Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/locZGYo8CKJcAd00MmFQ1T60-3c.roa
File: locZGYo8CKJcAd00MmFQ1T60-3c.roa (raw, json)
Hash identifier: FamNjfC92db9afxBUhgz97xGkyznG6DnVkxaUQ/JkOw=
Subject key identifier: 96:87:19:19:8A:3C:08:A2:5C:01:DD:34:32:61:50:D5:3E:B4:FB:77
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C469678
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/locZGYo8CKJcAd00MmFQ1T60-3c.roa
Signing time: Sat 01 Jan 2022 07:55:42 +0000
ROA not before: Sat 01 Jan 2022 07:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213129
IP address blocks: 195.178.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474388088 (0x1c469678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=968719198a3c08a25c01dd34326150d53eb4fb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:a2:18:a3:58:3c:9c:64:35:9b:15:03:cd:
ba:eb:77:18:9e:6e:59:dc:3d:02:df:28:4e:c8:84:
fe:e3:fb:5d:cd:0f:71:b4:a1:ed:e4:8b:8c:60:fb:
f3:c2:4f:cf:48:29:62:19:2f:55:74:90:91:7d:43:
85:a2:ed:6c:ac:a9:ec:c3:21:4c:18:81:fb:a2:c6:
75:67:f2:a6:0d:60:6e:3b:82:ea:1e:2f:17:3f:ea:
e4:54:db:eb:36:e3:22:f0:3e:32:25:1f:03:58:0c:
c6:15:99:98:21:aa:fe:92:7a:f8:14:2e:5a:8a:66:
ae:28:c8:b3:27:fd:c1:7a:c6:b9:84:1a:fd:69:9e:
d3:a5:91:6e:48:75:5a:0b:86:16:54:7b:f6:0c:cb:
89:5e:53:f1:99:6d:4a:29:86:62:e7:32:e3:4f:a6:
c3:5a:9e:26:1f:60:12:df:7b:70:d7:9b:5c:45:49:
11:e9:86:32:41:01:72:4b:b8:d7:5b:02:84:b2:c4:
52:3f:0d:34:fa:34:80:f0:d8:f5:a9:78:17:8d:e6:
bf:45:6b:c1:66:38:81:56:39:ae:c0:98:72:40:5d:
18:1a:9a:14:5a:8e:e7:fa:4b:45:a3:0e:7f:58:7b:
03:be:35:d5:cf:55:c6:95:49:71:7e:93:7a:e6:05:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:19:19:8A:3C:08:A2:5C:01:DD:34:32:61:50:D5:3E:B4:FB:77
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/locZGYo8CKJcAd00MmFQ1T60-3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d5:1f:26:91:8d:8f:04:9f:ae:08:ff:bd:9f:4f:c4:3e:5c:
6c:20:ad:c0:ec:53:0d:94:8a:ed:92:36:c4:58:bc:5b:19:31:
38:41:47:3d:28:16:c5:c4:65:e6:0f:9c:2e:91:7e:68:41:2f:
48:1a:27:21:e2:e6:c5:d2:53:6e:05:b7:98:0f:f0:c2:f4:6f:
73:24:9d:05:b7:7e:13:f9:fa:0d:76:1a:5d:0e:3b:a3:a2:d7:
50:4d:2f:f7:82:f7:74:1d:a7:d7:eb:72:e8:f2:5a:94:fc:e8:
50:14:a1:d4:36:7c:0d:77:9f:d6:3b:c3:f5:d0:1c:cf:56:4e:
69:16:81:d3:fe:a9:44:21:0b:83:17:24:9d:70:86:99:12:00:
a5:db:af:8a:57:a2:52:19:18:b6:b5:15:a0:9d:f9:6f:46:4a:
ca:1d:38:2c:38:c6:54:38:42:7f:c4:c9:27:5b:1a:a4:9e:de:
fc:f7:47:63:ae:26:8a:0d:3c:1d:4e:d6:18:33:2c:22:69:43:
60:19:9d:1d:62:7e:4c:2c:aa:33:04:35:30:de:86:a0:73:15:
12:9f:8e:d1:4c:68:bd:f9:7d:0b:5e:06:06:54:e7:96:b2:7e:
73:b9:da:b2:5c:da:c2:fd:1b:a7:4b:a7:bd:fe:34:6d:71:03:
6e:df:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org