Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/pjD5VjJwWtXma9Q15ukRxPtiQQo.roa
File: pjD5VjJwWtXma9Q15ukRxPtiQQo.roa (raw, json)
Hash identifier: LVYydjbXtO0eidkj1hCh7zXGZQCqN5BgpWKwEEuGr2E=
Subject key identifier: A6:30:F9:56:32:70:5A:D5:E6:6B:D4:35:E6:E9:11:C4:FB:62:41:0A
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 0182D940A7C57AF38E70ECEE95767CD5A0E6
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/pjD5VjJwWtXma9Q15ukRxPtiQQo.roa
Signing time: Fri 26 Aug 2022 08:24:29 +0000
ROA not before: Fri 26 Aug 2022 08:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62220
IP address blocks: 195.244.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:40:a7:c5:7a:f3:8e:70:ec:ee:95:76:7c:d5:a0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Aug 26 08:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a630f95632705ad5e66bd435e6e911c4fb62410a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:23:83:26:05:18:f1:59:21:19:ae:4f:e3:
53:e4:e5:1e:10:48:18:d3:5b:e5:3e:cd:b9:42:07:
ca:97:66:30:bd:df:cc:a2:97:c4:16:55:3b:b8:9a:
57:65:ab:2b:5e:88:bc:a7:0e:35:13:e5:9e:1e:fb:
b7:e6:aa:95:be:e9:ed:6b:51:6a:c9:20:a8:d8:26:
7b:bd:d8:f7:87:f7:cc:55:29:6b:27:74:c1:e6:6c:
b5:60:df:f4:cc:a1:90:2d:ec:1b:27:c5:9e:43:05:
a0:0f:31:28:55:a7:51:d4:1f:b0:28:4c:c2:17:c3:
b6:95:28:56:db:e1:18:f0:4d:a7:55:1b:d6:bd:83:
15:4b:d4:80:dc:e7:75:42:f0:8c:e5:c7:29:a7:24:
ea:71:be:c7:14:6e:1b:56:d5:46:0a:f2:ae:35:f2:
43:e8:74:49:c3:89:5b:60:13:e2:9f:43:10:5c:f8:
21:88:12:1c:45:8a:28:1e:78:1d:40:90:40:2c:45:
2d:39:26:aa:89:d4:61:82:78:6d:36:19:51:1b:e1:
b9:81:84:23:c6:fa:bf:8d:b1:b5:59:87:88:f9:e6:
48:be:33:e1:52:07:f2:48:f5:b2:c8:56:bf:35:58:
35:14:95:34:39:c6:c8:e2:94:a1:ff:76:6a:14:c8:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:F9:56:32:70:5A:D5:E6:6B:D4:35:E6:E9:11:C4:FB:62:41:0A
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/pjD5VjJwWtXma9Q15ukRxPtiQQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.158.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c3:23:d1:68:7d:ff:8c:4b:8c:2d:77:fc:c1:ca:2a:50:de:
78:97:b5:4e:a8:cf:1c:fa:b3:df:66:f1:0a:3e:a0:0b:a4:78:
55:4e:a8:26:17:b6:78:2e:ce:4b:b2:de:7f:fb:21:32:7d:50:
c6:9e:41:b6:89:d0:14:50:d2:e9:b3:3d:99:6f:c4:19:41:90:
87:2c:b5:99:8f:71:9e:3b:3e:e2:f8:39:7a:e3:48:f4:a9:5c:
06:ee:e0:0e:72:3f:aa:65:81:13:4e:2e:fa:ad:90:dd:ad:5b:
a4:af:25:e0:1e:a2:1d:99:61:ab:3a:d7:1a:01:03:48:89:94:
8e:2d:e5:be:de:0d:ae:fb:3c:3f:b6:21:3f:40:2e:aa:7a:77:
d1:45:0d:cf:fe:68:76:7e:3e:1b:9b:78:81:03:36:0e:ab:f5:
5e:b4:29:19:0c:0a:41:c5:cf:85:f2:8b:09:a8:ad:97:f6:35:
5e:64:ad:f8:cd:3f:48:2f:42:36:24:0c:e3:f5:ac:68:f7:b1:
ba:0f:a4:4c:59:55:14:96:a6:e8:cc:ff:ef:b9:29:f6:1b:80:
1f:b3:6a:7b:05:38:1c:31:e3:42:61:7d:0b:0f:60:90:2b:23:
a9:15:c4:d1:1b:02:1e:c2:71:77:ce:ea:d5:00:d3:52:07:5b:
02:c4:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:07 2024 by rpki-client on console-fra.rpki-client.org