Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/scUvJYY2WK72nExV-0_IKaUT0bc.roa
File: scUvJYY2WK72nExV-0_IKaUT0bc.roa (raw, json)
Hash identifier: qC/qxOMSPHwsQaqd149VfKxNy3cNpAJf96jWzSdFTFs=
Subject key identifier: B1:C5:2F:25:86:36:58:AE:F6:9C:4C:55:FB:4F:C8:29:A5:13:D1:B7
Certificate issuer: /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial: 0C3D0093
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/scUvJYY2WK72nExV-0_IKaUT0bc.roa
Signing time: Sat 01 Jan 2022 06:04:34 +0000
ROA not before: Sat 01 Jan 2022 06:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212778
IP address blocks: 145.87.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205324435 (0xc3d0093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Validity
Not Before: Jan 1 06:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1c52f25863658aef69c4c55fb4fc829a513d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:b7:cd:0e:c1:54:3c:57:56:fc:1e:55:cc:
c3:3d:0b:cf:28:83:10:fc:35:87:aa:b1:94:0d:67:
f1:3d:41:e4:11:bb:1f:1b:98:e3:26:61:cf:15:45:
78:9c:77:02:64:71:2a:36:77:8c:13:d4:96:27:57:
62:5f:f6:ed:fe:0b:25:9a:8e:82:e7:20:ce:b4:61:
a4:1a:d2:bc:ba:bd:68:b3:18:e1:b0:ed:61:99:0b:
a5:82:a6:bf:c6:4b:2d:38:cc:2c:07:ad:89:cc:13:
29:48:ce:2d:44:6e:34:06:ce:59:b6:8a:24:d7:9f:
cd:d4:50:da:e0:d2:bb:65:be:e2:49:62:6c:b4:8c:
c2:72:71:40:e2:97:1c:42:5c:8f:87:da:3d:c6:45:
56:18:1a:ad:9d:ef:5a:92:e4:c8:66:b2:d4:46:13:
9e:a0:21:6a:99:8f:fb:42:3a:47:95:26:48:fd:e0:
47:68:e6:02:97:fe:d1:14:b9:d2:67:77:2c:ba:24:
d4:5c:34:1f:2b:1f:6d:e0:b2:e9:f5:e0:73:46:d6:
7a:42:6f:0d:22:c2:78:04:a5:51:a7:6e:62:af:cc:
95:83:ef:f4:cc:ee:e1:01:22:f1:72:50:0c:e4:fc:
ba:bf:af:2d:56:86:c3:cb:6a:18:c0:32:4f:3e:49:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:2F:25:86:36:58:AE:F6:9C:4C:55:FB:4F:C8:29:A5:13:D1:B7
X509v3 Authority Key Identifier:
keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/scUvJYY2WK72nExV-0_IKaUT0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.87.0.0/22
Signature Algorithm: sha256WithRSAEncryption
25:60:ed:db:0a:3f:7e:eb:dd:5a:8e:fc:44:77:9d:d2:40:e2:
55:04:3b:e2:45:24:e5:88:fc:d0:f4:ad:fb:35:92:0a:14:7e:
c8:b2:3a:d9:e7:5c:85:96:0a:3b:0a:a4:4e:a3:9b:a2:9f:4b:
5d:c3:cf:82:5d:5f:05:7c:4a:d1:a4:2c:90:de:d8:f7:86:6a:
81:56:20:b0:48:34:30:c5:aa:5d:aa:eb:0d:b4:72:33:83:0d:
bb:81:e7:39:3e:5c:5f:de:d1:69:3f:9c:f3:2a:bb:9f:1e:c7:
ca:fd:fa:38:a8:52:02:0f:68:da:9a:fb:b8:c8:72:a9:38:8d:
a6:5b:9a:75:61:a3:92:fd:f8:ea:15:4f:c6:6c:85:ae:ad:77:
1e:ec:b3:1c:3a:f0:47:aa:34:9c:29:4b:96:51:d1:c2:d4:50:
1d:d8:5c:33:70:5f:5f:7b:b0:c9:44:26:4f:32:69:1e:e3:21:
e0:6b:39:1e:06:41:91:d1:18:51:0d:98:88:73:83:42:29:87:
ed:0c:d4:45:a9:91:89:04:3f:17:94:fc:13:00:92:89:cb:23:
be:88:9d:4e:03:e0:16:ef:e3:ff:64:e2:34:a8:49:96:8d:25:
c9:76:58:50:22:12:4e:eb:20:3c:ad:4d:bc:49:a7:a7:ad:a2:
12:53:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:08 2024 by rpki-client on console-fra.rpki-client.org