Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/55XdF7BQxye0qzbNCKaAjgfe0Js.roa
File: 55XdF7BQxye0qzbNCKaAjgfe0Js.roa (raw, json)
Hash identifier: FQkvMmMnkmdo2rgKMtOzmukTiUrg5GYJREc8TL2udDI=
Subject key identifier: E7:95:DD:17:B0:50:C7:27:B4:AB:36:CD:08:A6:80:8E:07:DE:D0:9B
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 0E6A23BF
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/55XdF7BQxye0qzbNCKaAjgfe0Js.roa
Signing time: Sat 01 Jan 2022 01:55:26 +0000
ROA not before: Sat 01 Jan 2022 01:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59836
IP address blocks: 194.35.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241836991 (0xe6a23bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: Jan 1 01:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e795dd17b050c727b4ab36cd08a6808e07ded09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:01:4e:d6:12:98:c6:e8:5e:f0:d9:ae:17:
8f:9e:2c:13:a5:f5:ae:9e:88:3b:c4:74:e4:36:00:
fc:6f:eb:ce:d2:36:ca:ab:23:77:81:d2:d2:e2:3f:
aa:12:f9:e1:1a:e4:26:67:5a:58:c1:c1:23:90:75:
8c:c9:5f:3c:ec:26:6b:ca:05:49:a5:f0:73:25:26:
a4:95:58:6b:67:db:7c:be:d7:72:23:f5:6f:a9:cb:
a6:da:f5:5c:ca:dc:d5:9d:9d:4f:22:a9:ed:fb:cf:
cb:f2:82:01:da:ef:d2:38:e3:79:f5:de:4a:00:57:
ac:84:ac:97:31:a5:ec:d8:ae:e3:8d:89:f3:37:13:
80:0e:5d:2c:c8:cb:13:1e:82:e1:e2:b1:03:81:29:
2c:a7:9e:2a:a5:e4:89:c1:40:dd:36:b4:e9:18:36:
d3:c1:80:c3:e3:71:3d:df:38:5f:1b:8e:50:b6:b8:
d9:a2:83:31:cf:4e:a9:75:b2:42:26:fc:f1:f9:99:
04:6d:05:ba:fb:be:ea:8e:2f:22:db:07:65:c1:fc:
57:6b:18:83:36:09:0a:55:27:2a:a6:cb:c3:c6:b0:
31:97:4d:97:bb:6d:6b:f2:d7:1e:db:41:6e:4f:ff:
9f:ae:ee:0d:2d:99:29:5f:00:94:ca:5b:56:5e:21:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:DD:17:B0:50:C7:27:B4:AB:36:CD:08:A6:80:8E:07:DE:D0:9B
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/55XdF7BQxye0qzbNCKaAjgfe0Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:36:3b:3c:c0:e3:90:63:d2:9a:11:a7:ac:65:52:3c:f6:fb:
a0:32:9b:b7:d9:43:89:06:ad:11:03:c6:64:98:65:95:0f:ed:
fd:eb:b2:9a:0c:8d:83:08:f1:cd:02:d4:9a:fe:99:d3:d3:c6:
be:77:15:e0:dc:0c:06:d0:ef:40:a8:1b:08:2c:93:a9:7a:b0:
c9:8f:f7:8c:69:94:ec:fc:ea:58:e0:42:0e:68:08:f5:b3:df:
a6:ee:6e:f7:13:57:10:c4:a9:06:d4:4b:13:14:80:64:e3:b2:
bb:2d:f6:e3:f6:73:e2:61:83:78:ed:ff:73:bc:3a:c6:26:4e:
a7:0e:51:b9:39:95:a7:0b:8f:27:41:ca:91:dd:9f:59:51:cb:
fd:6d:1a:3d:2c:77:7c:5c:ce:e4:42:12:72:78:92:dd:24:9e:
1b:7f:9c:47:c1:1d:fc:24:69:06:d6:12:11:84:61:3f:d5:58:
44:96:f1:af:70:1a:f8:6d:db:a2:8a:cf:73:3f:7d:d8:3f:c0:
80:7e:ef:92:69:20:4d:70:0d:87:16:ff:31:3a:62:04:be:ae:
e1:1c:b5:cf:71:b0:ba:24:ea:57:58:36:0b:c5:08:08:79:b1:
e7:15:bf:20:e2:c2:a1:2e:1a:fd:f9:c9:c1:41:83:64:7f:e6:
23:4d:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:38 2024 by rpki-client on console-ams.rpki-client.org