Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/EnEU1NmAPrqOtgj_wKOX82uYnq4.roa
File: EnEU1NmAPrqOtgj_wKOX82uYnq4.roa (raw, json)
Hash identifier: u1nfrblJUGBN/pY83HBGXN3LqObblHicU2krl7pw3To=
Subject key identifier: 12:71:14:D4:D9:80:3E:BA:8E:B6:08:FF:C0:A3:97:F3:6B:98:9E:AE
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 4131CB9B
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/EnEU1NmAPrqOtgj_wKOX82uYnq4.roa
Signing time: Sat 01 Jan 2022 13:56:10 +0000
ROA not before: Sat 01 Jan 2022 13:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3304
IP address blocks: 195.22.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093782427 (0x4131cb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 1 13:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=127114d4d9803eba8eb608ffc0a397f36b989eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:2c:23:4e:54:40:91:a3:4d:ac:e0:24:b3:
8d:64:68:6b:8d:74:f5:81:94:13:6e:d3:7f:b5:55:
50:f2:69:42:cf:0c:9a:e9:03:6f:82:04:77:d0:bd:
4d:55:3b:e1:48:32:19:7a:73:07:b9:dc:4e:6b:53:
62:bc:2b:f1:79:5a:06:37:41:69:2e:8e:eb:e7:cd:
58:0e:e4:b8:c4:10:6c:f2:dc:c5:26:01:b4:c9:55:
1e:fe:a3:71:69:8a:ea:d0:0a:f1:6a:46:78:9f:7c:
96:fe:9b:3f:b0:32:66:2f:a4:cb:56:a3:e2:dd:8f:
33:9e:87:d1:53:e1:ca:62:d8:8f:b8:69:54:d5:f4:
ff:34:78:e7:fc:8d:00:c2:9c:77:46:7d:a7:3b:13:
78:de:b4:1e:92:81:d5:f3:2b:27:01:a0:ed:b6:97:
b9:a6:53:06:a1:d4:5e:e6:0d:df:85:0e:5f:25:28:
5b:d6:72:f7:1f:72:a8:59:87:fc:e7:ac:02:b5:ef:
49:2a:40:0e:ee:2a:55:7f:98:c6:51:2a:de:ad:f7:
a9:5b:7d:30:30:5a:7e:81:33:a8:45:47:b0:a2:c1:
80:b3:e5:a7:54:1c:c8:18:92:8a:b5:d6:d6:2b:31:
0a:27:39:5e:01:e5:9b:5f:f1:cc:15:6e:71:9c:88:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:71:14:D4:D9:80:3E:BA:8E:B6:08:FF:C0:A3:97:F3:6B:98:9E:AE
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/EnEU1NmAPrqOtgj_wKOX82uYnq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.138.0/23
Signature Algorithm: sha256WithRSAEncryption
55:3c:66:b7:a3:7b:b8:13:8b:68:44:b5:b1:99:cd:4c:04:8c:
8b:c9:8a:f5:32:71:d7:a1:ce:34:fb:fe:61:1a:2c:9c:6b:11:
52:ea:65:df:74:ea:b3:f9:00:47:d6:f6:0d:84:4c:0a:d1:93:
a5:42:23:c9:64:9a:7e:ef:3e:65:4b:d9:c0:0c:c0:47:63:ad:
d7:66:d7:9d:41:68:03:90:97:45:07:d6:76:41:14:aa:3a:01:
15:6d:01:56:59:8b:97:48:c4:d9:89:a8:df:4a:79:c9:f2:1b:
f9:dc:7c:e9:82:83:a6:56:4c:a1:24:e7:ee:83:11:8c:e5:c5:
40:32:f9:fd:99:98:8e:74:d9:19:47:ba:59:39:2c:18:f9:ad:
63:fc:cc:98:44:02:d6:fc:1d:21:8e:c8:26:95:9e:12:8c:e4:
23:ce:04:fd:4d:c5:04:cc:b2:86:1e:b3:04:ae:93:e0:51:66:
13:d2:12:55:32:75:17:44:cc:d5:47:ce:5d:e2:86:08:e6:5b:
b1:2e:c3:62:cf:bc:42:ee:ce:64:da:b7:a6:2b:37:a1:fe:fa:
ad:40:35:d0:c0:7d:14:a5:a1:de:0e:a9:2e:34:7b:e0:12:ed:
06:b8:69:3e:66:d8:aa:25:ed:d9:2c:5d:22:26:3a:e1:cb:47:
d4:54:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org