Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/pPpiuDxO23Xc3GwUDmCWWhkLCDY.roa
File: pPpiuDxO23Xc3GwUDmCWWhkLCDY.roa (raw, json)
Hash identifier: ADeMQ6L6cZLj+PhSG6NOEf0bc/OYZJBfruiFAwxMkqo=
Subject key identifier: A4:FA:62:B8:3C:4E:DB:75:DC:DC:6C:14:0E:60:96:5A:19:0B:08:36
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 072AD5BB
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/pPpiuDxO23Xc3GwUDmCWWhkLCDY.roa
Signing time: Sat 01 Jan 2022 14:06:44 +0000
ROA not before: Sat 01 Jan 2022 14:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 195.142.244.0/24 maxlen: 24
195.142.245.0/24 maxlen: 24
195.142.246.0/24 maxlen: 24
195.142.247.0/24 maxlen: 24
195.142.200.0/24 maxlen: 24
195.142.201.0/24 maxlen: 24
195.142.202.0/24 maxlen: 24
195.142.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120247739 (0x72ad5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jan 1 14:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4fa62b83c4edb75dcdc6c140e60965a190b0836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:0f:e4:4f:a6:cd:79:6c:8b:cc:b7:09:be:
61:07:31:44:3e:2e:bf:8a:ef:19:20:ae:c1:74:b4:
21:e8:e1:78:68:50:8e:8c:77:d0:eb:37:14:37:52:
ab:c9:f7:05:2b:d2:fc:83:b3:a4:bc:5c:df:42:6a:
43:9f:ea:8a:72:01:20:44:71:76:39:5a:b9:c5:47:
63:2a:97:28:33:fa:47:99:78:94:e6:d1:6f:54:cb:
1b:1d:4f:a4:e9:d6:44:4a:7e:65:18:16:75:2e:cb:
70:2c:cd:f2:cf:f6:b7:83:48:ef:31:25:24:0d:d8:
e9:c6:1f:d2:c1:d6:bd:e7:3d:93:37:24:c1:90:bb:
8c:55:ab:cd:d2:0c:c8:47:d7:4a:a7:91:92:a9:36:
57:63:8d:79:17:14:e9:61:9f:75:d8:d1:4c:72:a2:
08:1d:a9:fe:b1:b2:95:33:9c:c0:dc:40:f2:20:b9:
fa:58:2e:f2:7c:ab:9f:8a:a9:1e:62:51:d7:c9:de:
d5:9c:95:97:13:ae:e8:a3:4d:30:dd:db:0f:c0:24:
a0:ca:18:8e:d4:ce:e3:dc:f7:95:41:e9:36:46:a2:
73:47:98:c5:9c:6d:f3:f4:50:42:1c:95:09:6e:53:
ac:33:ab:59:2a:dc:f2:0b:7a:ac:3f:16:92:7a:60:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:62:B8:3C:4E:DB:75:DC:DC:6C:14:0E:60:96:5A:19:0B:08:36
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/pPpiuDxO23Xc3GwUDmCWWhkLCDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.142.200.0/22
195.142.244.0/22
Signature Algorithm: sha256WithRSAEncryption
32:f5:11:63:61:a4:88:3b:80:11:83:3a:12:40:4d:62:ae:8f:
5f:51:25:85:a1:2c:65:82:04:96:80:95:23:3d:54:71:13:10:
34:8c:38:db:99:86:8d:7f:c6:8f:ff:a4:8f:83:ba:3c:95:10:
20:5c:9d:54:1c:68:e8:5c:df:00:18:b0:17:a0:04:8c:f7:d4:
e3:90:41:ae:78:83:26:ed:92:08:0c:7b:7d:cc:5e:eb:c3:55:
7f:91:cc:b8:dd:ba:2e:29:f3:77:03:8b:53:ce:05:6c:79:ad:
be:04:9f:96:70:ca:2f:f5:57:1c:97:8f:79:ac:7f:67:e0:2f:
ad:6b:62:6a:2b:30:61:fd:86:22:98:64:3c:17:d9:37:d7:11:
42:84:b9:dd:20:f4:1e:6f:6b:de:fb:b9:17:73:fe:e3:f1:a6:
b7:7c:03:a5:cf:d3:d0:76:50:15:92:68:97:35:2b:ec:3f:a9:
51:ad:fb:f8:d8:fd:28:36:d1:ea:b4:ed:f0:78:0b:8e:17:19:
d8:80:dd:a6:4e:ee:d7:20:3c:9e:12:6c:f1:59:c7:62:c6:f9:
e1:7f:46:39:33:0e:e5:52:e5:de:17:61:01:37:1a:21:54:6b:
d6:f5:be:7e:b9:47:39:8c:11:af:ec:99:a3:4e:5b:b6:1d:81:
73:71:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:34 2024 by rpki-client on console-ams.rpki-client.org