Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/og9N5z2BS5e5d5hXV0G3VVOyh9E.roa
File: og9N5z2BS5e5d5hXV0G3VVOyh9E.roa (raw, json)
Hash identifier: jfch/mAI1HV6Q/TiXhb2eFncnSg08LQ/O+Z7ff6LqgM=
Subject key identifier: A2:0F:4D:E7:3D:81:4B:97:B9:77:98:57:57:41:B7:55:53:B2:87:D1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AC93C12
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/og9N5z2BS5e5d5hXV0G3VVOyh9E.roa
Signing time: Sat 01 Jan 2022 03:02:35 +0000
ROA not before: Sat 01 Jan 2022 03:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209604
IP address blocks: 193.35.154.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180960274 (0xac93c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a20f4de73d814b97b97798575741b75553b287d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:f2:47:8c:cf:d7:c9:f8:7e:bd:ca:5a:ba:
47:11:61:2c:62:60:18:c9:91:51:a0:e1:cd:75:b7:
60:78:17:10:ea:0e:82:2f:cb:2a:e4:83:23:b9:bb:
39:7f:3f:76:10:d4:40:38:ec:e8:99:4b:ce:9c:c1:
50:aa:c6:33:a1:1e:f5:32:3c:60:e8:9e:23:69:6a:
b1:7f:03:58:bb:0b:b1:c2:9c:d1:9a:d1:4e:29:59:
13:a2:ec:fb:e2:75:24:b3:2e:cb:4c:61:70:ab:61:
a4:5d:66:7d:e7:be:34:a1:a5:a9:c4:d6:ef:b7:77:
d3:89:98:92:52:22:db:4f:02:59:37:42:b5:41:5b:
09:97:65:9c:38:c0:2a:42:7e:f2:d0:12:f8:33:78:
3a:b3:e3:e6:d3:9f:0d:7a:26:f4:6d:2c:5b:c7:01:
83:5b:77:fc:bc:7b:75:e8:91:31:27:57:03:1c:9c:
c7:12:89:a3:b4:0e:ab:08:b2:e1:c2:ef:93:60:6d:
20:8f:da:c7:3d:cc:44:73:b6:85:69:ae:19:aa:5b:
80:1d:6c:10:ea:b7:91:42:2c:a0:8e:35:94:d2:e1:
95:b2:33:e4:d0:72:5e:e6:d5:4f:23:8a:50:76:bb:
d2:68:cd:20:3b:f5:cc:f4:45:9f:ae:80:d1:e8:2b:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:4D:E7:3D:81:4B:97:B9:77:98:57:57:41:B7:55:53:B2:87:D1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/og9N5z2BS5e5d5hXV0G3VVOyh9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.174.0/24
193.35.154.0/24
193.223.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7c:bb:28:f4:cd:b5:45:3d:4f:ad:98:c5:65:66:e2:b3:d7:
2c:de:cd:28:2a:94:f6:1d:a4:0f:24:2c:98:fa:83:3e:b8:dc:
44:f4:aa:58:74:41:29:31:50:e2:c1:76:83:1d:ab:30:58:87:
4d:59:92:40:df:48:60:80:93:82:be:12:31:5f:66:b3:31:7d:
75:65:8b:4c:3a:0f:4e:3e:32:2e:1b:e0:cd:4e:35:02:19:a1:
33:cc:f4:2a:7a:b2:d9:d8:76:bf:54:c9:ec:50:fd:6b:9b:1a:
e0:aa:c5:f8:45:a5:5d:61:fe:0d:ee:10:22:ac:35:3d:c2:0b:
8b:db:96:88:88:ec:1c:08:6a:b6:33:2d:44:05:76:97:03:4e:
39:b1:b5:17:fc:8a:ad:e4:b8:43:f4:17:42:2b:18:db:8b:3b:
2d:3a:22:20:3e:b9:ae:e4:9d:d5:64:3e:0a:7c:1d:ce:c9:67:
44:00:16:c5:7d:0c:18:10:e4:e1:a1:fd:6c:96:e0:70:bc:07:
f1:67:b0:c2:f6:01:e6:77:f7:b2:0f:8e:d3:d6:77:f0:ae:20:
34:fb:60:ca:cc:08:2b:42:55:7e:6d:af:69:8a:72:c4:b2:d3:
42:6a:e2:7e:51:44:c1:10:3b:e6:4c:bb:07:42:79:f2:61:d7:
f0:67:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org