Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0Z0RZkixMdI-uvgywhhaZP3a2so.roa
File: 0Z0RZkixMdI-uvgywhhaZP3a2so.roa (raw, json)
Hash identifier: qYYdHiAeUtOcA72230V7DiHXbUKgye/tPTwN4DxHZ8U=
Subject key identifier: D1:9D:11:66:48:B1:31:D2:3E:BA:F8:32:C2:18:5A:64:FD:DA:DA:CA
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CA52285
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0Z0RZkixMdI-uvgywhhaZP3a2so.roa
Signing time: Tue 01 Feb 2022 16:56:34 +0000
ROA not before: Tue 01 Feb 2022 16:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 195.178.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480584325 (0x1ca52285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 1 16:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d19d116648b131d23ebaf832c2185a64fddadaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:3f:f5:ce:f5:06:a5:9e:71:c0:4d:d7:22:
be:ca:c8:87:40:c5:25:08:f1:d3:28:8e:5c:10:fb:
79:95:e7:f7:49:95:fa:e9:56:75:14:64:c9:b5:b5:
46:1e:90:3a:88:95:61:36:31:e3:b4:d8:d9:0a:19:
99:64:41:9c:49:3b:79:47:69:24:35:26:24:ee:f6:
6b:e7:8d:36:74:ce:6f:91:37:ff:7b:05:e2:9f:3e:
2c:e5:b0:fa:9d:73:a0:ac:a6:3a:9c:6d:d3:df:35:
71:c6:cd:2d:27:ed:e0:38:04:90:be:82:02:52:9d:
35:f5:4a:57:89:11:dc:b6:04:a9:62:d2:dc:f8:0b:
f9:65:66:2a:73:d8:f0:27:84:04:15:f7:c1:c6:9f:
e7:ec:38:93:94:2f:a9:33:42:65:2e:88:b0:a0:30:
71:87:6e:28:ab:52:62:a7:aa:a3:a0:4d:7b:93:2b:
82:81:ac:cd:c8:45:f7:32:74:27:b2:18:09:ac:37:
67:f6:75:30:9b:f9:8b:b8:dd:b2:f6:33:29:88:3b:
57:56:b3:e2:42:7e:75:99:90:8c:08:ae:03:b5:3e:
ec:9e:e7:4e:f1:58:4c:d7:72:f5:ed:9e:96:6e:3e:
5d:86:d0:29:62:66:6c:bb:55:39:cd:ad:02:a8:3a:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:11:66:48:B1:31:D2:3E:BA:F8:32:C2:18:5A:64:FD:DA:DA:CA
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0Z0RZkixMdI-uvgywhhaZP3a2so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.132.0/22
Signature Algorithm: sha256WithRSAEncryption
65:a6:9d:63:8c:2c:90:1f:40:13:78:98:62:cc:c9:ab:94:26:
47:08:2d:fb:8e:2a:92:b0:f9:63:73:9d:c3:0d:02:cf:b0:6f:
1d:8c:4d:c0:2f:07:2e:9a:db:48:ab:b1:f0:83:5a:c6:c6:8f:
46:59:0a:e8:4c:e7:5f:22:4c:5e:4f:85:c3:fb:7e:22:19:22:
8a:f9:34:5a:59:cb:12:d0:cf:1b:75:e7:f2:a1:f3:41:4c:7c:
0b:6d:88:1b:5c:fb:43:57:ad:47:1d:d8:a0:a6:c3:c0:d2:27:
89:6a:b9:e4:d4:0e:4a:09:9a:5b:4c:bd:eb:89:dd:58:c3:5a:
24:6d:23:82:60:05:18:00:a3:ed:48:e7:b1:9b:ef:b8:17:69:
1d:35:15:0f:f1:c3:df:b4:fa:2f:87:0c:56:9a:11:f4:ce:33:
e2:5f:e7:51:df:5f:e1:4c:c4:88:4d:43:f5:ec:91:01:04:55:
f3:56:cb:04:d4:fa:1f:be:68:2d:f9:ab:7f:69:37:e1:8f:78:
d9:cb:ae:7f:fb:82:0d:1b:bc:97:27:5f:c1:b8:d4:b1:a2:6d:
d7:5b:97:37:ad:52:65:e2:9d:50:1a:d5:68:2d:bc:99:08:04:
7e:23:ef:34:e4:f8:1b:29:9a:73:2e:9b:64:c3:43:78:a8:e9:
13:35:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org