Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ec6Wa2Y_ACIk3-1R_o4tUjU4AgU.roa
File: Ec6Wa2Y_ACIk3-1R_o4tUjU4AgU.roa (raw, json)
Hash identifier: Per0FYqYAlONf3fvtz93CQgZW0/ftxxLGcj++Gsk1qY=
Subject key identifier: 11:CE:96:6B:66:3F:00:22:24:DF:ED:51:FE:8E:2D:52:35:38:02:05
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1C0D8DE5
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ec6Wa2Y_ACIk3-1R_o4tUjU4AgU.roa
Signing time: Fri 20 May 2022 10:56:30 +0000
ROA not before: Fri 20 May 2022 10:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35509
IP address blocks: 195.155.105.0/24 maxlen: 24
195.155.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470650341 (0x1c0d8de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: May 20 10:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11ce966b663f002224dfed51fe8e2d5235380205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:77:d6:17:28:7f:11:a6:8e:f3:4c:a9:1f:
69:1e:20:1b:9e:9f:3b:a8:98:10:f1:e5:cc:2c:06:
79:b4:e3:8c:0e:d2:a7:64:82:85:40:19:db:e7:a7:
b4:45:ec:a9:9d:49:8a:d4:5a:21:b7:a2:fc:13:c9:
e7:c4:a7:77:14:87:e3:f8:1d:50:e1:05:9d:17:d1:
48:2f:a8:2b:c6:ce:d3:bf:cb:d2:f0:ea:43:31:ef:
ed:c2:d4:2f:66:7e:59:29:63:53:07:b5:82:82:9d:
2d:2c:04:bd:2e:57:75:77:85:ee:10:2a:5e:c6:23:
28:e3:22:6d:62:88:6e:17:5b:99:93:a4:6a:0a:c7:
4c:a0:b9:f9:88:3f:a9:a1:4e:43:ca:29:ee:74:46:
c3:7b:4c:44:8b:cb:76:e3:63:16:67:26:84:01:7c:
9d:e3:61:91:50:35:10:73:cb:e6:cb:80:77:49:4c:
4d:3c:6a:2b:79:ef:3c:89:d2:41:76:57:25:26:ad:
c2:9d:ce:96:f5:32:5f:ae:f6:7f:6a:35:c9:4c:76:
f8:8c:7a:27:83:18:70:d2:de:43:57:5c:ac:43:9d:
87:93:f7:75:2f:ed:4c:ce:83:c9:7a:8b:53:4e:18:
6d:21:1f:55:87:91:4f:b0:6a:63:9c:d4:3e:57:94:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:96:6B:66:3F:00:22:24:DF:ED:51:FE:8E:2D:52:35:38:02:05
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ec6Wa2Y_ACIk3-1R_o4tUjU4AgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.155.104.0/23
Signature Algorithm: sha256WithRSAEncryption
69:b7:a0:55:3a:8a:b6:47:59:70:71:6c:ce:9a:b6:55:8e:75:
29:91:7c:0e:4d:61:ab:3b:3e:7d:56:4c:86:bf:22:67:f2:11:
31:d5:3d:13:58:9f:13:f8:c5:9f:bf:72:47:51:d4:a1:2e:ce:
ba:ad:54:55:51:2b:63:81:02:c0:1a:e7:ed:a5:d1:90:1d:19:
e3:27:1e:22:60:68:c7:47:05:37:2d:97:a2:e7:6a:2e:0e:fe:
8d:50:22:a8:9c:a6:94:14:4b:19:9d:0e:17:f4:8a:94:fb:7c:
4f:a0:93:02:3d:70:9d:04:9e:47:53:ff:6f:2d:5f:03:1a:3e:
42:5c:83:04:b4:42:13:8b:02:89:ce:8d:4c:ac:93:d5:ed:3e:
1b:30:4b:b2:d9:cb:b5:c2:6d:a5:57:1c:5b:59:63:23:e3:53:
a4:ca:0b:9b:52:42:94:e3:00:84:d3:1e:0b:f7:87:0d:b9:61:
29:e4:04:c1:16:37:d8:91:24:82:57:fe:eb:5b:ee:16:ca:8b:
32:22:17:5d:4f:b4:16:01:fe:92:fa:5e:80:7d:bf:0f:6f:5e:
d2:b4:d6:2f:d2:75:9d:57:40:9b:0c:94:da:23:17:92:d5:ca:
bf:79:9c:76:0f:d6:c3:77:eb:83:39:f0:08:da:b0:30:1b:9b:
b1:7e:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org