Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/xFJ0Y2VySukBCAdunZymQ152Y14.roa
File: xFJ0Y2VySukBCAdunZymQ152Y14.roa (raw, json)
Hash identifier: bH2IGaDKKky8rVweN4gSxD+3ST/oVZMGrAgmlPFAEug=
Subject key identifier: C4:52:74:63:65:72:4A:E9:01:08:07:6E:9D:9C:A6:43:5E:76:63:5E
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 05DD962D
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/xFJ0Y2VySukBCAdunZymQ152Y14.roa
Signing time: Sat 01 Jan 2022 10:54:40 +0000
ROA not before: Sat 01 Jan 2022 10:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20570
IP address blocks: 194.127.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98407981 (0x5dd962d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Jan 1 10:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c452746365724ae90108076e9d9ca6435e76635e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:34:3d:44:bc:31:36:b1:36:a9:79:e4:71:
1e:9b:12:83:9e:50:4a:d2:f0:a3:2c:00:f2:f1:9d:
4f:c4:4e:d3:3e:12:82:a8:9a:6c:c7:65:d7:0c:1d:
2f:a6:b1:77:bb:05:ba:75:44:c0:87:cb:86:1f:45:
73:50:7a:28:11:0f:08:c2:47:7d:73:e5:5c:d2:dc:
1b:45:3b:41:96:3d:00:16:ad:0c:b2:0e:0e:b4:c6:
29:6a:cc:1b:59:df:4b:7e:d5:b8:79:c9:ca:85:37:
b1:b3:7e:6d:e6:cd:ac:e1:c9:ae:70:97:5c:83:6b:
fb:44:48:48:fa:32:75:57:da:58:cb:9a:44:35:97:
e7:18:41:25:76:a9:44:2b:a1:bd:79:ac:d9:09:c2:
10:93:05:87:56:37:f4:f8:a4:bc:89:50:67:2e:f5:
01:77:4e:ec:98:0d:f2:59:54:fb:27:fd:79:3e:87:
7d:74:2e:a6:e1:fb:d6:6a:68:30:0d:a8:87:9f:5a:
04:84:85:d3:be:40:bf:cd:99:ba:7d:df:44:47:a0:
09:08:23:7c:31:4e:03:f1:11:43:61:34:17:d9:87:
ae:c4:7d:aa:f4:56:c1:8f:c4:76:61:bd:9e:d2:ce:
d7:7e:a1:b9:83:76:81:84:46:03:7b:11:c7:3b:9a:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:74:63:65:72:4A:E9:01:08:07:6E:9D:9C:A6:43:5E:76:63:5E
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/xFJ0Y2VySukBCAdunZymQ152Y14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.208.0/22
Signature Algorithm: sha256WithRSAEncryption
85:ae:58:af:37:9a:57:bc:ae:8b:4f:c8:71:05:9a:48:7e:1e:
94:ca:ad:6b:4f:03:93:18:be:2e:a1:e6:21:bc:cd:d3:9f:c5:
43:3f:6f:22:d8:d5:d2:85:b1:80:aa:57:eb:ec:8a:51:08:e3:
ae:80:16:7e:75:a5:4e:f9:a2:33:c4:a9:40:55:90:ae:86:e8:
10:97:a7:1c:0e:fd:b4:11:42:31:93:f8:6b:d0:ae:ba:64:fb:
a9:39:50:04:7c:f7:e6:db:96:b7:e5:e4:56:bf:0d:99:64:c4:
21:8c:36:52:74:5f:c9:2d:29:1a:78:28:7a:c9:3e:b4:1f:fa:
6b:a6:b9:b2:a9:bc:74:15:76:f5:ec:23:51:a3:37:8b:1d:2b:
8c:58:40:ce:1a:74:24:9d:1e:5d:48:b1:5e:42:1b:6f:b2:7d:
f3:20:7e:f0:df:b1:3c:da:b0:27:df:73:30:49:ea:b1:75:11:
a3:37:52:b0:a0:bf:61:c9:68:9b:3d:0d:77:e4:0a:a9:42:e9:
99:e6:74:ad:a0:e6:f3:5e:bf:11:79:dd:25:50:f8:3e:4f:7f:
ac:86:8f:00:d4:ba:a3:3a:72:8d:bb:31:12:78:1f:66:91:32:
b1:54:b7:2d:ca:3b:ea:f4:39:57:c7:c1:d2:f5:6b:72:9f:01:
c5:06:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:42 2024 by rpki-client on console-fra.rpki-client.org