Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/cgx7OWXjKUpIXLses4gdODqh0Os.roa
File: cgx7OWXjKUpIXLses4gdODqh0Os.roa (raw, json)
Hash identifier: ZlvSiF6uZiRnJo5WzMeajKH5xVSLm+BG22Dv3szWbPQ=
Subject key identifier: 72:0C:7B:39:65:E3:29:4A:48:5C:BB:1E:B3:88:1D:38:3A:A1:D0:EB
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: B0DD95
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/cgx7OWXjKUpIXLses4gdODqh0Os.roa
Signing time: Sat 01 Jan 2022 03:53:25 +0000
ROA not before: Sat 01 Jan 2022 03:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39835
IP address blocks: 194.13.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11591061 (0xb0dd95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jan 1 03:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=720c7b3965e3294a485cbb1eb3881d383aa1d0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:c9:46:0d:06:c2:52:1b:05:55:71:f3:77:
96:a6:63:8d:cf:0c:fe:a6:ac:86:bb:dc:5b:c5:ec:
3e:18:09:9f:84:1a:85:f3:55:5d:50:d9:b7:0e:96:
c4:91:20:c6:0e:96:64:81:8a:77:0b:ed:44:a4:a1:
97:cf:38:66:27:5c:55:3a:75:14:36:2d:d0:13:fd:
fa:9f:4d:ea:41:f2:67:0c:c3:d1:3d:45:15:cd:bb:
71:4a:60:8f:73:c5:d7:d0:25:ea:ff:a0:ee:75:d1:
3e:6f:d4:52:bc:94:db:b8:8c:43:37:6b:81:8e:53:
22:71:21:ce:f8:2e:86:08:be:13:62:23:29:46:c3:
0a:17:58:72:46:ce:f0:a9:bd:d5:71:0c:a5:af:9b:
37:76:a0:34:1e:c5:b4:34:94:f2:57:02:a4:8a:13:
46:15:a0:bb:20:6f:4a:14:99:0c:2e:28:63:e1:5f:
08:6f:39:57:a2:95:53:e1:eb:0c:0f:e7:d6:1b:2e:
d9:fd:c1:58:df:29:66:98:61:91:92:f5:b0:e1:a0:
95:5e:74:7e:95:ef:ad:c5:3a:95:3b:6e:7c:7c:dd:
41:07:12:53:7a:30:19:19:b4:40:24:1c:47:ba:bd:
52:8b:9e:8b:c3:b4:25:66:a0:aa:b9:1f:6c:e7:8a:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:7B:39:65:E3:29:4A:48:5C:BB:1E:B3:88:1D:38:3A:A1:D0:EB
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/cgx7OWXjKUpIXLses4gdODqh0Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2b:db:f9:f1:7d:f9:32:f7:b4:16:b7:fa:c7:ce:af:14:84:
22:5f:b8:79:25:29:e5:1d:c6:cb:83:15:8a:67:f4:00:d5:54:
ba:a2:06:fe:30:9b:b4:59:88:6b:eb:3a:c2:76:9e:01:a7:5a:
66:63:4b:60:92:21:1f:3a:da:ee:99:24:65:8e:fd:76:2d:d6:
4a:45:2b:5f:6a:bd:5a:3c:3c:17:98:aa:9e:17:00:fc:ee:fc:
c8:81:61:c6:af:ef:06:5d:55:b8:fa:6f:c6:61:9c:ee:52:c0:
9c:fb:78:dc:8f:4b:93:54:cb:f5:1d:4d:69:03:c4:f7:fb:b5:
99:2d:6d:b5:92:5e:d9:35:81:5b:a9:3c:6f:e5:b4:ca:d2:4a:
d3:58:8e:8e:b4:36:f8:f9:36:25:66:9a:b2:47:8d:29:6a:8b:
54:6b:ea:05:b6:98:64:6e:c5:21:dc:49:41:1c:49:14:4d:c1:
5a:75:d1:e2:f7:2f:ca:16:f7:c8:ec:88:9a:d0:ef:e8:ce:98:
31:17:4a:dd:6d:1a:a4:ac:4e:a8:46:2c:0a:c4:1c:39:77:83:
16:40:6c:12:f0:7b:09:62:66:4a:bb:cd:09:82:6e:85:43:54:
a7:2f:16:8a:51:c5:52:dd:65:47:d2:1e:40:4e:8e:a1:ac:84:
d2:7f:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org