Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/FEa2USUjk7r-RKnuu0T8r9mhuPY.roa
File: FEa2USUjk7r-RKnuu0T8r9mhuPY.roa (raw, json)
Hash identifier: mQaoBk/1aFQJIApV+1dGd/0CmM7pDdIMHXlxO68reIs=
Subject key identifier: 14:46:B6:51:25:23:93:BA:FE:44:A9:EE:BB:44:FC:AF:D9:A1:B8:F6
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 06FDF158
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/FEa2USUjk7r-RKnuu0T8r9mhuPY.roa
Signing time: Sat 01 Jan 2022 08:58:50 +0000
ROA not before: Sat 01 Jan 2022 08:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35565
IP address blocks: 194.187.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117305688 (0x6fdf158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Jan 1 08:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1446b651252393bafe44a9eebb44fcafd9a1b8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:b3:1f:b0:95:e9:03:33:cc:40:8a:a2:a1:
a6:cc:c4:7c:eb:23:e9:c3:f6:35:41:71:df:c2:b8:
73:16:a9:88:1d:51:af:15:a5:55:2f:02:78:3e:f8:
18:aa:4d:e1:68:51:c2:ed:3a:62:06:71:cc:9d:29:
a5:69:47:89:2d:21:53:29:ac:42:b6:5f:52:ef:f6:
39:fa:71:e4:d3:17:67:fb:93:77:b7:5a:d3:20:89:
a5:94:f6:ff:4d:cd:4d:48:d2:bf:24:13:95:4e:56:
02:4c:54:af:61:2a:12:72:ce:22:01:d1:4b:25:38:
f6:7e:78:8a:bd:c2:ce:ca:94:93:f9:71:6b:96:4d:
3e:ce:2e:b9:e4:f2:57:a1:8a:9d:79:6d:2f:c1:c9:
4d:92:13:f7:a3:ed:4f:4b:26:bb:4c:91:a2:77:e9:
e4:82:45:f0:fb:db:d2:08:7d:86:e0:19:97:81:6c:
c1:de:0a:23:84:43:a8:da:d4:80:d2:03:c9:f2:09:
55:74:f7:87:94:ce:95:d7:d7:ab:06:89:26:96:9e:
ed:12:ce:24:22:88:28:80:f4:cc:9b:50:85:2d:fd:
50:e2:00:e6:a6:19:c6:44:b8:4d:c4:d8:7d:f8:25:
e4:a7:cc:d8:aa:af:56:2a:50:75:06:8a:2b:5f:88:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:B6:51:25:23:93:BA:FE:44:A9:EE:BB:44:FC:AF:D9:A1:B8:F6
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/FEa2USUjk7r-RKnuu0T8r9mhuPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.60.0/22
Signature Algorithm: sha256WithRSAEncryption
23:7e:67:db:e0:36:c9:b9:84:94:96:f7:47:2f:5e:67:65:6b:
31:b2:a3:77:ed:ed:c4:a8:da:8b:45:4f:b8:81:ae:df:70:1a:
f6:64:bb:6b:67:0f:51:d4:76:fc:dc:7c:b1:d4:37:99:d9:5d:
21:2b:b4:5d:84:e4:c7:4e:df:56:e8:e7:d8:c7:80:d4:1f:1c:
5a:34:0b:ea:ea:30:b4:c1:bd:cf:d7:06:b7:db:12:69:47:32:
66:24:1a:44:32:ca:57:a2:98:ff:7c:bf:a4:e6:7b:bf:8b:21:
d5:55:84:a4:cc:23:b7:8d:70:a9:91:99:bc:76:0d:2e:ad:e8:
f1:7c:9d:61:95:64:45:f7:e5:a9:42:69:60:8c:2a:85:93:63:
f2:d6:25:eb:95:72:19:7a:e6:cd:cd:2f:a3:40:4f:7d:5d:8e:
81:fc:59:4a:d2:57:7d:fe:f8:b3:66:bc:fb:df:c7:f7:8a:bf:
c7:0f:24:16:46:dc:8a:a7:5a:28:e6:ed:e0:5c:41:67:0f:db:
33:30:3a:f2:d2:27:ec:b3:bf:d5:70:b5:31:6c:3a:aa:c9:8c:
fd:9d:12:90:81:6c:2e:ed:b1:54:6b:3c:a6:ab:83:e8:5a:bb:
41:08:8a:c1:c1:ef:31:4d:98:6d:10:f8:6a:2b:0d:2a:bb:04:
e3:29:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:42 2024 by rpki-client on console-fra.rpki-client.org