Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/c7RFJ3lSWQYylKFI4GWMv1mX87Q.roa
File: c7RFJ3lSWQYylKFI4GWMv1mX87Q.roa (raw, json)
Hash identifier: t0UBtPNzPz2rdWkq8oiQOMZHmbV+A69IHGOPhDGJv+Y=
Subject key identifier: 73:B4:45:27:79:52:59:06:32:94:A1:48:E0:65:8C:BF:59:97:F3:B4
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 0343C041
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/c7RFJ3lSWQYylKFI4GWMv1mX87Q.roa
Signing time: Fri 01 Jul 2022 04:57:05 +0000
ROA not before: Fri 01 Jul 2022 04:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203836
IP address blocks: 194.34.201.0/24 maxlen: 24
194.34.202.0/24 maxlen: 24
194.34.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54771777 (0x343c041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Jul 1 04:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73b44527795259063294a148e0658cbf5997f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:81:9e:bb:e7:e2:c0:09:d0:d6:be:c9:5f:
78:86:02:01:1f:5e:2b:9b:38:ee:11:e7:b1:ce:db:
07:65:a2:52:53:ab:52:8e:34:4d:ca:f6:47:4e:38:
c7:5f:f5:a3:4c:14:b1:d8:a7:78:51:2f:eb:95:b6:
62:3c:83:9b:84:25:f4:e0:0d:d8:6b:0c:da:ea:eb:
6c:43:ae:38:e7:86:44:34:73:0c:a4:cf:2b:8c:49:
42:2a:bd:63:c5:1b:7d:00:19:e5:97:4c:23:41:45:
b4:bd:c0:86:04:89:3a:6f:0d:41:dc:6c:17:1e:4c:
e4:e7:0c:3e:24:9d:1e:aa:ff:6b:a4:7f:38:54:ae:
07:61:36:e5:0c:1c:a1:f0:31:29:e3:0d:9a:aa:3d:
98:38:b8:e4:6a:27:27:71:b9:10:53:23:ae:e8:7a:
19:86:42:b5:77:3a:32:0b:4b:21:cd:de:4f:c9:96:
68:72:18:e1:d8:a0:73:44:4d:e5:9d:93:0d:be:fa:
e2:eb:cf:4f:62:f9:b3:ba:de:f3:93:86:2c:4f:2e:
4e:b0:8c:09:e5:bc:e1:86:63:14:13:33:b6:de:33:
c4:d4:e6:1a:bc:e4:ef:ca:86:23:de:1c:82:52:c8:
11:ed:70:eb:70:cc:06:37:89:b1:39:22:46:6a:9f:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:45:27:79:52:59:06:32:94:A1:48:E0:65:8C:BF:59:97:F3:B4
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/c7RFJ3lSWQYylKFI4GWMv1mX87Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.200.0-194.34.202.255
Signature Algorithm: sha256WithRSAEncryption
7f:61:da:7d:eb:26:60:2b:de:c4:dd:ad:d2:d4:4f:55:de:49:
a3:02:df:8f:24:ca:75:5c:0d:72:38:4b:df:8c:d3:b2:04:1d:
51:64:91:5c:37:e9:df:14:67:c1:8e:1b:a8:f8:f6:cd:a1:86:
f2:80:99:2e:60:7d:21:3a:7f:d1:ac:da:21:ac:61:f7:eb:75:
54:07:0d:a1:6b:0f:d9:e8:b1:b5:f4:14:5e:cc:0a:cb:ba:bb:
24:56:cd:e4:ca:1d:6e:0a:a6:b2:34:14:99:96:d8:08:60:50:
fa:22:65:6c:ea:fa:f1:8b:7d:a5:36:14:ac:c5:67:e9:65:fb:
93:3b:9d:85:d2:36:ce:ac:46:ca:d1:08:b0:88:90:0d:32:1f:
f7:79:b3:93:96:1d:31:62:65:96:3e:6d:cb:49:7f:60:dd:06:
55:4f:42:75:94:e4:c2:d6:a4:74:79:cd:94:26:4f:78:ea:34:
d9:f9:15:3f:3b:cf:e7:c5:55:70:00:03:81:87:bb:04:15:6c:
ad:36:8e:7f:24:e0:29:dc:d4:cf:52:ec:25:04:ad:a8:6d:ed:
a8:7d:b4:1d:1d:03:00:7b:0f:bf:19:40:01:c9:44:f2:00:01:
7d:be:c1:7a:41:07:51:e5:83:0e:d9:d9:2f:3f:31:0e:71:81:
65:18:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org