Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/1-JnmlcBNuM5zwWA9O5d6jHhfhe4.roa
File: 1-JnmlcBNuM5zwWA9O5d6jHhfhe4.roa (raw, json)
Hash identifier: 6JAWdCvkv1VQffeJm12Idgy3GijRdie1n8QM/6cU6r0=
Subject key identifier: F8:99:E6:95:C0:4D:B8:CE:73:C1:60:3D:3B:97:7A:8C:78:5F:85:EE
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 018521207BD26A7BDCF8629FEC1636569AFB
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/1-JnmlcBNuM5zwWA9O5d6jHhfhe4.roa
Signing time: Sat 17 Dec 2022 17:27:35 +0000
ROA not before: Sat 17 Dec 2022 17:27:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47650
IP address blocks: 195.34.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:20:7b:d2:6a:7b:dc:f8:62:9f:ec:16:36:56:9a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Dec 17 17:27:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f899e695c04db8ce73c1603d3b977a8c785f85ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:d8:2e:ac:7e:6f:95:3c:ea:87:c7:d4:89:
94:db:1b:7f:37:a2:6e:69:f1:47:1d:c2:30:73:93:
db:76:bc:0a:18:e7:ae:a8:88:42:3f:da:68:c8:29:
60:33:77:a7:0c:e8:61:46:c9:51:cf:57:89:6d:f0:
b5:13:f0:76:4f:25:95:81:ff:39:38:72:b8:fa:32:
25:0c:b9:70:8d:51:df:94:5d:37:a5:0e:37:b6:fa:
9d:4e:b9:29:29:53:37:2f:68:21:b5:e3:10:b2:d7:
93:2f:b8:40:71:89:4d:ec:7c:da:33:f9:e5:52:31:
53:25:d1:4d:45:99:5a:bf:a6:b7:12:9f:32:f9:1f:
20:8b:60:21:42:c2:0f:8b:ec:3a:90:63:ec:be:75:
74:08:be:7f:fa:a8:41:46:b7:b3:a4:99:a3:a5:5b:
27:81:1a:e5:89:91:93:91:33:a0:6e:10:0c:3c:db:
05:6a:38:b1:aa:b3:bb:16:58:1e:9b:aa:8d:c5:c4:
13:1e:16:56:cc:35:69:72:af:d4:f7:3b:f8:87:5b:
19:17:4f:37:ed:ba:92:cc:28:cd:18:77:30:07:26:
5a:97:a0:29:85:0f:ea:f0:30:b1:21:cc:fe:af:19:
c5:09:8f:76:a9:85:1c:2f:c6:36:c7:47:39:93:44:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:E6:95:C0:4D:B8:CE:73:C1:60:3D:3B:97:7A:8C:78:5F:85:EE
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/1-JnmlcBNuM5zwWA9O5d6jHhfhe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.220.0/22
Signature Algorithm: sha256WithRSAEncryption
12:14:84:dc:04:3b:4a:c9:e9:f6:f2:90:83:6c:6c:8b:04:7a:
c9:f9:16:1c:f9:ec:42:34:1b:69:3b:0c:7f:be:87:8c:72:ae:
9e:93:83:c6:b4:69:7d:e0:c5:91:e6:a8:50:29:b2:48:37:c6:
2e:fe:48:34:34:3f:42:aa:be:9d:29:99:8f:f8:85:ea:df:e2:
4a:32:d6:ed:ad:cd:e1:0e:4d:85:6a:fc:52:f1:cd:c4:c2:8f:
c8:ca:29:86:fb:04:e8:3c:93:0c:43:9a:65:8f:75:15:c2:d4:
ab:aa:e1:48:7f:1a:2b:37:47:35:10:8e:e5:f3:d4:52:44:ac:
85:e6:f0:e8:ff:f0:86:ef:24:48:ad:82:a0:dd:e8:e8:9d:3c:
e7:b0:49:64:cf:08:d7:34:ba:a9:58:04:0d:d9:40:da:1c:66:
07:40:02:6e:9a:63:a1:e8:a7:85:6c:a0:7f:12:9c:80:55:4c:
ad:f0:c4:a8:43:bc:b9:70:21:c8:7c:69:20:09:e6:ef:40:a8:
65:e1:7a:ad:50:b6:10:3d:d6:41:78:95:a1:12:74:43:6a:de:
f4:c6:58:30:b4:9b:4f:e4:80:44:df:d2:7e:1c:58:21:47:e3:
3a:10:7c:a3:0b:9c:b5:24:35:37:a0:4e:bd:20:48:c8:52:99:
29:e8:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:46 2024 by rpki-client on console-fra.rpki-client.org