Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2asl5ty2E_sYuOdI81JuvU1lrxw.roa
File: 2asl5ty2E_sYuOdI81JuvU1lrxw.roa (raw, json)
Hash identifier: yuMK1wS7uNVfG2fquwlEaZTclBhqDEfdTm+8oQmmruE=
Subject key identifier: D9:AB:25:E6:DC:B6:13:FB:18:B8:E7:48:F3:52:6E:BD:4D:65:AF:1C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01838392F0E9ACA13671051181DB6479A1F2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2asl5ty2E_sYuOdI81JuvU1lrxw.roa
Signing time: Wed 28 Sep 2022 10:09:48 +0000
ROA not before: Wed 28 Sep 2022 10:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.144.0/23 maxlen: 23
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:92:f0:e9:ac:a1:36:71:05:11:81:db:64:79:a1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 28 10:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9ab25e6dcb613fb18b8e748f3526ebd4d65af1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:50:70:71:88:b9:38:58:70:8e:3d:05:a1:
d3:21:12:53:78:e8:72:b1:59:c7:c3:01:b1:d1:e8:
ac:fb:6f:0b:e0:90:4e:ed:07:86:20:c0:b2:bf:81:
28:91:4f:3c:9d:b2:72:47:4a:62:74:e4:aa:18:bf:
b8:fd:f1:89:9e:e2:31:e5:3e:fe:f8:b1:6c:32:50:
66:be:02:ee:5c:f0:e9:78:32:bb:bf:72:96:83:70:
e6:e9:a3:31:49:99:7a:70:ae:26:bd:b3:32:52:f0:
48:3f:ac:ea:59:9b:df:67:f4:65:c0:48:dc:f2:c2:
9e:d7:54:7d:bd:fb:9b:70:59:4e:67:c2:30:ad:b3:
f9:ce:0e:d5:21:34:a0:bf:18:76:30:f0:5f:14:13:
a8:30:7b:c9:2a:d6:ff:07:39:71:15:0a:6e:68:8b:
c5:60:84:24:46:05:20:f8:3d:7c:49:23:e8:1e:50:
25:8b:48:1b:e6:ab:f4:c0:5c:00:90:45:b1:5b:ac:
0f:8f:d1:cb:38:91:fd:a9:01:2a:e8:9e:64:96:cb:
83:64:36:25:af:2d:a4:fb:b7:f5:dc:36:ed:88:a4:
66:47:5b:dc:15:3b:b7:9a:38:30:01:97:dd:f7:2d:
99:49:66:37:07:ae:c7:84:f0:ab:2e:90:36:a1:de:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:25:E6:DC:B6:13:FB:18:B8:E7:48:F3:52:6E:BD:4D:65:AF:1C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2asl5ty2E_sYuOdI81JuvU1lrxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.144.0/23
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5f:23:fb:cb:bf:30:4b:36:7a:a9:76:fc:de:6d:b0:69:c5:
3b:0a:c3:51:37:96:a1:a9:12:37:62:58:7b:3c:4c:65:10:02:
c8:60:90:cf:d6:ff:2a:f7:2e:52:d8:c0:fb:94:3f:25:d0:d0:
51:22:c3:13:48:3b:03:03:19:b5:aa:cf:44:d9:79:49:90:c8:
33:e6:0b:82:f2:c0:b9:16:f0:57:42:6e:cd:7f:62:79:ae:f1:
ad:a9:11:9e:40:c5:80:ff:d8:1a:01:0e:1f:d2:41:75:ca:02:
8a:58:25:c6:f9:3b:84:f5:7b:31:8a:00:e0:84:58:a8:59:9d:
8e:54:07:5b:07:9c:49:4e:7b:44:74:aa:11:46:5c:71:9e:57:
40:81:65:87:6f:09:c0:6e:8e:5b:41:dd:a2:fc:62:76:67:3f:
77:ff:ce:da:5b:43:ed:19:41:1a:78:22:fe:39:92:ec:4a:7e:
a6:68:47:30:d0:b6:18:a2:c0:5e:6f:39:4d:7a:53:db:73:42:
a4:03:9a:e8:6f:62:03:c8:14:35:2c:19:7b:51:df:0b:0c:98:
8e:74:aa:53:74:92:23:1a:55:51:59:31:5c:a6:a9:81:8e:76:
0a:5d:70:96:21:83:de:4f:d6:f9:68:a4:81:c0:28:d5:c7:c8:
52:d0:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org