Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/oIZ6l_MLwE-vaDvFs7Ftlnp90og.roa
File: oIZ6l_MLwE-vaDvFs7Ftlnp90og.roa (raw, json)
Hash identifier: 4akVsUKVss/Q70P6e4E60wlZMroALTgrNRCEGRj3Vqc=
Subject key identifier: A0:86:7A:97:F3:0B:C0:4F:AF:68:3B:C5:B3:B1:6D:96:7A:7D:D2:88
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 024A4F61
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/oIZ6l_MLwE-vaDvFs7Ftlnp90og.roa
Signing time: Sat 01 Jan 2022 16:02:09 +0000
ROA not before: Sat 01 Jan 2022 16:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56887
IP address blocks: 194.40.206.0/24 maxlen: 24
194.40.205.0/24 maxlen: 24
194.40.204.0/24 maxlen: 24
194.40.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38424417 (0x24a4f61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 16:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0867a97f30bc04faf683bc5b3b16d967a7dd288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:bf:7f:4a:7d:68:29:05:b2:1e:c0:ff:11:
87:e8:f4:ff:5a:9c:3a:73:74:20:4e:94:69:5b:69:
14:fd:27:d2:e3:4e:39:c2:48:37:43:3c:4d:aa:e9:
42:ad:20:a1:34:36:39:83:67:e1:06:24:fc:2c:91:
3e:7b:fe:50:d1:d8:fe:79:08:8f:9f:8c:8c:f1:9d:
e1:16:c5:a8:a0:70:4c:c1:17:5b:b3:f1:65:8e:65:
3a:15:c6:5a:42:88:a9:52:d0:ff:0f:a0:ec:62:75:
e9:0d:09:f7:d0:84:09:9c:45:49:9e:ac:34:1d:dd:
8a:0d:32:3d:8a:17:5a:3f:73:7d:ce:7f:8c:49:a0:
49:7f:18:cd:5f:fb:43:7a:15:b1:4d:fe:15:f0:24:
c1:ce:79:3c:20:76:10:ff:27:19:30:1f:df:46:cf:
f1:74:ad:1e:7a:fc:05:87:c2:f5:fa:4d:1b:43:f4:
9a:72:e6:b9:de:c2:30:5e:d7:41:74:06:d9:4c:01:
17:08:75:7c:17:fb:c6:4e:07:4a:1a:d3:d5:e3:11:
58:9a:66:91:8d:89:64:50:1f:c5:12:cb:3b:42:2a:
b4:81:2a:81:26:51:b8:57:22:79:48:a3:68:38:b6:
c9:e6:b6:12:2e:95:92:ee:35:cf:ed:d2:f3:b9:1d:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:7A:97:F3:0B:C0:4F:AF:68:3B:C5:B3:B1:6D:96:7A:7D:D2:88
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/oIZ6l_MLwE-vaDvFs7Ftlnp90og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
54:47:02:8e:32:de:a6:a1:78:4b:0e:0a:09:bf:57:7b:a3:2b:
6e:45:a6:60:2d:b2:e4:7b:0d:32:1d:6b:52:27:40:34:1a:75:
80:5d:69:bc:f4:bf:e5:d8:ea:2f:fd:f8:77:cb:a3:37:d6:b5:
76:8b:8c:90:86:44:a0:90:71:fe:86:40:0d:56:db:de:62:2e:
09:93:fc:e1:17:42:e5:04:46:02:c1:49:0f:65:10:3e:7e:fd:
c8:cb:64:32:34:8a:24:40:62:16:15:24:c4:7e:d3:f0:5c:2e:
d1:00:2a:a5:3b:53:d5:91:a6:25:38:4a:f4:ba:a5:30:f4:6f:
6b:6a:43:fd:26:60:09:29:36:0a:c6:67:a8:f3:58:f5:d4:0d:
58:81:59:93:51:0c:43:3d:5a:95:53:59:52:b7:7c:5f:e8:1e:
73:a6:cd:6d:14:25:e3:90:e4:1d:b7:2d:5d:d9:da:8a:03:94:
9c:7d:a2:7c:47:ca:13:26:d4:9a:7b:b7:23:ea:71:99:c6:28:
36:2b:78:cd:e6:3a:9d:f6:7e:4e:68:9e:66:21:e3:f6:8b:83:
e0:bd:5c:1d:ee:30:91:7c:ca:0e:23:1e:32:1e:e5:2f:99:ff:
2a:f1:7d:ba:9c:88:ba:fe:87:da:e3:1a:a2:a7:05:98:f5:cd:
12:5f:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org