Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f_OOHdv32T1bmy9xOi90aN3SLL8.roa
File: f_OOHdv32T1bmy9xOi90aN3SLL8.roa (raw, json)
Hash identifier: 818Pg2DJyO73SBwqCZYV1LzJyyY7w33nLcbZ+QvgL50=
Subject key identifier: 7F:F3:8E:1D:DB:F7:D9:3D:5B:9B:2F:71:3A:2F:74:68:DD:D2:2C:BF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13B0D815
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f_OOHdv32T1bmy9xOi90aN3SLL8.roa
Signing time: Thu 10 Feb 2022 11:02:01 +0000
ROA not before: Thu 10 Feb 2022 11:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 188.253.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330356757 (0x13b0d815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 10 11:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ff38e1ddbf7d93d5b9b2f713a2f7468ddd22cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:25:f7:e3:e3:25:0a:92:ba:18:4d:c5:4c:
29:dc:f0:40:f0:2d:75:96:ea:1f:45:fa:b4:f8:3f:
c2:93:09:01:0d:88:2a:1c:f4:52:77:3a:11:9b:66:
c7:83:1d:8b:67:0c:43:93:58:da:d8:72:ef:c9:dd:
59:02:e2:ea:dd:5c:e8:ab:58:34:bb:80:89:98:e3:
ac:e2:da:76:ab:9e:38:77:1f:06:f2:52:cc:55:24:
60:94:40:f1:cd:4b:da:fd:cf:91:94:7f:df:b8:98:
db:bb:38:1f:d6:61:23:f2:ce:77:9a:cb:36:06:78:
89:44:36:66:cb:a0:51:7b:f2:23:7a:04:11:4c:40:
7d:96:65:ea:28:20:a5:a3:50:32:61:ef:85:0d:25:
20:3d:b1:67:78:bc:f6:dc:39:b3:af:31:ea:45:43:
bc:88:6b:3c:c6:fb:e5:dd:46:6b:b6:43:5d:a3:cf:
c3:fb:06:93:d1:ad:ce:2d:b5:66:f2:c0:b9:b6:84:
93:17:72:86:a8:3c:ee:72:29:2c:8e:68:93:8a:51:
88:84:4c:e0:bb:56:a0:3b:a8:43:da:2f:85:98:8c:
e9:72:45:fe:d0:2f:fa:95:6c:07:e3:96:39:d5:5c:
26:14:62:f3:26:68:76:ba:c0:76:b5:22:21:82:7f:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:8E:1D:DB:F7:D9:3D:5B:9B:2F:71:3A:2F:74:68:DD:D2:2C:BF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f_OOHdv32T1bmy9xOi90aN3SLL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
74:59:fe:08:f1:b9:8b:a7:16:db:63:64:0c:4d:60:ea:c5:6c:
57:33:7e:15:d3:3f:a6:6b:46:5e:9d:64:41:b9:44:af:93:50:
c5:74:d5:30:db:cc:f7:6c:8c:8c:53:ce:d0:c2:7d:d2:c3:15:
2d:d7:6f:9c:3c:0e:1e:2b:70:36:5a:54:d0:5d:45:00:e0:af:
77:33:a2:17:c7:e0:fb:86:7e:4d:a5:14:a7:ad:fb:45:82:4b:
d1:bb:ad:3f:49:26:4b:49:71:1a:b1:7f:8f:73:2b:13:22:32:
bf:67:26:a9:9e:09:8d:c6:62:1e:7b:84:f2:5b:8a:7b:47:6a:
40:9b:40:0d:ae:f7:5e:95:ac:f6:9d:23:68:44:a9:76:19:3b:
b2:ff:2d:25:9d:fb:cd:9e:94:1f:ad:a2:e9:f9:ce:7a:84:3e:
79:a4:62:d2:c9:50:00:f8:89:6a:c4:40:fe:4f:d3:35:ac:e3:
6c:7a:69:e4:e1:64:80:e1:89:fa:10:66:f0:9d:3a:99:8c:d7:
d5:b6:05:6a:90:10:26:36:53:bd:04:5a:5f:9a:f3:eb:b2:a7:
6c:26:b9:f6:d1:ab:6e:56:c8:06:1e:bc:d2:b6:3b:d6:ec:f3:
7b:c0:e6:b8:9f:cd:d6:97:26:99:b3:9c:a5:e2:24:20:0d:42:
b2:07:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org