Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tHih9TYDkFPDB8TTuDelrRe8FMU.roa
File: tHih9TYDkFPDB8TTuDelrRe8FMU.roa (raw, json)
Hash identifier: at+LQ6lIACCIwnW31nFXcfX3x7C1B+nQpvOXU7PrkJ8=
Subject key identifier: B4:78:A1:F5:36:03:90:53:C3:07:C4:D3:B8:37:A5:AD:17:BC:14:C5
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C42BB0A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tHih9TYDkFPDB8TTuDelrRe8FMU.roa
Signing time: Sat 01 Jan 2022 07:55:40 +0000
ROA not before: Sat 01 Jan 2022 07:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208643
IP address blocks: 195.178.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474135306 (0x1c42bb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b478a1f536039053c307c4d3b837a5ad17bc14c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:d9:5c:26:b1:30:9e:09:64:48:e4:58:26:
cd:6a:7d:f4:75:04:3b:e4:3b:a6:04:b9:e6:62:d6:
8e:36:8a:25:48:72:89:ca:8f:f8:d2:41:25:d6:5c:
9b:c9:a0:b6:c9:72:f0:60:2f:8b:22:31:1b:c8:4a:
fc:3f:e7:8e:60:26:e6:0f:a7:ea:47:90:4b:48:b1:
8c:9d:56:7f:3a:9d:a4:3a:98:bb:9c:c9:1c:a8:a8:
60:99:bd:88:3f:2c:5e:80:0f:0b:52:a8:93:d3:35:
25:4b:ce:ee:5b:a9:04:a6:a6:3d:05:f0:3c:3d:7d:
e6:1b:e7:49:d6:28:99:76:15:ad:48:0a:c1:11:4c:
78:da:ce:0f:86:39:f7:9d:c0:7a:d6:cc:e4:92:a1:
f0:87:e3:38:ac:ad:c7:26:84:c0:5d:d5:4f:bc:7d:
b8:75:97:36:30:d5:c5:8f:7b:a0:40:94:30:92:5a:
ea:ed:53:9a:be:b3:d4:e4:25:3d:07:38:03:51:a2:
94:c3:5c:36:1c:e7:07:74:fc:e0:58:12:dd:79:8c:
24:b5:a4:a6:31:26:db:83:6a:2e:ea:ce:fb:8a:34:
6d:2f:b2:ce:16:f2:89:53:47:66:7f:cc:d8:bf:22:
59:e7:a2:b6:3c:fa:8b:c4:aa:1e:2c:5c:8c:3a:9b:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:A1:F5:36:03:90:53:C3:07:C4:D3:B8:37:A5:AD:17:BC:14:C5
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tHih9TYDkFPDB8TTuDelrRe8FMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:12:bc:bb:c1:c5:42:1c:e0:a4:af:62:f1:90:de:5b:62:9a:
a6:c8:4f:00:53:81:2b:2c:1a:44:af:13:1d:69:a9:8e:e2:da:
1f:13:cd:8b:3e:f6:21:e9:8a:83:94:98:a5:95:92:8b:51:e4:
52:6a:2d:23:2d:29:78:50:0f:33:b7:2c:7d:05:a7:40:63:89:
c5:c3:c3:7c:08:96:f1:d9:c6:e0:3e:da:e9:66:3c:15:73:35:
bd:6c:9f:7c:0d:31:fd:77:bd:0f:a0:68:24:4a:d3:e5:34:81:
4a:74:1a:6f:4e:c3:44:fd:3f:83:6b:1b:f7:1c:70:8b:c1:ff:
6f:1c:d7:ca:45:96:f8:6e:4a:dc:07:bc:14:3d:6d:0c:e7:a8:
d4:3a:c4:f9:e6:b1:39:d1:6c:be:87:dc:a6:7f:fc:ae:ea:b5:
b0:90:81:4a:3f:87:69:f6:f8:c2:19:ec:1a:41:4d:7b:8a:f8:
3c:e1:4b:78:92:c4:93:df:69:ec:1c:aa:0a:7a:75:ac:1a:9f:
31:83:e2:c1:5a:7c:47:80:02:71:3b:1f:e7:87:b7:c5:1e:bd:
12:3e:00:14:1b:db:70:42:6c:9a:36:a6:0c:83:9e:94:6e:a5:
9e:b9:19:df:f5:87:2e:a2:f2:68:2c:c1:a9:9c:c1:83:76:41:
bd:61:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org