Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/0rmYDdB8N7D3jVdXtjFuAMQFc2s.roa
File: 0rmYDdB8N7D3jVdXtjFuAMQFc2s.roa (raw, json)
Hash identifier: rXrjr0mqRF/RUs/CJMcoMux0lh2w+Tb/Dd4YguillS8=
Subject key identifier: D2:B9:98:0D:D0:7C:37:B0:F7:8D:57:57:B6:31:6E:00:C4:05:73:6B
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 02D122EE
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/0rmYDdB8N7D3jVdXtjFuAMQFc2s.roa
Signing time: Sat 01 Jan 2022 11:00:49 +0000
ROA not before: Sat 01 Jan 2022 11:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42180
IP address blocks: 194.0.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47260398 (0x2d122ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Jan 1 11:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2b9980dd07c37b0f78d5757b6316e00c405736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:df:4b:c7:5a:ba:f6:a5:2b:13:0f:ea:98:
04:d1:1f:da:14:0c:3b:ea:37:97:46:76:53:64:4e:
99:f4:5d:1a:b6:64:50:2a:94:9d:ba:d9:c6:c1:cc:
be:4c:5a:76:89:21:e5:f0:63:8e:ad:19:c6:40:1e:
05:99:3a:43:a2:a6:f2:da:7a:a8:52:10:f0:cd:cf:
4b:82:72:a1:1d:53:6d:95:82:18:49:49:6b:ba:6c:
e8:81:4e:dc:ce:31:e6:7c:e3:8f:8a:1b:1d:15:7d:
8d:bf:f4:c0:dc:a1:d3:4d:28:9e:6e:70:9e:b5:89:
e3:17:b8:13:51:b2:6d:e9:56:b3:f4:f7:44:34:f1:
97:94:93:86:da:03:ba:2d:36:37:60:ee:e6:df:ca:
43:fa:ba:4c:74:71:02:c1:75:fb:8d:92:12:14:ae:
b5:5b:34:03:3a:8b:1c:90:31:85:58:c3:41:17:7c:
82:34:5c:05:62:78:51:67:bd:bb:97:6f:59:3a:8a:
21:b6:7e:22:5c:86:6e:82:65:5c:ed:69:b0:07:bd:
bd:21:41:1b:de:44:7e:e0:d5:5b:2b:0a:c6:c6:98:
58:50:1b:27:c1:cc:29:6a:e3:c4:fb:c4:1f:ac:c6:
cb:c8:27:57:d5:b4:76:4b:7c:d9:ef:d8:88:28:73:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B9:98:0D:D0:7C:37:B0:F7:8D:57:57:B6:31:6E:00:C4:05:73:6B
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/0rmYDdB8N7D3jVdXtjFuAMQFc2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:de:01:fb:9f:2a:b3:cb:65:ad:21:28:c9:a3:0e:0e:6d:a7:
db:8d:c4:79:6e:f1:b8:0e:c6:ca:45:79:2a:f0:a3:7f:60:5d:
91:00:fc:fd:d8:02:b8:62:36:f0:2f:e1:f8:68:61:de:4c:08:
80:d4:75:ea:fa:03:d4:b6:cd:ac:3f:91:da:fd:8d:36:ac:f2:
67:fc:f9:75:f2:e6:86:ff:18:df:89:0d:1c:c7:6d:9c:1d:6d:
c4:33:08:a4:dd:90:99:63:bc:b3:9d:e5:6c:96:72:35:bd:5c:
d8:8e:a1:d3:3b:4a:70:b2:14:b9:ec:2e:9b:68:bc:2d:15:15:
73:a0:fa:07:05:05:51:6d:66:a5:d3:e4:f8:6d:3a:78:0c:2f:
d6:5a:5e:65:80:46:44:fa:38:8d:6e:81:4d:fb:c7:e1:f6:e1:
c8:3d:46:13:51:0a:6e:40:92:e7:c4:a3:aa:56:36:35:f2:b2:
a0:24:3a:29:b5:79:8a:2d:dd:5c:c5:37:60:9b:c3:fd:cb:0b:
b0:cc:89:e4:95:af:6b:1e:ef:5a:14:c9:7f:5e:bb:29:d9:98:
a6:99:cc:8b:23:03:29:b8:a7:4e:49:5e:48:ef:8b:61:0b:be:
28:20:b5:f5:f0:6e:23:44:6b:68:27:35:0d:5a:2c:f7:ac:7f:
39:81:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:30 2024 by rpki-client on console-fra.rpki-client.org