Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/OISMqRpX18Yd7_CfdeOstYfzpiQ.roa
File: OISMqRpX18Yd7_CfdeOstYfzpiQ.roa (raw, json)
Hash identifier: SPbOUfA5duXVyRPSUn3i5YfqmwEmEjP4QEzzo7cs/UE=
Subject key identifier: 38:84:8C:A9:1A:57:D7:C6:1D:EF:F0:9F:75:E3:AC:B5:87:F3:A6:24
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 03B23219
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/OISMqRpX18Yd7_CfdeOstYfzpiQ.roa
Signing time: Sat 01 Jan 2022 09:55:42 +0000
ROA not before: Sat 01 Jan 2022 09:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212738
IP address blocks: 194.1.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62009881 (0x3b23219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 1 09:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38848ca91a57d7c61deff09f75e3acb587f3a624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:fb:ec:81:0f:e5:fa:6d:b4:ec:4b:11:45:
22:21:a7:eb:59:64:4f:da:e6:6e:ab:b1:91:28:dc:
3d:d0:ee:be:a8:c3:46:d5:eb:4c:14:6b:d0:ad:99:
28:69:d6:14:fb:04:f3:7a:82:75:8c:09:46:b5:13:
1a:e7:e6:b9:c6:4b:b0:d5:ec:27:13:62:75:19:e6:
8d:e6:6f:d5:af:c0:36:a5:32:fc:27:91:d2:a9:03:
be:9c:11:51:76:5f:e0:8b:d3:98:a6:80:60:fe:fa:
6b:20:e8:ae:17:23:96:94:43:fa:88:1d:81:75:40:
9f:42:de:d4:4c:c7:9f:a0:57:7e:7d:f5:e4:ef:be:
8e:bf:46:f8:f7:cc:d0:5d:04:41:62:60:80:1b:53:
67:dd:78:a8:90:a1:99:95:08:24:bb:60:43:8b:ac:
26:df:f6:74:c0:76:2c:71:49:29:a5:91:34:40:7d:
c2:e7:9e:43:40:51:5c:17:5c:7b:eb:6e:59:42:dd:
be:53:f0:6d:66:b2:49:69:2e:44:1a:f9:d6:76:37:
af:28:2b:28:60:ff:d3:ad:b6:8a:ed:7a:d1:33:9b:
34:c2:77:05:a1:ab:c3:d5:92:73:c3:c1:7e:17:54:
f9:27:ba:21:17:73:16:c8:6a:17:eb:0e:e3:7e:c7:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:8C:A9:1A:57:D7:C6:1D:EF:F0:9F:75:E3:AC:B5:87:F3:A6:24
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/OISMqRpX18Yd7_CfdeOstYfzpiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.131.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2d:91:34:e0:62:58:23:91:5f:ac:3a:52:8d:5d:26:8a:e9:
9e:db:fb:71:fe:3d:c9:d8:57:e9:ed:9f:04:96:ec:4e:b6:01:
ef:f0:6c:0b:8d:67:bc:32:db:35:49:2a:82:d3:1a:e4:7d:77:
86:ed:aa:af:81:98:93:b8:27:73:fc:ec:d6:5c:30:4d:47:a3:
b3:a1:3d:3b:ac:d3:43:8d:a4:e4:99:e1:fc:b2:b2:da:c0:f9:
e0:19:69:c2:37:41:d6:de:e4:1e:01:c4:0c:5e:d6:76:8e:8c:
9e:a8:0e:9d:9b:34:ba:8e:05:6f:f7:ee:c1:2f:1e:f3:c6:5b:
38:5e:05:d6:b0:75:35:53:e4:3b:90:68:24:3c:ad:c2:c8:2f:
85:57:ce:bb:ab:01:04:40:4a:09:0f:96:a7:6d:f2:1d:83:b5:
ca:a8:6f:53:79:77:b3:71:db:55:61:87:be:9e:63:ae:e4:3f:
99:3d:50:df:eb:c4:92:8d:fd:9e:02:65:9c:d4:97:6a:d3:12:
7e:b3:23:0f:54:55:6b:df:3c:2c:bb:7b:c5:46:0c:fc:6c:ed:
d4:43:6d:de:07:d5:52:d7:a5:54:55:ae:47:3f:03:91:b8:4a:
cd:c4:7c:76:47:f3:7b:55:ac:b6:01:5e:b7:7b:56:a7:8d:e4:
a5:9a:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org