Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/_2wEEtsk_BYZJN4QM4NlSKo_JNA.roa
File: _2wEEtsk_BYZJN4QM4NlSKo_JNA.roa (raw, json)
Hash identifier: 0BR1UMutkF4MyMVPaQ1THz5bnkP+eiFrfcyBxbR3Gkg=
Subject key identifier: FF:6C:04:12:DB:24:FC:16:19:24:DE:10:33:83:65:48:AA:3F:24:D0
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0A36424E
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/_2wEEtsk_BYZJN4QM4NlSKo_JNA.roa
Signing time: Sat 01 Jan 2022 07:54:18 +0000
ROA not before: Sat 01 Jan 2022 07:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202298
IP address blocks: 195.242.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171328078 (0xa36424e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 1 07:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff6c0412db24fc161924de1033836548aa3f24d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:1c:ff:37:59:ec:15:9d:d7:db:cf:1b:e7:
d3:5c:90:0e:be:43:44:e6:26:dc:e4:f4:83:12:43:
9b:1e:02:b8:59:e9:62:43:95:dd:d1:a9:bb:7e:5c:
e8:05:96:f8:04:74:38:63:70:1e:4a:06:b1:4b:dd:
af:cc:b6:d3:9e:6a:98:13:f0:74:e1:25:8e:59:b8:
15:f0:da:91:84:25:4b:be:6e:f7:5c:05:0d:b4:05:
7c:26:93:01:5c:30:50:1d:b4:bf:2d:ac:ad:80:90:
b5:58:cf:71:16:08:40:7e:2b:b4:80:e1:25:ee:13:
e5:70:b8:2a:92:79:6b:9b:ef:3e:a5:23:24:10:75:
9d:e7:cf:80:4e:7c:2d:bf:bb:86:1e:89:7e:91:66:
6e:b3:5b:ec:df:8e:1a:69:52:7c:de:1c:4d:ee:c8:
88:14:a6:a8:a9:41:d7:c0:91:d2:62:67:bc:9d:1b:
64:00:af:d7:81:29:4c:86:44:39:12:6b:1e:39:25:
18:ca:cb:87:46:98:36:29:82:c3:55:56:f7:1e:27:
d4:bc:60:62:37:48:bf:b8:ca:3f:e6:ca:eb:58:b1:
b3:8d:3f:40:b5:63:8c:54:69:f3:c5:06:3c:de:8c:
a9:ec:ab:6e:88:a9:b4:9d:c2:81:4a:f8:32:69:c0:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:04:12:DB:24:FC:16:19:24:DE:10:33:83:65:48:AA:3F:24:D0
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/_2wEEtsk_BYZJN4QM4NlSKo_JNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
45:27:eb:f2:7b:a9:bc:64:07:56:8a:d7:4c:e5:c0:98:16:36:
df:6a:cb:d1:ff:f2:5a:67:e4:8a:19:62:7e:21:bf:ec:17:0d:
ab:0d:1b:07:1f:f1:0a:76:a9:72:74:1e:c3:4f:f6:81:34:23:
c6:8a:ad:6f:ab:9c:33:51:ce:fb:e7:36:86:34:cf:74:6a:ce:
8a:54:ca:d0:ab:cf:4d:4a:4e:af:1c:77:3f:b3:a3:42:28:70:
72:20:ab:a9:e6:c6:6e:d6:34:1a:45:4f:ad:76:eb:c9:ab:c6:
2e:c6:7d:cd:75:12:57:da:82:90:1c:45:b8:64:4e:08:cc:0b:
18:7e:2a:58:a0:55:05:de:fb:a0:11:d6:98:ab:cd:f3:f8:6e:
bf:9c:fa:cb:3b:ec:aa:91:5f:1c:ea:39:7d:c7:a5:21:2d:e3:
46:6f:d1:9b:e3:d2:73:2f:1b:07:d6:c5:90:fe:89:bb:85:45:
7e:68:12:04:20:59:1c:cf:6e:57:e7:43:eb:6c:a3:d4:34:b6:
82:08:52:e3:c7:4d:5f:38:d3:10:8f:99:5b:ee:26:00:24:9d:
52:89:a7:06:4c:43:7b:d3:3e:5c:46:36:ad:b6:70:45:01:03:
1e:6c:0b:56:6d:b4:35:96:84:1d:35:a4:ac:77:03:e2:9c:c8:
5c:e4:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:19 2024 by rpki-client on console-fra.rpki-client.org