Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/q96wyaV70Jf2y2TZKfHGWVzc8zE.roa
File: q96wyaV70Jf2y2TZKfHGWVzc8zE.roa (raw, json)
Hash identifier: VjI0c7NzZPf9+y0L55M6gD7HtcMQ1gUTqukbYHE3uWE=
Subject key identifier: AB:DE:B0:C9:A5:7B:D0:97:F6:CB:64:D9:29:F1:C6:59:5C:DC:F3:31
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 035AA2F3
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/q96wyaV70Jf2y2TZKfHGWVzc8zE.roa
Signing time: Sat 01 Jan 2022 15:54:58 +0000
ROA not before: Sat 01 Jan 2022 15:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 195.190.135.0/24 maxlen: 24
194.37.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56271603 (0x35aa2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: Jan 1 15:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abdeb0c9a57bd097f6cb64d929f1c6595cdcf331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:b4:22:cc:49:b2:0d:b1:b8:7f:e5:5a:d9:
92:55:fc:bf:7f:54:a5:d2:78:d3:7f:54:63:c2:2a:
0f:61:99:67:e9:eb:c7:c9:13:cc:df:39:7a:e4:80:
20:f5:d9:9a:d5:3a:18:9d:c9:e0:08:28:2a:e7:12:
3b:df:25:00:74:0b:1b:02:4d:93:7d:65:39:66:c4:
dc:f6:29:c0:bf:c5:76:6c:9c:9b:67:c6:79:e2:d2:
49:0a:04:74:25:eb:dc:0f:f4:fd:7a:08:23:f4:71:
f3:76:9a:38:ed:5e:5e:ec:cf:e2:a3:ad:d8:9e:0c:
41:0c:17:89:6d:d0:bf:d2:6f:83:d5:5b:14:87:48:
ba:6e:7e:8d:b8:28:69:28:9c:00:00:a6:73:2b:15:
92:c8:06:7f:b0:c8:36:17:01:8f:0c:06:7f:27:b5:
a0:82:f6:3c:42:11:7e:0f:7a:68:03:62:82:19:4d:
eb:e6:b3:74:18:45:50:b7:6e:50:13:a5:e8:71:b3:
68:13:fd:dc:50:3a:3d:3a:12:d4:38:e9:ad:81:ec:
12:81:13:24:4a:f6:67:a5:5e:cd:04:25:6d:83:21:
80:8e:39:15:e7:ee:64:fa:14:83:41:1f:65:6b:ef:
7b:ab:1d:51:a3:df:b1:60:a2:b0:85:63:1f:4e:5d:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:B0:C9:A5:7B:D0:97:F6:CB:64:D9:29:F1:C6:59:5C:DC:F3:31
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/q96wyaV70Jf2y2TZKfHGWVzc8zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.255.0/24
195.190.135.0/24
Signature Algorithm: sha256WithRSAEncryption
74:19:8f:49:93:e4:6f:cc:98:88:da:e9:18:95:5a:f5:31:d7:
74:e3:0e:f7:59:d2:42:5d:60:28:04:32:16:08:5f:d2:d9:d6:
6d:c5:e3:df:b9:5e:57:ef:3d:b1:f7:62:71:67:88:5f:7b:39:
40:00:de:a3:02:ec:fd:6e:4b:ae:17:f2:65:67:0b:43:20:08:
9a:b3:50:a7:91:62:a9:32:1c:8c:18:eb:03:ab:05:51:28:1e:
8b:26:bc:ab:0a:68:ff:fa:f8:22:80:0a:f2:14:51:84:c1:09:
4e:92:70:68:c5:a0:98:be:c5:56:aa:48:28:c1:78:09:65:1e:
72:3a:8f:e2:43:17:f7:6e:d3:d0:a0:e9:52:72:95:a0:21:41:
23:f4:a8:16:3e:99:9b:3b:29:57:9d:c4:95:2a:e1:3e:b2:41:
ca:54:38:63:6d:0f:ad:4d:11:48:94:c9:40:5b:02:48:93:5e:
a8:af:52:0d:7f:1e:b9:7c:ae:29:c2:0b:53:17:9d:60:25:2e:
ac:bd:06:e1:eb:ef:fc:b8:03:9d:c1:38:fe:52:9c:e4:b1:62:
be:a7:14:da:be:cc:62:d3:fa:d1:6d:32:21:74:21:18:7e:dc:
33:9e:a1:41:41:e4:8b:64:82:30:15:42:f4:c2:20:bc:ae:94:
f0:19:56:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:10 2024 by rpki-client on console-fra.rpki-client.org