Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/8lc1B0lX4ruWjrLtYJGIZU1YNsc.roa
File: 8lc1B0lX4ruWjrLtYJGIZU1YNsc.roa (raw, json)
Hash identifier: OagVpifHfKhz9AoihAZjCqirp6ZlvGRhbsJb1JVK1yA=
Subject key identifier: F2:57:35:07:49:57:E2:BB:96:8E:B2:ED:60:91:88:65:4D:58:36:C7
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 03A8A492
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/8lc1B0lX4ruWjrLtYJGIZU1YNsc.roa
Signing time: Sat 01 Jan 2022 15:58:14 +0000
ROA not before: Sat 01 Jan 2022 15:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201920
IP address blocks: 194.183.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61383826 (0x3a8a492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 15:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f25735074957e2bb968eb2ed609188654d5836c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:7a:91:be:de:39:d6:d4:7a:86:8d:96:90:
87:b0:d5:ff:a9:fd:dc:16:01:80:cd:33:ee:5d:53:
f6:41:d7:13:d9:6e:a6:7f:b3:ec:84:78:cb:48:c5:
d2:35:aa:01:6f:49:e3:3d:c5:5d:8d:2e:33:ae:21:
6f:ac:61:9f:ca:5c:72:d7:9b:eb:fa:b0:f0:93:16:
21:6d:20:b9:87:78:45:ab:d2:44:e0:28:8f:ab:bc:
95:6f:91:7c:00:cb:58:b2:7d:de:92:97:e7:9a:4e:
52:64:c9:bc:03:83:db:6f:a3:fe:a4:7d:92:80:e9:
fe:f1:2e:e4:9a:ce:20:48:68:95:2d:75:9a:de:14:
c4:99:7a:e2:69:53:53:ae:84:22:73:bd:40:7e:5f:
87:8b:48:e5:c3:5d:e2:c8:ea:b3:55:2e:8e:75:2a:
d9:8e:fb:cd:46:6f:64:7b:9c:fa:69:98:da:7a:33:
d1:4f:17:ed:6b:dc:6a:1d:ae:e9:9e:b1:a1:dd:2e:
99:63:a6:a8:ae:0a:36:64:e8:fb:a3:56:d5:19:ee:
50:8a:f1:93:a0:1d:8f:78:4e:01:be:85:49:d2:c7:
4b:11:b9:c7:73:45:0b:4d:53:09:7b:88:f4:66:96:
bf:11:01:02:5a:0d:b7:53:e7:6a:43:9c:55:9b:a8:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:35:07:49:57:E2:BB:96:8E:B2:ED:60:91:88:65:4D:58:36:C7
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/8lc1B0lX4ruWjrLtYJGIZU1YNsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:b7:40:7a:9f:c9:4c:9c:f9:fc:6c:0e:83:85:c5:80:77:f9:
69:33:46:55:55:3b:fa:7d:e4:98:1f:bc:b6:35:9e:a4:f7:db:
a1:c6:a3:19:25:f0:f8:48:36:50:0a:58:80:41:9b:2b:2e:bf:
19:e4:a9:ec:f0:4d:e7:91:0c:98:b0:53:d8:97:e5:82:79:bc:
24:1b:31:1d:dd:95:ef:9c:94:c4:9f:fa:c1:8f:5e:b9:6e:1b:
90:cb:d7:b1:27:f8:ef:46:97:18:17:12:3c:b2:fe:97:bd:66:
23:1f:d1:f5:21:d4:27:5c:7f:7f:d2:46:c7:2b:25:19:6e:2a:
c8:9f:4b:15:d2:d6:28:0c:a8:03:f4:b8:d2:79:7e:1a:77:3d:
af:b9:76:53:cf:51:7d:76:3f:0b:7b:35:81:00:c2:4e:a2:62:
33:ae:35:16:40:2e:a5:b1:3e:22:cf:23:f2:f0:3e:ca:ad:a0:
60:2d:b6:92:00:dd:49:df:2a:97:a1:2f:00:f3:45:10:b1:ca:
3e:3e:66:af:55:56:e1:99:2f:9f:d7:04:4e:38:15:e8:7d:5b:
e3:99:a6:95:89:2c:b6:87:d3:5a:b8:e1:5e:46:8f:b3:8b:09:
11:76:f0:c3:9c:33:59:50:74:61:aa:25:4c:12:08:b0:4c:5a:
67:03:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org