Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/7lX4OtHFnjBvFs2iLN2s-xpHZqg.roa
File: 7lX4OtHFnjBvFs2iLN2s-xpHZqg.roa (raw, json)
Hash identifier: FFrOMcaFby3qYE+He4/QYm+DMj8lwHYfeE44N4/+MWs=
Subject key identifier: EE:55:F8:3A:D1:C5:9E:30:6F:16:CD:A2:2C:DD:AC:FB:1A:47:66:A8
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 0182AD3181AEAB25D86A9102342EED1AACA3
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/7lX4OtHFnjBvFs2iLN2s-xpHZqg.roa
Signing time: Wed 17 Aug 2022 19:04:39 +0000
ROA not before: Wed 17 Aug 2022 19:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 194.32.144.0/24 maxlen: 24
194.32.144.0/22 maxlen: 22
194.32.145.0/24 maxlen: 24
194.32.147.0/24 maxlen: 24
194.32.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:31:81:ae:ab:25:d8:6a:91:02:34:2e:ed:1a:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Aug 17 19:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee55f83ad1c59e306f16cda22cddacfb1a4766a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:10:4a:e7:8a:09:3a:18:9f:b1:a3:18:fa:
4d:53:2c:82:ef:01:73:79:4c:53:07:fd:3c:aa:39:
1f:15:19:a6:62:90:06:4c:7b:12:8f:75:1d:85:51:
31:69:d1:61:d3:8e:56:6d:11:0a:72:11:5f:31:4d:
e3:72:c5:29:4b:12:16:65:44:7d:41:48:ca:a8:d3:
5d:87:76:a7:04:40:a2:e9:24:49:32:ae:38:1b:d4:
aa:94:06:7f:00:4e:3f:05:93:77:88:00:1e:95:c8:
e0:da:cf:16:ed:f9:5c:8f:7d:00:dd:ad:48:ea:13:
d9:18:78:e3:ce:6e:24:5a:27:cd:3d:93:31:e5:32:
17:b0:68:52:45:d6:b5:d8:35:af:40:5b:37:29:78:
db:9b:c8:a8:6e:37:a8:8d:6a:25:8d:7f:cf:b0:4f:
63:c8:67:34:5d:8e:4f:d3:6a:13:8a:77:9e:a5:79:
b7:4c:7f:57:f0:3e:00:54:50:09:b8:4c:8d:76:7f:
ce:8a:4e:1c:6b:b8:c5:d3:5a:2a:9a:84:22:61:ed:
65:40:82:26:74:dc:91:86:c7:c6:5c:8c:78:8d:2a:
2a:7f:ef:02:cd:4c:6b:85:42:23:9d:04:91:9e:b5:
d6:df:06:51:6d:98:9a:8d:9b:09:40:3f:5c:65:58:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:55:F8:3A:D1:C5:9E:30:6F:16:CD:A2:2C:DD:AC:FB:1A:47:66:A8
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/7lX4OtHFnjBvFs2iLN2s-xpHZqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.144.0/22
Signature Algorithm: sha256WithRSAEncryption
02:3b:31:62:39:bc:29:1b:b8:7d:a7:92:b8:92:6d:c9:8f:1b:
3b:0e:00:40:22:7b:c0:35:8f:a4:91:ea:46:7b:7e:f2:1f:1e:
c4:d3:c4:9c:c7:02:26:0e:03:e2:d5:90:64:ad:16:70:34:88:
94:1a:ab:f8:ab:eb:c1:4d:2a:2e:d0:e8:a7:75:d4:fb:6e:c9:
77:83:df:1f:24:e3:7c:2c:ec:a5:dd:66:94:8e:c0:5d:dc:17:
23:c1:a2:2b:94:8e:57:8b:1a:25:77:b3:3d:87:3f:53:fc:37:
8c:8f:a7:f2:2d:cb:19:3f:e8:80:9e:e8:46:4b:fd:d2:2c:f7:
30:3b:92:e5:93:34:4b:e6:82:f3:ab:0b:08:48:b9:62:bd:7a:
f7:89:d5:33:e0:3c:49:4f:fb:63:1b:01:c0:8f:e3:6c:a4:d5:
dd:bf:0b:b1:81:7a:ac:19:07:a6:3c:cd:23:09:0b:cc:f6:f8:
3f:1b:fa:3f:c5:37:13:f2:55:04:51:9f:ab:9c:ae:10:62:9a:
b9:7d:3a:6f:8b:44:34:f8:61:18:7d:f7:c1:f0:96:b2:06:34:
b7:c2:2a:f1:61:84:a5:f4:a4:88:9b:3f:38:ce:6f:d4:5c:dc:
95:3b:1b:92:02:56:55:68:3d:63:be:af:46:3a:6b:a2:69:64:
89:62:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:21 2024 by rpki-client on console-fra.rpki-client.org