Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bUqLTSY4XmR1Q__jPuk9VvHbIpw.roa
File: bUqLTSY4XmR1Q__jPuk9VvHbIpw.roa (raw, json)
Hash identifier: K9SOpegyTpDqtCd3hs3Ozj8ZOVd4qgUkBIRKNhP7AA0=
Subject key identifier: 6D:4A:8B:4D:26:38:5E:64:75:43:FF:E3:3E:E9:3D:56:F1:DB:22:9C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A822F55
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bUqLTSY4XmR1Q__jPuk9VvHbIpw.roa
Signing time: Sat 01 Jan 2022 04:52:04 +0000
ROA not before: Sat 01 Jan 2022 04:52:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198595
IP address blocks: 195.136.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981610325 (0x3a822f55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d4a8b4d26385e647543ffe33ee93d56f1db229c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:af:86:2d:5c:e2:35:8a:33:a8:f3:7d:63:
12:d6:b1:36:5a:bb:ee:7a:8e:96:4f:a6:ea:77:d8:
e6:a9:5c:40:49:1f:4c:85:bc:68:f6:73:39:21:83:
7b:dc:a1:e5:c5:f3:ae:a1:5b:e9:c1:a4:50:2e:24:
20:66:da:89:09:06:00:64:e1:a1:4f:34:2e:57:6d:
18:c2:7f:7d:e1:2d:98:62:2f:e9:83:dc:15:40:0c:
66:67:d2:80:c9:13:a3:46:96:7b:e6:04:d7:19:58:
e7:74:21:22:57:05:da:4a:4d:34:02:1e:18:18:3e:
7a:c9:1e:12:89:38:f5:b6:24:e2:1e:5b:ea:55:01:
2f:92:3f:7e:b3:17:07:0d:ba:bb:82:18:8a:a5:b1:
cf:7e:93:ae:fc:4f:05:61:78:9e:82:5c:df:ae:5c:
d3:94:1b:4c:b3:b5:3c:fd:96:fd:2a:f9:71:28:bd:
25:e2:48:36:b8:ad:42:d4:95:97:42:c0:44:98:0a:
7e:9a:25:d0:f6:cc:e4:29:4c:8a:64:5b:e1:b4:29:
bf:bd:d7:91:a9:c1:8b:e0:61:9c:c4:e7:94:af:bd:
06:99:11:24:1f:a9:ec:93:9f:62:53:2e:da:de:e1:
29:16:4a:02:59:29:e4:ea:a0:4c:c6:af:ad:e6:a2:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4A:8B:4D:26:38:5E:64:75:43:FF:E3:3E:E9:3D:56:F1:DB:22:9C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bUqLTSY4XmR1Q__jPuk9VvHbIpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.173.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ec:3d:75:ac:62:9c:ed:c6:87:7c:ef:89:9b:a8:0a:2a:a4:
88:e3:13:72:50:fc:da:ea:be:4c:a4:34:25:49:3e:83:ac:2c:
3d:2e:68:5f:66:b6:a1:a1:de:c1:56:ad:b9:e6:03:c0:e5:e1:
ea:9b:17:e3:01:f7:d8:85:cf:31:21:16:6b:ae:2c:47:3c:f3:
cf:a0:19:4b:ba:ac:2a:3c:15:17:fa:ef:f3:be:92:ee:82:40:
97:0e:50:cc:b3:bd:80:8d:db:b3:d7:21:b7:2c:ab:ef:0e:bd:
02:90:50:c6:f0:da:ac:ab:b2:3f:86:2e:71:e4:5b:50:b5:ae:
19:84:b2:e4:1a:f8:0e:5d:f9:ad:f7:00:fc:5b:56:cf:bc:29:
b6:d8:03:a8:70:05:d7:d5:7e:8e:61:c5:70:e0:1b:4f:90:32:
c0:a2:5e:1b:d3:58:8e:28:f7:01:05:e5:7c:fb:e7:d6:25:33:
c5:cf:bb:3a:20:05:69:3e:78:48:19:91:7b:f0:f8:b1:ce:ff:
a9:90:fd:cc:bb:4c:0c:4a:13:7d:fa:c2:c4:76:82:71:c1:1d:
4a:eb:81:b7:c5:68:33:e6:c5:4b:34:f3:56:d4:8e:2b:d2:e1:
4c:48:53:3a:74:2a:ad:39:3b:fb:fc:0d:45:a4:3c:05:86:0c:
96:9f:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org