Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/NQ2t3X3omn4hjkU4MeNINFkcQ2I.roa
File: NQ2t3X3omn4hjkU4MeNINFkcQ2I.roa (raw, json)
Hash identifier: RxIbJ+tSjqygOmYonnOpChzhpTeAVdnKfmqIl9erL0s=
Subject key identifier: 35:0D:AD:DD:7D:E8:9A:7E:21:8E:45:38:31:E3:48:34:59:1C:43:62
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: C80F
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/NQ2t3X3omn4hjkU4MeNINFkcQ2I.roa
Signing time: Thu 02 Jun 2022 10:54:20 +0000
ROA not before: Thu 02 Jun 2022 10:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29533
IP address blocks: 194.146.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51215 (0xc80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jun 2 10:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=350daddd7de89a7e218e453831e34834591c4362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:2a:7c:dd:b5:39:71:22:16:ed:6e:ee:ce:
88:3d:78:ca:16:32:37:b6:ac:54:da:5b:ab:ee:0b:
e2:92:18:ef:1a:d7:52:46:f6:88:6e:2f:7e:5d:d4:
fd:c2:e0:2e:60:05:94:cb:8d:d8:0f:f5:c0:9f:cd:
aa:fa:0c:77:48:98:82:84:4e:29:55:f9:22:cb:d3:
d4:d0:43:9f:64:70:f7:3c:22:bc:e6:2d:ba:0c:f1:
63:2a:74:94:91:83:65:f6:ee:3d:3f:71:f7:03:e7:
c4:de:32:1d:3b:1f:f6:e4:b3:20:39:89:95:1b:74:
b2:15:b3:ee:be:8d:d7:94:f5:ea:ca:51:05:ba:53:
1b:30:58:90:de:5f:e9:e3:f1:c1:93:0f:b4:1c:0a:
01:5e:e7:d3:a8:46:ac:7a:bc:d5:84:3b:35:b4:b0:
39:d1:f9:97:3c:8f:08:8f:41:62:37:88:b4:6a:96:
fa:95:28:f3:26:c4:16:a2:34:66:a8:6d:73:6f:77:
65:20:9f:93:07:18:ec:1a:6c:4e:0f:9f:82:dc:29:
74:e8:7b:68:a1:22:10:c7:c0:a9:aa:63:8b:4e:c1:
ea:63:f5:e7:51:7b:2a:a0:48:64:54:95:29:2c:f5:
e7:74:b4:7c:8f:aa:99:10:4f:a9:ee:d0:b0:7b:04:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:AD:DD:7D:E8:9A:7E:21:8E:45:38:31:E3:48:34:59:1C:43:62
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/NQ2t3X3omn4hjkU4MeNINFkcQ2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3c:9f:14:50:d3:ca:e8:44:d8:d6:4c:a0:cc:83:84:4a:90:
62:c2:2c:b3:72:89:10:4e:f7:83:b3:d4:7e:5d:16:8d:94:c3:
db:75:30:84:aa:43:b6:5f:6f:f2:2d:fd:8c:a8:04:3c:cd:d8:
7d:5b:28:63:02:18:f7:e5:cd:d9:0b:0b:79:68:f6:4a:77:32:
5d:b5:19:ba:21:55:cb:b2:78:4e:bf:2a:0c:d2:02:86:f7:74:
68:f2:fe:56:de:26:56:26:1c:66:6c:d4:f9:0b:b9:72:c4:b8:
2d:f1:57:a2:c9:01:9d:80:b0:43:17:78:7f:83:90:38:e6:55:
4b:02:4a:b1:90:5f:42:82:9e:a4:5e:60:3b:56:ff:ef:bb:cd:
f5:3f:1f:aa:cc:bc:87:de:d8:61:37:9e:fd:7e:76:80:ef:1f:
ee:b0:53:a3:f2:8a:66:7e:d7:1a:f5:62:ed:a1:b8:61:c4:84:
4f:9c:51:00:af:8a:22:b9:bf:04:f0:46:2a:20:2c:70:1d:ad:
e3:bd:46:06:c6:85:bf:24:75:13:e9:35:b0:cc:d7:19:d8:48:
fc:c8:24:4d:f4:54:e6:f1:51:75:1a:d6:37:f6:2f:45:44:08:
61:d5:f3:4c:dc:17:84:6c:cb:82:27:f2:bf:43:81:4f:1c:95:
09:38:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:12 2024 by rpki-client on console-ams.rpki-client.org