Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-LrWI_zSwRte8FNKbMOzEaCw9CE.roa
File: 1-LrWI_zSwRte8FNKbMOzEaCw9CE.roa (raw, json)
Hash identifier: KAF4MYM7999IV2UgFWNzu9R0R/qNGsDQngsMnvvvoJA=
Subject key identifier: F8:BA:D6:23:FC:D2:C1:1B:5E:F0:53:4A:6C:C3:B3:11:A0:B0:F4:21
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D3AD2AA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-LrWI_zSwRte8FNKbMOzEaCw9CE.roa
Signing time: Thu 24 Mar 2022 20:11:17 +0000
ROA not before: Thu 24 Mar 2022 20:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
195.178.128.0/24 maxlen: 24
195.178.129.0/24 maxlen: 24
195.178.131.0/24 maxlen: 24
195.178.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490394282 (0x1d3ad2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 24 20:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8bad623fcd2c11b5ef0534a6cc3b311a0b0f421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:3c:91:62:b8:7e:ed:3d:49:b4:2e:22:bb:
4f:81:e5:49:d7:e0:12:6f:35:e2:33:a8:ea:27:54:
08:a5:b9:06:dd:63:d4:9b:82:a1:f1:9b:ad:8c:84:
af:48:ea:bd:f8:15:93:c7:b1:23:00:72:74:cf:b2:
76:fc:44:9c:43:37:91:d7:18:dc:d4:c5:62:a5:2d:
21:59:e3:c5:2b:98:22:6f:79:53:08:9a:1f:2e:71:
ef:39:8e:16:c4:a8:21:f6:c2:11:e8:51:b4:b0:2e:
03:14:3e:d1:81:53:f0:a0:a4:8c:3f:a2:b2:4f:a4:
bf:de:6e:80:41:b8:c8:b6:17:63:18:dc:1f:37:57:
5d:3c:09:f9:5b:a5:7a:7b:67:ea:14:81:78:67:4a:
59:43:80:d6:9c:db:b7:52:9e:7b:39:1d:87:f1:7a:
81:40:f5:2a:8a:39:f7:60:32:12:50:2e:df:e2:05:
89:78:46:eb:e0:43:1e:94:06:fe:d4:d3:81:a9:4b:
3f:d0:22:d5:85:90:4a:ca:a1:a6:05:90:bb:b5:f0:
45:1d:3d:57:66:3e:ac:6a:ac:ff:85:c5:6d:68:a4:
ce:85:7f:57:90:7e:b2:de:72:fc:96:a0:45:f2:51:
be:eb:da:57:82:cc:0a:9c:4d:82:a8:6c:c3:68:6f:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:D6:23:FC:D2:C1:1B:5E:F0:53:4A:6C:C3:B3:11:A0:B0:F4:21
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-LrWI_zSwRte8FNKbMOzEaCw9CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.128.0/22
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c9:a6:ee:92:67:9d:3a:2d:d7:ea:3a:11:fa:55:91:a5:eb:
44:8b:7c:3a:67:fc:c0:5a:18:e8:c6:99:d2:11:a0:e8:f7:16:
ae:34:ce:3f:d5:3f:9e:1e:e3:ee:21:ee:1a:21:28:80:40:c5:
c6:f3:de:ba:af:ce:79:fe:eb:c0:11:86:6e:f2:55:fd:be:3d:
39:c5:bd:8e:e4:93:13:58:90:9a:e8:7f:2e:b3:0d:6f:bd:ca:
6e:34:62:9e:12:87:b9:8a:54:68:18:a3:79:9c:b6:fa:15:e0:
b4:64:8d:db:16:9b:6b:12:6e:3b:04:46:c6:13:bb:66:a7:06:
77:9b:32:ee:6e:ad:64:85:0b:b2:f6:be:9b:60:73:91:af:1a:
1c:44:0f:9f:d7:54:2e:64:8a:d7:18:cc:47:0b:fd:c4:49:70:
85:33:1a:72:d6:10:40:a7:5f:83:81:6f:e9:50:b5:ff:e2:ca:
f0:24:03:92:26:d5:cc:a0:4e:ed:9d:f0:28:e6:2d:8a:d4:04:
36:20:90:f9:c9:7c:21:33:d5:2a:73:2b:bb:b9:08:a2:b6:04:
cf:ef:b6:a2:56:91:39:21:54:71:6f:b1:c7:28:a0:10:99:0e:
e0:1b:db:c1:b8:48:c6:5d:c4:1d:86:c0:6c:2d:e5:d2:ba:de:
b0:8f:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org