:18:84:6D:7C:47:70:01:15:F6:9D:11:C4:EB:F7
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/ouSzfZCqGIRtfEdwARX2nRHE6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.184.0/24
Signature Algorithm: sha256WithRSAEncryption
34:81:1f:94:6c:02:ee:a6:3b:78:19:bd:c1:d3:8d:7a:a8:47:
3a:3c:2e:0b:7e:c3:79:15:25:ce:55:88:aa:0a:33:cf:1b:a5:
fa:44:00:b2:f4:ee:df:6e:87:de:21:40:58:71:7a:ff:4e:8b:
05:95:70:61:77:cb:f2:49:97:18:21:9e:34:bf:da:f6:75:08:
44:f0:6d:d9:62:db:79:e7:bf:de:4d:41:e0:50:54:b0:c7:2d:
b7:82:d1:2d:8b:6d:70:c1:27:f3:7c:4b:50:ea:82:44:c1:e0:
bd:f4:62:3e:61:2d:60:bc:1d:99:b0:61:c0:02:de:70:d4:68:
0e:42:2d:cd:b0:72:63:f2:23:09:7a:7e:3b:34:59:5f:66:dc:
ab:d8:f1:1f:64:8a:2f:f3:62:29:51:ac:f4:bc:8e:2a:88:fe:
18:6f:11:54:c7:63:ee:82:cd:e3:59:c3:c3:84:61:ee:fb:fd:
e0:0d:40:5f:a2:81:b7:73:cd:05:d7:49:50:18:77:4b:9f:d7:
bb:99:fe:e1:98:cf:8b:11:87:47:31:4d:79:9b:a9:a5:2b:3b:
a2:db:c1:72:35:d8:d1:8e:2c:25:14:4f:78:b2:fd:70:ee:1b:
4e:88:68:63:36:96:5e:fe:d3:0c:22:ea:45:4d:a0:85:08:cf:
8e:8f:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org