Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/1-HXn1tFoevvYPOAXlBXB9m6PsMM.roa
File: 1-HXn1tFoevvYPOAXlBXB9m6PsMM.roa (raw, json)
Hash identifier: HOkaeC3qWBbweVd2g4HN1mKiq//GIfLd+SJ9uBUUFyM=
Subject key identifier: F8:75:E7:D6:D1:68:7A:FB:D8:3C:E0:17:94:15:C1:F6:6E:8F:B0:C3
Certificate issuer: /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial: ECD9F9
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/1-HXn1tFoevvYPOAXlBXB9m6PsMM.roa
Signing time: Sat 01 Jan 2022 12:06:15 +0000
ROA not before: Sat 01 Jan 2022 12:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 194.69.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15522297 (0xecd9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Validity
Not Before: Jan 1 12:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f875e7d6d1687afbd83ce0179415c1f66e8fb0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:8b:61:b5:1e:d8:d7:e0:d4:1a:d3:0f:b6:
e4:3e:fc:8d:4d:38:9d:88:1b:78:6d:e3:5d:95:01:
30:17:5c:33:05:96:78:ad:82:17:17:98:8f:c7:5f:
f2:71:04:0c:fb:19:20:7d:de:aa:41:8b:8b:66:fa:
fd:d0:fb:38:a7:29:38:55:57:8c:5c:ed:96:2e:da:
5c:37:bd:dd:79:34:bc:eb:d0:6d:03:c9:07:4a:4e:
ca:2c:2b:f9:f3:b2:22:ba:72:39:9c:f4:85:0b:e7:
ce:81:2e:f5:fe:e6:84:84:38:93:ba:96:2c:a4:5f:
df:d6:7e:f3:1f:0c:9f:a7:b5:13:be:44:af:da:dd:
83:4b:57:ff:76:9c:7f:93:99:39:b2:e5:40:1b:ca:
e5:21:3b:2d:08:ff:7a:fd:e4:61:52:29:d7:15:7a:
95:3a:83:52:a6:1b:b8:a8:f5:c2:f1:21:95:07:f1:
39:9a:3a:d2:77:65:b3:f3:d9:89:9c:74:19:2f:08:
21:76:1c:a5:ce:d3:90:34:c0:f7:f2:3f:1d:51:ef:
bc:67:c5:9e:80:91:ec:e9:ae:b3:67:d0:fc:91:16:
5f:74:40:39:06:96:3d:da:e7:36:37:34:af:34:83:
67:f0:5e:cd:3a:0b:39:e1:28:f0:00:cf:99:12:f0:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:E7:D6:D1:68:7A:FB:D8:3C:E0:17:94:15:C1:F6:6E:8F:B0:C3
X509v3 Authority Key Identifier:
keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/1-HXn1tFoevvYPOAXlBXB9m6PsMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6c:4a:5c:ee:27:88:b9:25:98:34:49:88:cc:f3:ff:1b:f9:
a6:b6:62:8e:f9:be:12:50:8c:c3:ff:00:f6:e7:57:58:bd:2e:
b9:29:41:ac:08:bb:54:fc:9a:08:60:f0:d7:4c:88:ae:44:55:
cf:7c:cd:b1:65:f0:2d:7e:b0:d9:7a:3a:dd:a4:0a:c1:e0:5f:
e4:24:dd:03:3d:10:1e:3b:39:1e:5f:a2:9f:25:c1:d9:f4:18:
06:44:30:1e:87:b3:55:e0:50:fa:c4:8e:c3:40:4f:69:b6:71:
6a:4c:d5:1a:23:fb:7c:09:bb:86:df:a8:21:0b:74:d0:ea:27:
29:b0:d1:45:91:61:82:5a:01:ee:55:e0:9d:ff:01:9b:af:a5:
77:f5:30:8f:66:8b:e7:8d:65:aa:72:93:c6:83:40:22:94:1d:
f4:70:38:b2:f0:cc:aa:56:b7:36:60:d2:6f:9d:f0:27:ae:89:
5a:30:74:51:15:3d:ed:89:0c:d3:89:b5:99:d2:bc:c8:e8:79:
e0:eb:6d:f1:b9:3f:ef:b8:e1:1f:7e:79:16:94:1b:58:68:de:
62:a7:d2:00:53:6d:8d:45:21:75:38:fa:47:6c:f9:29:f5:6c:
aa:5f:a7:52:f7:8c:c9:fa:50:be:0c:6f:47:03:6f:4c:3a:56:
56:a7:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:32 2023 by rpki-client on console-fra.rpki-client.org