Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/rpcrDQ9rCX8ESsOU3ZXun8S_r44.roa
File: rpcrDQ9rCX8ESsOU3ZXun8S_r44.roa (raw, json)
Hash identifier: DkPJlIR/GKduw8qQNc/2zfGW5i8ctjiB2MwErkOrDPY=
Subject key identifier: AE:97:2B:0D:0F:6B:09:7F:04:4A:C3:94:DD:95:EE:9F:C4:BF:AF:8E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 083DE055
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/rpcrDQ9rCX8ESsOU3ZXun8S_r44.roa
Signing time: Sat 01 Jan 2022 07:56:17 +0000
ROA not before: Sat 01 Jan 2022 07:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210537
IP address blocks: 194.124.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138272853 (0x83de055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae972b0d0f6b097f044ac394dd95ee9fc4bfaf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:3f:dd:43:d6:81:98:b7:3b:4f:87:63:ed:
79:76:db:11:4d:8e:44:db:0c:ca:b8:1a:55:62:0e:
2d:44:4a:27:78:5e:a9:f7:c0:e1:76:03:6b:3b:f6:
dd:88:5f:50:c1:48:24:f5:3f:37:ab:ad:02:38:9d:
38:ec:db:f8:26:2c:c0:3e:ad:fc:56:23:75:bd:a3:
6d:b8:cd:77:28:07:65:13:70:89:1a:19:82:f5:a0:
ef:3e:39:d1:c7:ce:ea:3c:ec:20:c9:12:33:ee:12:
bc:21:a1:ae:6e:52:11:ae:3d:eb:19:de:cf:23:01:
d6:79:26:ad:5b:0e:b5:01:71:2a:bb:23:98:8a:02:
77:6e:1f:7e:06:6d:96:81:c7:7d:82:3a:eb:0a:3a:
85:4b:df:b6:e3:1c:72:fd:26:8f:00:d5:56:48:43:
28:14:38:6b:b1:10:f2:dc:37:0d:46:fb:42:dc:db:
bd:34:f2:c5:9a:54:26:45:53:68:f6:0b:09:69:b2:
d1:59:c3:ed:57:68:0a:a0:c4:87:4c:4f:85:76:56:
f3:d2:34:9f:98:01:1c:ae:47:74:b1:ce:66:fc:21:
a6:3f:62:9c:37:de:9e:f0:0e:3f:a4:92:33:7c:f8:
ef:7c:03:5b:81:69:3b:c2:f8:b5:fa:81:ce:aa:62:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:2B:0D:0F:6B:09:7F:04:4A:C3:94:DD:95:EE:9F:C4:BF:AF:8E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/rpcrDQ9rCX8ESsOU3ZXun8S_r44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b5:42:ac:52:a1:4e:3c:72:01:ef:06:0d:a1:ed:cb:65:bb:
d1:41:f2:de:55:bd:c2:c7:b7:79:6c:a5:e2:53:54:b8:ad:55:
cf:98:b0:77:3d:c7:98:97:6d:5d:56:5b:91:70:06:5b:6d:f4:
9a:70:a4:f8:f7:24:44:f4:d8:bf:5d:c2:c4:99:63:76:d3:62:
e2:2d:eb:22:e0:9e:6c:ba:e9:d5:f7:0d:ef:3c:5a:e6:2e:ed:
c4:14:2f:61:15:26:ed:99:f5:aa:f5:07:40:36:d7:ea:df:4d:
f8:b6:16:13:10:bb:08:f4:13:76:d1:96:09:2f:14:a3:1d:77:
fb:e4:61:f9:36:11:94:b1:a5:c9:e7:fd:ca:bb:2e:b9:42:60:
3f:d0:24:26:be:56:4b:34:5b:c3:f5:c2:1e:de:59:fa:25:e0:
a4:19:ab:1a:65:f6:63:b2:24:c8:9b:05:06:a1:9a:34:53:e1:
9c:13:a8:eb:e6:88:bf:03:97:f1:b7:fd:fb:3f:0d:5a:55:dc:
58:71:91:24:07:13:5b:8c:fe:52:97:83:86:da:56:9e:cc:4e:
c2:8f:bd:85:84:55:b4:c7:e7:43:37:b9:f9:0d:07:ab:dc:0b:
24:bf:c0:1c:d1:6d:cc:33:1f:c0:80:11:f4:35:ba:6f:cc:13:
f2:22:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org