Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/rSOIyXvqd7ukE2ljtQHbUx_X1XE.roa
File: rSOIyXvqd7ukE2ljtQHbUx_X1XE.roa (raw, json)
Hash identifier: WeVXTP14WtF0UIiUYngeLAJhYoQqg0Dj0+5CcYmdmtg=
Subject key identifier: AD:23:88:C9:7B:EA:77:BB:A4:13:69:63:B5:01:DB:53:1F:D7:D5:71
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 02B445BE
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/rSOIyXvqd7ukE2ljtQHbUx_X1XE.roa
Signing time: Thu 14 Apr 2022 15:29:07 +0000
ROA not before: Thu 14 Apr 2022 15:29:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39650
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45368766 (0x2b445be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Apr 14 15:29:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad2388c97bea77bba4136963b501db531fd7d571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:d7:09:74:85:3e:aa:c5:85:d0:48:d8:ef:
93:0b:43:c1:78:2d:ed:50:f8:fa:24:48:5e:bf:95:
f5:23:fd:13:5d:89:34:32:6a:68:00:c9:ee:15:63:
c4:2a:9b:e7:56:bb:1a:87:3b:04:df:7b:cc:d8:d7:
f4:be:da:04:dc:75:75:e8:e6:31:c7:cd:82:ba:80:
3d:a9:67:22:35:56:ad:3d:47:fe:7b:89:7d:cd:06:
1a:c8:f2:96:68:7b:85:cb:99:e0:92:89:08:79:91:
c3:e3:84:67:0f:97:9c:4e:ec:4e:bb:0d:bc:7d:68:
e2:aa:63:12:cb:c2:ed:ed:b9:e2:98:00:cf:98:41:
ea:df:48:d9:4d:e5:49:98:c3:48:6f:23:a7:74:5d:
cb:f1:dc:2b:bf:84:74:86:67:fb:0a:a0:1d:f4:f3:
3a:d1:a0:e4:3a:12:36:20:33:a3:14:d1:e9:e9:cb:
33:3a:52:32:b6:1c:f7:3f:4f:a0:fc:3f:a5:a5:d1:
f1:0d:8d:75:f2:16:99:02:0a:66:fa:53:70:ad:3a:
49:03:3f:44:d7:8b:cf:66:d5:ca:29:ab:35:b9:64:
b0:53:70:74:e6:6e:92:9f:40:09:a5:1d:94:ea:db:
63:84:52:67:af:67:ff:2e:3e:50:c9:a1:90:3e:93:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:88:C9:7B:EA:77:BB:A4:13:69:63:B5:01:DB:53:1F:D7:D5:71
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/rSOIyXvqd7ukE2ljtQHbUx_X1XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
58:40:ea:4b:50:fa:31:43:fc:ff:ea:ae:de:52:15:9d:da:fe:
43:90:6c:06:8c:75:66:37:0c:32:eb:5f:89:0d:80:9c:81:64:
ba:ba:bd:88:97:52:e1:2b:0a:f7:de:2b:16:bd:88:4e:2d:6c:
f5:b5:1d:9a:58:d3:e2:fd:bc:35:4c:09:96:93:1a:90:3f:d8:
45:cd:ab:da:85:e5:f0:44:70:fe:c8:f4:0e:37:9a:20:39:c7:
6f:17:1a:4f:b6:af:70:ec:52:73:3a:ce:b8:4c:c2:fd:ca:7f:
83:1e:e6:9b:b1:d6:d1:f4:66:97:6c:8b:84:34:5f:96:7b:1b:
45:c9:40:08:f9:94:35:cb:ca:9f:aa:ec:78:8a:46:e7:ef:84:
f4:34:36:76:57:ee:2d:01:41:42:2a:76:db:73:c2:88:eb:40:
f0:12:ed:58:7d:e2:ec:11:f6:fb:bf:9e:2e:d3:d8:79:64:68:
cf:bd:11:f7:9c:08:53:3f:64:1f:93:5e:fc:4b:6f:91:2d:c2:
c0:e1:d7:d9:57:dc:42:e3:95:89:d7:e9:fd:f0:26:6c:7d:65:
07:a2:33:66:ba:cd:8e:64:d9:6e:11:58:cf:1c:10:a8:67:36:
81:07:e1:63:b7:48:9b:9a:57:8e:5f:05:45:b5:19:5d:bf:47:
0c:b7:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:05 2024 by rpki-client on console-ams.rpki-client.org