Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/IKPV5pCEGJ3dqeWTucj44CUPN_8.roa
File: IKPV5pCEGJ3dqeWTucj44CUPN_8.roa (raw, json)
Hash identifier: yJfYi88sqPY5Bt4R/t0CNdpC6XX0lQiXLmVwmVycZqs=
Subject key identifier: 20:A3:D5:E6:90:84:18:9D:DD:A9:E5:93:B9:C8:F8:E0:25:0F:37:FF
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: E551
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/IKPV5pCEGJ3dqeWTucj44CUPN_8.roa
Signing time: Tue 01 Feb 2022 10:24:15 +0000
ROA not before: Tue 01 Feb 2022 10:24:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8893
IP address blocks: 194.105.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58705 (0xe551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Feb 1 10:24:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20a3d5e69084189ddda9e593b9c8f8e0250f37ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:d1:bc:9d:d5:31:59:ee:45:61:41:72:ec:
07:44:d0:31:2d:7d:2e:9b:58:3a:43:89:03:a4:28:
55:3b:37:c7:e2:ae:56:92:b3:cc:bd:f3:80:30:ac:
3e:05:0a:d9:7e:a6:2d:b2:ba:c1:c1:2a:8d:74:01:
20:0c:db:db:ab:ef:e0:80:2e:81:07:29:99:99:f2:
1a:f1:d7:76:1a:28:5e:d0:4b:36:fb:1e:58:d8:d8:
09:c7:25:47:1c:a5:b1:8f:b1:22:74:6b:fc:2f:46:
48:90:b5:a6:78:07:c2:61:e1:88:cb:73:04:47:30:
c2:8a:d6:d4:cb:0b:83:19:d0:d1:48:1d:a3:36:e7:
9e:e8:25:f8:d5:9a:eb:8a:74:f0:8d:15:23:94:bc:
3c:75:83:3b:85:49:b0:56:7f:dc:45:29:33:0a:39:
ee:72:af:cf:8f:e6:fa:cc:06:c0:c9:df:e5:a6:ba:
41:21:48:51:2e:57:61:e9:34:59:50:a7:8a:f7:dc:
3c:d0:82:2b:33:82:91:76:b2:37:a9:d5:69:01:07:
91:a6:eb:86:81:16:bc:e8:6a:85:e4:51:37:a0:f7:
29:10:c7:3c:33:2d:37:8f:0a:b2:c9:8c:c4:ab:c2:
5a:2e:03:af:9e:15:e2:bf:25:fc:e1:e0:3f:be:44:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:D5:E6:90:84:18:9D:DD:A9:E5:93:B9:C8:F8:E0:25:0F:37:FF
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/IKPV5pCEGJ3dqeWTucj44CUPN_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.146.0/23
Signature Algorithm: sha256WithRSAEncryption
66:9c:43:fc:b3:57:02:1e:ea:93:1b:9b:bc:fa:df:b1:39:97:
cc:d1:80:c8:e1:ad:a5:de:54:3b:8f:9b:43:a7:87:b2:49:64:
2e:34:a1:6e:15:d3:04:41:09:cd:75:11:8b:ab:20:87:2b:74:
7e:28:06:65:95:52:6f:65:05:b1:2c:fd:85:19:cb:4f:9f:48:
c4:38:6e:16:71:78:a9:64:97:1c:bb:c7:06:5b:e6:a6:71:d1:
35:23:24:3a:55:da:5f:a7:ea:d7:fb:f6:66:72:05:62:92:b1:
f1:b1:c7:9f:ab:c0:e5:80:02:f6:84:09:51:64:6a:bd:88:fa:
88:89:29:98:c7:f9:13:d1:18:b6:27:ab:93:9b:6d:a3:48:58:
71:e4:d1:f9:30:c1:78:18:d4:20:77:b0:80:e2:d3:40:b4:c6:
f8:04:8f:4d:76:bf:13:3f:33:79:91:6c:67:bd:ab:18:e3:85:
c1:c8:c0:28:2d:45:e5:58:5a:44:12:c4:b8:f9:02:f8:18:fe:
cc:c7:5d:83:0e:66:ed:f5:88:17:1d:ae:08:53:ec:78:5b:06:
a9:d6:00:4e:12:b1:fe:d0:54:5c:3b:a1:2f:48:96:bf:aa:0c:
84:b0:61:92:4e:9a:cb:c0:d8:65:c6:dd:c9:05:8d:2e:c9:72:
be:7e:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:38 2024 by rpki-client on console-ams.rpki-client.org