Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/ocC_dkpE_X4fwGBqw5Q0CcvSa-c.roa
File: ocC_dkpE_X4fwGBqw5Q0CcvSa-c.roa (raw, json)
Hash identifier: bPm7SqTCoYsTN2wEowKpxJsWLqJKv7YnntFuFBCl5to=
Subject key identifier: A1:C0:BF:76:4A:44:FD:7E:1F:C0:60:6A:C3:94:34:09:CB:D2:6B:E7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 020B1960
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/ocC_dkpE_X4fwGBqw5Q0CcvSa-c.roa
Signing time: Sat 01 Jan 2022 03:52:03 +0000
ROA not before: Sat 01 Jan 2022 03:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47207
IP address blocks: 93.157.0.0/21 maxlen: 24
195.5.163.0/24 maxlen: 24
2001:67c:54::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34281824 (0x20b1960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Jan 1 03:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1c0bf764a44fd7e1fc0606ac3943409cbd26be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:07:b2:6f:54:ef:f6:6a:3c:87:d1:f8:d3:
94:41:4d:83:d2:c6:df:25:28:26:4f:57:92:66:58:
b3:db:cb:78:87:b4:fd:20:84:60:9f:ea:d9:0a:f5:
cf:97:a3:93:37:98:a3:ac:3c:22:86:fa:f9:c1:70:
b1:de:6e:af:13:36:3f:39:44:0d:f9:ef:9f:c2:bd:
97:32:a7:95:bc:cd:64:cb:6a:16:e7:d1:a2:bd:1a:
2f:3d:3a:a1:00:a6:3d:80:b0:6b:e4:bb:72:89:10:
17:eb:70:af:74:9e:f6:35:76:ff:fc:8a:c9:b4:e3:
07:71:d6:17:d8:87:49:cf:71:c1:9a:01:57:72:d6:
7c:0c:0a:5e:11:ff:d9:e4:e9:c2:0c:58:0c:95:01:
35:20:f2:ab:f6:f0:f9:93:03:41:9a:70:37:36:28:
0a:0c:d9:46:ec:af:54:97:d2:ce:da:30:86:d9:b8:
91:06:7d:4e:3a:e4:44:96:a2:06:76:ef:ff:93:f7:
e9:1c:32:60:cb:75:b9:4f:6a:ec:85:1d:f4:c1:f9:
ba:ea:a5:98:4a:25:af:85:90:33:b1:84:cc:22:7c:
c4:5f:54:bd:7b:3b:54:a1:cf:22:ef:c7:b4:d7:64:
c3:60:73:f6:9c:a1:93:d6:88:77:ed:79:aa:88:e7:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:BF:76:4A:44:FD:7E:1F:C0:60:6A:C3:94:34:09:CB:D2:6B:E7
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/ocC_dkpE_X4fwGBqw5Q0CcvSa-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.0.0/21
195.5.163.0/24
IPv6:
2001:67c:54::/48
Signature Algorithm: sha256WithRSAEncryption
c7:ce:90:7b:89:5e:b7:80:fb:b7:ef:d9:24:09:8c:00:4a:b6:
06:2f:50:2e:59:fc:1f:4b:b5:2c:ef:4a:60:02:09:c8:48:66:
84:06:07:80:76:04:e2:22:b8:86:ea:49:15:a9:17:13:0d:da:
96:66:2e:be:75:7e:11:01:af:e8:1c:03:5a:67:4a:7d:56:55:
12:ee:8d:2b:0d:17:f2:0e:0d:44:1e:66:cc:b2:e5:5a:2b:f6:
01:c8:c1:e2:35:b5:4c:07:7a:87:13:46:14:d4:60:e1:6f:a5:
8e:58:55:f1:fc:e0:11:e0:70:38:0b:31:f0:e0:8d:2b:36:bf:
e3:50:ec:62:f7:67:1c:0b:70:f2:62:73:79:63:0f:16:f2:9f:
5c:5f:ae:39:c5:81:38:8a:b4:9b:15:eb:2e:1f:ac:7f:c3:30:
1e:dc:e5:9b:14:e2:37:3c:00:7c:c6:2c:88:72:ea:56:6a:58:
d7:63:27:91:0c:af:dd:3b:9b:4d:56:d0:85:97:82:0d:b9:b4:
25:04:93:60:81:00:6f:31:cd:9c:f2:85:aa:5c:04:fc:f9:29:
cf:29:ed:99:83:a9:55:8b:27:ea:2e:1f:e9:0b:de:5c:fc:51:
91:0a:2a:5d:bf:34:a5:4c:e3:4e:ed:f7:f0:8e:60:d1:b7:fb:
f0:e4:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org