Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/tPolY0nfnr-AQxA1vjhBVhq6qDY.roa
File: tPolY0nfnr-AQxA1vjhBVhq6qDY.roa (raw, json)
Hash identifier: SvrFlP6zqa75mNJqverbgEfu/G+fYvyuMnFJcP8OQf4=
Subject key identifier: B4:FA:25:63:49:DF:9E:BF:80:43:10:35:BE:38:41:56:1A:BA:A8:36
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 0A5689A7
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/tPolY0nfnr-AQxA1vjhBVhq6qDY.roa
Signing time: Sat 01 Jan 2022 10:58:04 +0000
ROA not before: Sat 01 Jan 2022 10:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49642
IP address blocks: 194.33.152.0/22 maxlen: 24
193.109.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173443495 (0xa5689a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Jan 1 10:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4fa256349df9ebf80431035be3841561abaa836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:aa:d7:05:15:c4:8e:1a:bb:62:23:f3:af:
7a:f7:59:ca:09:bf:32:92:ba:38:d9:f0:8b:00:55:
b0:49:3f:bc:99:68:62:43:fa:4c:7a:7f:5a:9c:28:
b6:a9:6d:c3:27:4e:b3:e8:e5:e1:6b:f2:72:84:7b:
ec:b6:89:5c:7b:85:fd:41:5b:ce:1f:40:dd:1b:f7:
96:8b:0d:1e:24:9b:f0:4e:2d:92:4e:39:c5:58:0e:
6b:d8:59:00:da:03:7c:60:c0:d4:5e:1e:1e:e1:91:
41:74:1c:06:64:b6:0b:c8:3e:42:73:b3:4a:6b:ad:
d7:38:fa:f9:88:87:58:c8:4d:2c:d0:4d:f8:58:4b:
bf:8d:78:7b:86:f1:d4:05:ec:d6:5f:77:4a:f4:33:
af:d3:b6:a1:45:3f:99:3f:53:cc:8e:27:f7:92:99:
3d:32:c0:7c:97:c2:fe:98:65:1a:fe:32:46:6c:8d:
2a:ef:97:f8:ae:b3:49:6e:59:a4:19:cf:6f:7c:80:
d2:42:fa:9c:b6:4b:2c:b9:67:7c:fe:64:e5:f8:11:
8d:c1:e8:47:ef:c6:14:4c:9d:9c:e3:eb:d8:66:4b:
f7:3c:ea:6d:06:1b:56:cc:72:35:3e:6c:af:39:12:
f7:32:58:bb:37:23:6c:11:30:30:7e:12:3e:70:3c:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:25:63:49:DF:9E:BF:80:43:10:35:BE:38:41:56:1A:BA:A8:36
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/tPolY0nfnr-AQxA1vjhBVhq6qDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.95.0/24
194.33.152.0/22
Signature Algorithm: sha256WithRSAEncryption
01:e7:e4:59:80:0f:2a:69:d7:00:b6:3a:bf:25:31:6f:0d:72:
b6:c4:06:26:ca:aa:26:d9:30:eb:d7:ce:78:76:e1:04:f6:5d:
71:d5:ce:55:e2:5e:b8:99:2e:1d:ce:c2:84:64:30:4a:ba:b0:
70:6f:f4:d8:b7:df:2f:89:2f:cb:79:56:de:8a:ec:ec:fa:05:
d9:a3:3d:d2:5a:2f:5f:59:28:86:73:0b:13:8f:28:27:1a:ba:
66:5d:1d:1f:87:e5:6c:e1:4d:fe:20:9c:3e:cb:eb:7f:06:c3:
8a:d5:b3:17:92:a7:90:a0:60:d5:cb:17:61:dc:bb:27:9f:a2:
3f:1c:2e:1e:4c:6b:15:7d:77:3c:18:e1:e9:c9:fd:9a:21:2a:
06:89:f6:4e:ed:96:3a:48:66:ce:e4:c9:02:be:ec:58:47:4b:
22:99:a3:f8:cd:bc:2d:32:68:31:89:f7:92:72:43:1a:40:f2:
b0:0c:f6:00:8c:ff:0c:e7:a8:c4:7e:d9:d3:b3:1a:72:ce:57:
f5:b9:50:ac:51:53:2f:09:e1:7b:a2:09:9f:44:68:aa:37:b9:
6d:07:b2:48:bd:51:18:d9:62:b4:27:ae:ec:bd:22:14:34:1d:
35:86:a8:ff:c9:18:1b:dc:87:55:27:11:0e:c5:74:74:85:ec:
8f:3e:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:20 2024 by rpki-client on console-fra.rpki-client.org