Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/I8f0-3YxrUSMvYv9x-cPf9kVFV8.roa
File: I8f0-3YxrUSMvYv9x-cPf9kVFV8.roa (raw, json)
Hash identifier: QEAJ5gooZ88pah7DYvcYUr+uaKh6t2H8pwu51aQJDa0=
Subject key identifier: 23:C7:F4:FB:76:31:AD:44:8C:BD:8B:FD:C7:E7:0F:7F:D9:15:15:5F
Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial: 03350A38
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/I8f0-3YxrUSMvYv9x-cPf9kVFV8.roa
Signing time: Sat 01 Jan 2022 04:01:24 +0000
ROA not before: Sat 01 Jan 2022 04:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44858
IP address blocks: 195.138.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53807672 (0x3350a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Validity
Not Before: Jan 1 04:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23c7f4fb7631ad448cbd8bfdc7e70f7fd915155f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:27:f9:e6:af:73:f8:b5:9d:09:cb:8d:86:
08:a2:f8:3c:9a:c5:91:16:cf:38:91:7d:8c:c7:88:
f9:dc:cd:a7:c6:4b:f1:cf:76:af:e6:31:48:57:a8:
5f:d2:df:3a:72:73:88:2c:c0:91:b6:a9:5c:83:82:
7e:a8:f8:02:bd:a1:97:3c:bd:23:1f:c6:74:76:51:
e6:78:0b:eb:22:f8:f8:a8:9b:37:58:f2:ec:d5:8a:
c7:ab:4c:a1:7f:56:d9:61:31:cd:df:81:41:c9:49:
40:93:53:75:00:44:9f:5f:5c:35:04:a9:7d:a3:72:
5c:85:1b:48:89:da:3c:65:64:58:b7:1f:95:60:14:
db:be:1f:8f:d9:8e:29:c0:99:4b:d3:7b:e5:2f:ee:
52:e6:0b:f7:81:c3:6a:f3:59:f2:e8:f1:5a:17:f1:
9f:63:72:e5:48:ed:d2:4f:a9:23:dc:89:1e:0f:d5:
53:9a:45:e1:37:a7:7a:ac:52:49:18:67:32:05:21:
a2:6c:38:84:d2:d4:80:45:9f:5d:11:cd:48:7c:d9:
15:c0:fb:71:4f:09:c6:79:b3:40:3f:ae:f4:17:d1:
99:04:35:ab:26:e2:b2:ee:b9:a1:47:a2:73:de:99:
a5:1e:c8:50:14:c4:2f:7d:6e:6e:71:58:1d:1c:bf:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:F4:FB:76:31:AD:44:8C:BD:8B:FD:C7:E7:0F:7F:D9:15:15:5F
X509v3 Authority Key Identifier:
keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/I8f0-3YxrUSMvYv9x-cPf9kVFV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.212.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3f:01:26:ca:9f:d4:0c:41:3d:61:12:1c:6a:a1:ce:63:4d:
15:2b:e5:3d:68:a0:58:36:15:56:5b:df:96:bb:92:1e:5a:68:
35:48:db:8f:f0:67:f4:c2:a9:db:80:57:e6:35:d2:5b:30:69:
ea:f5:d2:2d:fd:b7:a9:9c:16:9a:54:60:ad:ef:1d:82:6d:f6:
20:fc:03:a6:7e:55:43:b3:72:97:93:10:a2:81:1c:b6:75:43:
8a:10:1f:92:df:77:37:1e:95:35:5c:c9:79:7b:57:58:94:ac:
e7:3a:82:03:47:3c:a7:ef:32:b8:47:16:30:de:89:95:43:f9:
c7:42:26:3b:1b:78:35:08:39:b7:97:ed:6b:19:24:8d:d6:2b:
f2:ea:a0:51:46:0a:31:90:33:cb:59:b1:27:8e:d9:57:45:41:
b5:d7:d0:4d:71:f3:f5:0b:7f:6e:45:2a:c4:4e:98:57:c5:cf:
e3:73:f3:e1:85:fd:29:95:2e:7e:e8:ee:16:36:17:1c:d9:8a:
5e:9c:2f:e7:a3:3d:2e:9a:15:b7:89:6a:51:f2:f8:68:4e:a3:
11:54:25:92:1d:9a:93:7c:fb:8e:fe:00:95:de:93:3e:96:03:
16:8d:0b:a7:3d:4f:f8:ab:02:d0:da:78:aa:b7:a6:0f:e5:80:
e4:6a:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:23 2024 by rpki-client on console-ams.rpki-client.org