Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/OVTUNKLTLlENg5mOjJQzPx2_a30.roa
File: OVTUNKLTLlENg5mOjJQzPx2_a30.roa (raw, json)
Hash identifier: 1uA4T/xgGieH3a9cdzAAQxmrFh1OOHIRj7Syjm7uVLY=
Subject key identifier: 39:54:D4:34:A2:D3:2E:51:0D:83:99:8E:8C:94:33:3F:1D:BF:6B:7D
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 0141553C
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/OVTUNKLTLlENg5mOjJQzPx2_a30.roa
Signing time: Sat 01 Jan 2022 04:59:22 +0000
ROA not before: Sat 01 Jan 2022 04:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49367
IP address blocks: 185.14.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21058876 (0x141553c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Jan 1 04:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3954d434a2d32e510d83998e8c94333f1dbf6b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bb:2c:e8:d2:9d:e8:18:6b:23:10:6c:b0:1b:
5c:f4:40:ac:7d:c6:e2:d1:d7:5c:d6:a0:35:c4:ec:
cd:09:c2:11:3f:3f:6b:76:5f:fb:2c:fc:3b:8b:52:
39:31:26:e7:b7:51:5a:2b:08:15:fc:1c:46:19:fa:
0f:c6:ac:42:68:ee:6f:a2:54:c4:e5:f3:8c:94:98:
f7:52:cb:ee:c9:d6:e0:f5:99:07:42:82:31:66:0f:
d8:c8:12:04:d3:63:cf:ca:7b:af:c4:36:9e:8c:c2:
4c:59:0d:66:ad:4e:e0:98:8d:a8:e8:67:dc:ec:9a:
a3:62:f4:8e:c9:de:fc:df:3c:73:4f:c8:12:78:a4:
4f:8a:2f:b6:bf:73:c3:a5:52:e6:e7:1d:56:4b:ed:
ba:55:85:79:fe:d0:12:f9:d2:5c:91:6c:58:7b:92:
15:27:6c:a2:09:19:95:4a:2b:dc:6e:7b:06:a5:62:
28:f6:59:cc:6d:46:21:b4:3d:7d:f6:ac:fc:0e:77:
94:bd:26:a9:46:de:69:72:5f:12:9d:f3:65:92:53:
1d:7e:e2:fe:8b:7f:2d:6e:3e:c2:1e:dc:5f:ec:43:
12:b1:a2:1d:ad:d1:9b:fc:73:c2:7f:39:d3:c7:e9:
48:47:b4:39:c5:be:15:5b:ba:74:d6:a3:ae:d1:53:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:D4:34:A2:D3:2E:51:0D:83:99:8E:8C:94:33:3F:1D:BF:6B:7D
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/OVTUNKLTLlENg5mOjJQzPx2_a30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c1:cd:28:5b:1e:e0:7c:56:ac:55:41:03:80:e2:0c:2d:cb:
a2:cd:5a:6e:05:b6:5e:f2:93:e2:7c:ca:b0:65:ee:7e:f0:66:
58:4d:98:b5:c2:f7:2e:6f:45:08:7a:8d:38:5f:4f:db:d9:e2:
b4:49:b9:aa:5d:17:ee:a6:d7:52:d8:4b:d6:14:c4:4a:85:ff:
2b:cd:ad:1c:d9:58:9b:46:fa:37:a1:8b:f6:d9:c1:51:62:2a:
f9:de:be:e7:10:51:8d:e7:ad:37:c6:f5:18:df:f2:50:cd:0f:
3e:b9:ff:24:4b:c4:18:ec:ad:45:1b:6b:38:a5:c2:5a:ca:6d:
e6:20:04:64:39:1c:af:95:d1:04:a3:e6:95:2d:27:5b:7c:a0:
51:af:4c:b7:f6:99:9b:c1:c2:00:2d:6f:0b:72:77:bc:92:df:
05:05:29:cd:eb:40:03:92:ca:2a:a1:de:45:04:c5:90:8f:f7:
3d:7b:f7:25:d8:db:de:19:c5:e6:13:82:e8:27:a7:bb:c7:e4:
69:df:a6:80:34:8c:be:db:a4:f1:2a:ad:62:d1:45:8b:72:49:
f4:47:ed:d8:65:e7:21:75:ab:27:91:86:60:60:2b:43:64:a4:
f4:bf:c0:d0:31:08:f2:c3:21:83:23:14:35:82:14:70:ce:1e:
3e:e9:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:08 2024 by rpki-client on console-ams.rpki-client.org