Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ruh-rsxH4ZIFzbdAbhsPFCLj6vQ.roa
File: ruh-rsxH4ZIFzbdAbhsPFCLj6vQ.roa (raw, json)
Hash identifier: 9rHGedGOoup1dJWp5ClsaHMKOP5yvT9LBvk1Je+FH/g=
Subject key identifier: AE:E8:7E:AE:CC:47:E1:92:05:CD:B7:40:6E:1B:0F:14:22:E3:EA:F4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C44C88F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ruh-rsxH4ZIFzbdAbhsPFCLj6vQ.roa
Signing time: Sat 01 Jan 2022 07:55:42 +0000
ROA not before: Sat 01 Jan 2022 07:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209845
IP address blocks: 195.178.148.0/23 maxlen: 24
195.178.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474269839 (0x1c44c88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aee87eaecc47e19205cdb7406e1b0f1422e3eaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:70:6c:9d:26:f0:af:bd:71:1c:51:05:7f:
e5:73:51:3e:35:ff:2a:a1:03:de:17:17:d9:97:96:
7c:38:b2:ec:9b:75:d2:2e:5f:a6:94:4b:44:a3:7e:
ef:a3:22:0f:fc:81:9b:46:0d:ca:1c:b6:fc:46:1a:
54:f4:78:f5:30:1f:d5:71:f6:07:7f:23:12:2b:d0:
b4:28:e8:3d:48:7a:31:06:d0:b6:be:66:ae:de:e0:
f7:d5:b8:e9:76:e3:f8:14:5b:0a:a4:c3:0b:e0:30:
13:56:36:d3:0d:1e:8d:0e:28:5e:93:6b:28:3c:bd:
d6:11:93:08:38:5d:83:26:d6:93:21:0a:bb:c1:07:
87:10:92:35:cd:0f:bb:94:8b:58:90:f0:22:dc:0a:
c9:02:2f:0f:04:17:99:1b:17:c0:c1:94:1f:bf:1a:
91:f4:f0:eb:d6:aa:04:14:c3:c5:e3:b2:9e:49:01:
c9:7d:64:1c:88:09:d8:33:a5:12:86:03:d6:0a:5b:
00:08:85:1c:08:66:71:94:95:6d:62:cb:c0:0a:64:
ed:a0:2b:b3:34:ef:54:25:5a:5f:e0:20:f2:88:94:
54:d1:fb:84:6e:17:7f:06:7a:74:e2:27:2f:d1:2b:
01:e0:ab:a0:84:df:a5:ad:bf:5a:eb:08:81:06:dc:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:7E:AE:CC:47:E1:92:05:CD:B7:40:6E:1B:0F:14:22:E3:EA:F4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ruh-rsxH4ZIFzbdAbhsPFCLj6vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.148.0/23
195.178.151.0/24
Signature Algorithm: sha256WithRSAEncryption
46:79:79:39:7c:2f:d8:a1:51:07:a9:88:90:ff:69:02:f3:de:
3f:bb:f8:f5:89:8c:e9:96:e7:54:84:b9:73:78:f6:8c:a9:2f:
7b:e8:d2:ca:70:03:4c:80:eb:16:03:67:72:74:b3:3b:74:19:
e0:4e:51:87:6d:e6:16:3f:50:3b:7f:25:fa:36:7d:c1:72:73:
f1:8b:e2:5d:bc:0e:e5:eb:75:5a:5f:4d:d0:63:62:e9:32:f2:
15:69:17:4a:9d:69:99:fb:de:7b:0b:c0:e8:14:ff:dc:22:ed:
d9:6d:5e:33:a9:91:6c:79:0b:c3:4f:34:7a:04:1d:44:59:61:
f2:88:21:b3:09:25:d7:ad:74:31:23:20:4f:ba:8e:7d:d4:9f:
0f:c0:c7:e6:8f:57:ad:3a:26:a2:ae:13:2c:d8:a8:b0:a0:74:
e4:ec:87:ba:cb:1c:50:ac:e8:0b:f5:2c:73:d7:a3:b6:39:5c:
8c:94:e3:37:f8:a8:b2:f2:a6:cd:15:90:85:f1:11:6d:f9:21:
50:10:a0:78:e5:1d:07:59:a9:56:c6:fb:5c:53:1d:a6:06:ce:
c7:af:8b:3a:7b:a6:28:21:48:39:e7:77:3a:20:e3:53:82:c4:
c0:d4:74:7b:19:d7:e1:6d:d9:25:95:2e:ce:b5:f9:ee:3d:fa:
18:9e:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org