Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/f8CiDv8geGalbY2dmFk5JD_LOUU.roa
File: f8CiDv8geGalbY2dmFk5JD_LOUU.roa (raw, json)
Hash identifier: GxmKnO7kMRi59gQDze6yy5EO5TGWSXm3k/eDu+Cj2vg=
Subject key identifier: 7F:C0:A2:0E:FF:20:78:66:A5:6D:8D:9D:98:59:39:24:3F:CB:39:45
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01821B62E71F55CD3C990F81420667443D54
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/f8CiDv8geGalbY2dmFk5JD_LOUU.roa
Signing time: Wed 20 Jul 2022 11:34:02 +0000
ROA not before: Wed 20 Jul 2022 11:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 194.107.160.0/24 maxlen: 24
194.107.162.0/23 maxlen: 24
194.107.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:62:e7:1f:55:cd:3c:99:0f:81:42:06:67:44:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jul 20 11:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fc0a20eff207866a56d8d9d985939243fcb3945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:f6:12:c6:94:37:2c:36:d9:43:ce:ef:43:
2c:2d:c7:a7:6a:db:ad:87:ab:ea:5f:ec:c1:f8:b3:
12:cc:f4:53:52:1c:ab:d6:1b:b0:42:cc:f8:d1:1b:
f5:b2:da:be:9e:43:b0:d6:33:8b:c2:b5:5b:f3:52:
84:91:ff:7f:27:1b:f5:0b:c9:98:a4:7c:d4:cf:e7:
c5:f1:38:bf:81:4c:04:f1:3e:0d:58:e4:53:65:8e:
31:17:92:c7:26:99:7a:09:04:65:7e:f1:c5:8f:2e:
a1:4b:ef:7e:a1:9d:68:b4:e8:eb:d5:b4:a6:40:c0:
47:80:96:b1:09:7b:df:bf:42:e3:a4:5c:12:9b:f6:
c5:68:c5:2f:e6:13:78:3f:9f:00:4a:43:9e:fb:5a:
e4:4f:1c:23:29:04:eb:f4:8e:08:41:62:64:75:28:
f5:2f:45:b2:43:88:19:3b:21:00:99:d4:e1:95:87:
a6:dc:d8:a9:9b:e8:89:22:98:8f:f2:77:da:a5:06:
3e:1f:20:01:c1:e5:c9:64:af:44:f2:3f:be:b1:e1:
86:78:38:b6:d8:40:07:0e:0e:ce:f8:d0:c8:2f:42:
da:c9:d1:42:43:c4:45:7e:ff:8e:d5:14:3d:60:85:
29:23:d0:2f:55:cd:84:d6:78:76:5a:97:8e:64:b4:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C0:A2:0E:FF:20:78:66:A5:6D:8D:9D:98:59:39:24:3F:CB:39:45
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/f8CiDv8geGalbY2dmFk5JD_LOUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:fb:6c:14:26:d9:a7:be:d4:ea:4f:ec:09:c1:dd:cf:c1:42:
ed:59:3c:65:f3:dd:d7:9b:a2:31:7a:6c:bc:36:95:67:db:00:
f7:9b:36:2b:0d:2c:16:d9:0b:d2:cc:f5:84:de:42:73:0a:eb:
d6:3d:17:23:da:53:6f:70:45:88:30:5e:09:91:49:79:87:1f:
14:bc:8d:35:f3:39:3d:61:d2:0e:28:79:93:88:7c:0e:52:02:
37:34:ab:f5:c5:f3:a9:e7:b4:5d:44:8b:21:33:78:bc:ce:02:
2c:25:62:e7:e7:69:0a:52:70:6e:f2:eb:e5:98:61:91:33:8b:
db:c2:3d:95:91:16:2b:fd:fc:40:94:30:38:a3:71:83:41:91:
84:17:c2:40:37:03:8d:3e:39:e4:7e:a3:fa:0a:df:4c:84:e6:
90:a1:ad:cb:00:b9:7f:20:98:72:88:7d:30:9c:1e:23:37:69:
5f:30:88:2e:b4:8a:b0:3f:33:10:a8:bd:6a:94:6c:91:34:d1:
49:c4:eb:af:93:5c:30:93:54:fb:6b:9f:4c:ae:06:ca:ff:5e:
9d:45:b0:85:0d:64:df:33:4e:82:9f:06:1f:4c:41:81:36:e6:
d2:73:30:b4:be:c9:63:89:26:1d:88:ae:61:f9:ab:20:17:05:
5f:54:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org