Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7HHQ--ZIfA64ogHMx7MS_WBO_UQ.roa
File: 7HHQ--ZIfA64ogHMx7MS_WBO_UQ.roa (raw, json)
Hash identifier: dm9b69SkskuXop1uHz9VbY2y1R9wO4+xx2csK/Vbt+Y=
Subject key identifier: EC:71:D0:FB:E6:48:7C:0E:B8:A2:01:CC:C7:B3:12:FD:60:4E:FD:44
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01847AB135525A109A5CC9B2DD7B42EEF347
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7HHQ--ZIfA64ogHMx7MS_WBO_UQ.roa
Signing time: Tue 15 Nov 2022 09:49:04 +0000
ROA not before: Tue 15 Nov 2022 09:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 195.178.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:b1:35:52:5a:10:9a:5c:c9:b2:dd:7b:42:ee:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 15 09:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec71d0fbe6487c0eb8a201ccc7b312fd604efd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:5c:dd:cb:6d:65:eb:eb:2d:aa:22:71:0e:
bc:1b:c4:7f:71:20:30:e0:c4:f3:c5:fa:79:bf:84:
df:43:97:6e:67:79:f7:54:e9:48:c0:52:47:80:47:
58:48:b5:10:bf:05:c2:85:7d:e5:d4:61:af:bf:7a:
dd:e6:94:66:9e:30:9b:10:73:2a:f5:2f:2e:02:aa:
81:3c:f3:92:11:d8:e9:95:f4:fa:5e:59:01:a5:21:
3e:00:29:11:03:ee:57:f5:37:4d:9b:5f:6d:22:97:
10:af:19:ab:89:2b:ed:96:89:6f:33:cb:e6:14:cc:
fb:9d:52:eb:04:a1:20:a4:44:af:59:a4:42:c8:17:
b2:c1:ae:73:d6:53:af:93:44:fc:fc:f4:bc:e9:ed:
be:a2:00:81:3c:f3:63:32:56:7e:7c:7e:ee:d8:b6:
32:ef:10:7c:58:89:89:41:59:c0:48:69:20:43:9c:
25:b2:b7:dd:29:0a:d7:9a:f1:c7:10:11:13:c1:54:
04:a9:43:9c:ba:50:ed:75:d1:58:70:51:6e:04:76:
9b:c5:ea:64:f7:9c:14:da:f3:8b:c2:47:f0:9c:6f:
ed:ef:39:11:cb:f9:0d:9f:7a:44:df:7e:ea:c9:c7:
3b:94:b5:56:e8:38:82:52:11:9f:20:3d:22:f2:17:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:D0:FB:E6:48:7C:0E:B8:A2:01:CC:C7:B3:12:FD:60:4E:FD:44
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7HHQ--ZIfA64ogHMx7MS_WBO_UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e9:0e:44:f3:a2:91:58:16:80:2c:6a:c4:16:1a:9a:48:6c:
06:e4:82:b3:4e:b1:3a:b4:09:92:bb:81:47:d3:06:59:e7:69:
f9:68:ca:d1:ba:5f:54:75:f3:f8:af:9f:9c:a0:55:d3:c9:ad:
c2:f4:16:b6:87:27:d0:dd:c0:fd:b7:f8:00:cf:b3:0b:98:45:
da:3e:90:89:bb:8a:44:c0:81:ab:9d:c5:d8:a0:d1:78:d2:96:
6b:98:5a:5f:1f:d1:31:3f:15:ac:b7:f8:9f:a2:fb:87:ae:94:
14:93:1c:f5:2c:26:96:b8:f6:fa:69:08:48:44:b5:89:0f:be:
2c:ee:e1:ea:ef:c9:aa:dc:d1:eb:3d:2b:ac:44:f7:0b:c5:e0:
ef:f3:52:11:35:a3:e0:32:75:1d:a4:d2:f9:57:b3:ef:82:4d:
4a:13:13:4c:6b:bc:ae:d1:84:a9:fc:67:2f:8e:dc:23:fa:bc:
a1:86:82:3e:d1:07:88:70:9d:46:ea:b1:8c:83:76:c9:13:84:
57:d1:f1:eb:99:ca:7a:98:77:9e:7e:13:41:a8:4e:d4:4c:30:
c6:c2:b4:8d:c8:00:88:ed:c3:2d:e1:c7:33:64:e8:be:50:bf:
49:af:84:aa:5a:61:63:bd:95:be:f5:82:a4:1f:b1:22:16:df:
1c:6b:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org