Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/32fug3OmwZ0AJoPjbQlLwMrV5QA.roa
File: 32fug3OmwZ0AJoPjbQlLwMrV5QA.roa (raw, json)
Hash identifier: UEKc+9GRR69ckTzqQEUGsZ4VcN3sMcNehUFB0Qn//90=
Subject key identifier: DF:67:EE:83:73:A6:C1:9D:00:26:83:E3:6D:09:4B:C0:CA:D5:E5:00
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 04241837
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/32fug3OmwZ0AJoPjbQlLwMrV5QA.roa
Signing time: Sat 01 Jan 2022 07:53:48 +0000
ROA not before: Sat 01 Jan 2022 07:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49859
IP address blocks: 194.32.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69474359 (0x4241837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Jan 1 07:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df67ee8373a6c19d002683e36d094bc0cad5e500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:73:6e:d1:f7:be:3b:44:e2:ac:64:59:a2:
36:82:8b:80:96:0a:aa:c9:6b:91:16:00:71:83:d7:
63:25:0c:4f:00:19:d8:7b:95:ed:e1:76:77:df:8b:
f9:28:84:99:b8:3b:26:83:cf:77:0a:77:20:19:e4:
cd:eb:6e:3e:c2:58:aa:68:60:4d:d7:09:d2:7f:69:
21:1a:ae:08:3e:90:c9:fb:9e:b9:6d:c1:91:44:46:
6f:1e:c6:b2:20:22:7c:24:07:8f:03:11:20:c7:0e:
86:4a:74:41:57:a7:27:27:aa:81:c0:41:7a:f3:14:
bd:7f:83:e4:05:cc:4b:f9:31:2f:ea:9a:08:f2:a1:
76:7b:80:e1:4f:a2:07:fa:a6:9a:62:2e:ee:77:71:
4b:6f:3b:f6:70:06:62:34:6d:ec:3f:7e:a8:39:5e:
01:c7:df:52:b3:f8:03:81:99:e4:20:df:04:04:14:
45:d2:29:c0:1c:81:74:43:00:8a:4c:cd:05:5e:e6:
f5:2f:5a:44:5c:4d:e5:f2:89:d1:79:95:ff:c0:7e:
6b:7c:dc:bd:10:b1:a7:3c:13:75:14:70:f1:17:46:
52:a1:b5:73:b7:1c:fe:ac:b8:b9:7a:27:3b:0b:4b:
16:3c:f5:b6:53:9f:02:af:8d:bd:12:bf:88:5a:52:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:67:EE:83:73:A6:C1:9D:00:26:83:E3:6D:09:4B:C0:CA:D5:E5:00
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/32fug3OmwZ0AJoPjbQlLwMrV5QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.111.0/24
Signature Algorithm: sha256WithRSAEncryption
70:95:a4:24:23:59:fc:fb:ea:87:f7:2e:9a:67:f3:35:a6:50:
ba:e9:76:a5:8e:bd:fc:c6:e4:c8:b0:31:cc:b6:58:ad:29:5c:
83:dd:54:09:23:94:6e:ca:e9:71:c2:7d:74:c9:39:cb:d4:ed:
c2:33:75:b4:f6:e7:fc:ea:a9:a1:3f:8b:f2:0a:00:ab:03:14:
fe:b8:13:fa:25:c5:62:9b:b2:30:7f:1a:60:f7:05:9b:82:ad:
5b:b6:3d:df:84:42:93:64:9b:2e:63:f9:38:60:17:a8:fb:e1:
c0:c8:4c:e5:0b:3f:0c:91:91:85:30:ce:32:22:da:bf:7e:d8:
9e:15:c6:41:cd:74:82:2b:dc:b4:ff:2b:15:4b:be:84:45:55:
90:79:f8:f1:53:3c:4a:b4:d1:e9:4f:b5:42:92:d6:84:b4:46:
e5:49:b2:b8:89:70:b6:12:b0:a6:ad:c5:33:ef:33:a1:ce:77:
8b:76:c9:ce:89:52:ec:67:a2:8e:6a:64:c9:17:ce:2a:ce:43:
1b:ec:8f:99:18:40:5a:9e:28:de:2f:8b:f3:98:51:16:a9:2e:
ec:17:dc:36:55:5f:63:de:17:e9:60:f8:b9:1e:f9:94:22:44:
d4:5b:97:e0:17:42:07:02:71:9e:36:29:de:f0:f7:e4:d3:e7:
40:73:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:05 2023 by rpki-client on console-ams.rpki-client.org