Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/pd1xuU2WOJctypRs8lrvDF3xprA.roa
File: pd1xuU2WOJctypRs8lrvDF3xprA.roa (raw, json)
Hash identifier: xsjP6OwRilbfaKSN4Juvs2J56yLItH2SVJtHMBtLk1E=
Subject key identifier: A5:DD:71:B9:4D:96:38:97:2D:CA:94:6C:F2:5A:EF:0C:5D:F1:A6:B0
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 03A96A97
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/pd1xuU2WOJctypRs8lrvDF3xprA.roa
Signing time: Sat 01 Jan 2022 15:58:15 +0000
ROA not before: Sat 01 Jan 2022 15:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202221
IP address blocks: 194.183.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61434519 (0x3a96a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 15:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5dd71b94d9638972dca946cf25aef0c5df1a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:c8:44:b1:cf:93:cb:9f:19:90:f9:2a:e4:
2d:51:4f:72:64:e6:d8:7d:ba:f5:f6:ee:94:e1:5a:
18:1e:ae:6f:f0:e1:8c:ba:9d:e6:cf:c5:83:6c:95:
3b:b6:04:4d:45:0c:bc:72:17:05:a6:88:8d:5c:bb:
e9:5d:e2:82:37:8e:e1:7e:72:37:4d:97:ef:08:f3:
c0:85:2c:cd:b6:f8:22:56:53:54:62:4e:9e:52:c7:
ae:39:75:ea:df:46:6f:66:cd:82:23:2b:69:14:78:
f6:a5:b6:3a:79:85:82:83:dc:9c:b8:62:00:1c:fb:
cd:34:cc:4d:78:6b:77:ac:8d:86:0f:f9:de:ca:fb:
cc:7a:7f:14:24:49:c1:27:44:73:ea:ac:64:9f:ea:
22:79:7a:4f:8d:22:c8:80:52:4b:06:d8:02:c3:04:
df:2c:63:f0:5c:6f:7f:7a:36:33:3c:33:3a:00:56:
5c:f1:5b:f2:e8:24:4a:36:f2:0e:71:b6:a7:13:5c:
9c:f7:77:b6:71:1c:7f:ea:9a:09:d9:99:a3:2a:a6:
31:01:79:7b:27:bf:67:2f:0d:ca:d9:de:e2:b7:a5:
d8:b7:75:ee:d1:3f:a6:dd:38:1c:78:16:27:b7:bb:
45:d0:ab:89:47:7d:5d:02:56:8b:e1:77:41:64:45:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:71:B9:4D:96:38:97:2D:CA:94:6C:F2:5A:EF:0C:5D:F1:A6:B0
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/pd1xuU2WOJctypRs8lrvDF3xprA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.187.0/24
Signature Algorithm: sha256WithRSAEncryption
10:39:88:0c:d3:27:f5:59:0c:2c:63:01:a8:4c:fa:e9:08:03:
69:b6:90:72:4e:9f:e6:9c:f8:e3:fb:70:0b:8b:23:a6:67:7f:
79:a9:4c:cb:2d:53:25:3f:a2:c0:56:f6:4a:72:2a:b5:39:09:
67:c3:6a:1a:29:48:8e:8c:9c:84:59:b5:04:d5:4c:51:6d:4c:
0e:9a:31:e3:a6:48:00:74:e3:dc:f5:c0:1a:a0:36:a2:ed:37:
f7:0a:82:00:e6:ce:e5:6d:c8:ad:b3:9f:3b:7e:77:8a:ee:8e:
ab:98:90:38:06:58:0e:83:1e:67:bc:3b:7c:ce:37:4b:29:3e:
47:2e:bd:9b:6d:ee:7b:99:46:e9:6e:f8:9d:02:ed:37:e3:c2:
61:cb:80:61:2b:97:b3:97:c6:1b:19:f2:ac:fb:a1:f9:d0:a9:
87:8f:d9:d4:2b:b5:41:0e:ec:1a:c7:dc:53:c1:86:9d:cd:56:
f8:e5:7f:21:e3:6d:ec:e1:80:98:0c:7a:e3:94:98:9e:71:5c:
ef:c1:32:6c:25:19:d6:e5:8d:e8:08:8c:fa:c6:34:5a:c3:2b:
4f:33:b8:86:0d:64:1a:c4:bb:dd:aa:d7:1e:38:a1:d6:96:f3:
04:2c:c1:ca:b2:d0:f0:8d:31:67:51:ed:9c:85:9a:46:b4:60:
83:0b:8b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org