Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/Q1Fm870jUfPMJJZonWtjm2wbosA.roa
File: Q1Fm870jUfPMJJZonWtjm2wbosA.roa (raw, json)
Hash identifier: Z2CHULV0YcE+vXtMHFIc7rDwwlvSdDcqUtMAzMytS7o=
Subject key identifier: 43:51:66:F3:BD:23:51:F3:CC:24:96:68:9D:6B:63:9B:6C:1B:A2:C0
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 03B17863
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/Q1Fm870jUfPMJJZonWtjm2wbosA.roa
Signing time: Sat 01 Jan 2022 09:55:42 +0000
ROA not before: Sat 01 Jan 2022 09:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50128
IP address blocks: 194.1.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61962339 (0x3b17863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 1 09:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=435166f3bd2351f3cc2496689d6b639b6c1ba2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:a1:79:03:b4:89:4b:ae:0f:66:1d:fb:53:
13:cc:50:47:95:2e:78:65:74:ef:a7:9c:8c:ff:01:
ae:5a:a7:29:b2:a2:71:ec:65:1d:a6:99:09:47:01:
f5:89:39:54:0c:84:aa:52:d8:c2:ed:99:70:54:ed:
c8:4b:22:9b:66:93:08:aa:aa:ba:e3:11:1d:85:36:
a2:bf:5d:ac:b1:f8:23:64:93:8f:38:d5:3f:11:8f:
96:b1:c3:23:da:ff:87:2c:4c:0b:01:c2:13:a0:f5:
52:e0:3b:98:22:ec:5d:ef:6c:87:9c:0e:3c:92:32:
1e:07:8f:ac:fd:79:56:d0:0a:3e:ab:31:d2:61:15:
19:2e:0b:c1:c5:e2:7c:dd:e6:f2:56:16:bb:9c:05:
44:42:c0:93:3c:28:54:27:f3:a5:26:f0:01:72:80:
3d:4e:be:c9:74:07:fa:5e:fe:82:43:37:36:09:82:
a8:99:c8:4d:53:80:ac:7c:6b:e7:d8:cc:8d:59:82:
85:83:5e:96:a5:74:ca:3c:85:44:1e:7d:51:a6:e5:
83:86:a6:a4:d4:a3:14:2c:ac:68:85:3f:d9:37:9e:
2a:b3:98:9f:10:9c:9d:2c:fe:16:ef:42:83:44:7c:
d1:83:32:d5:af:ff:55:7d:8e:f7:04:f8:10:76:f9:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:66:F3:BD:23:51:F3:CC:24:96:68:9D:6B:63:9B:6C:1B:A2:C0
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/Q1Fm870jUfPMJJZonWtjm2wbosA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.130.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ec:21:d5:0f:a3:26:2b:a1:d1:dd:8d:13:24:54:e5:dc:2f:
70:1d:88:64:60:48:47:94:81:db:75:d7:ed:cd:fe:fb:64:b1:
86:7c:82:cd:fe:c5:d3:a9:96:a6:46:9f:b8:9e:ec:eb:d3:9d:
51:51:bd:75:89:c6:f2:a6:1d:59:27:93:e3:75:b9:84:af:c8:
8b:a7:c3:5b:89:e4:9f:c8:be:d8:3d:ab:d3:43:85:06:41:09:
90:63:43:42:fe:5c:ec:b9:e3:33:dc:8c:83:34:0a:9f:52:53:
48:e6:8e:a1:7b:21:53:73:b5:1e:dd:3e:a7:80:d5:39:b8:9e:
08:be:21:f7:77:2e:0b:01:2d:ab:40:44:1f:32:8e:36:ee:e9:
4f:80:62:b4:00:88:42:2b:aa:d4:0c:bd:b1:f3:2b:22:39:69:
bb:82:cb:0a:5e:cd:06:9c:2c:08:44:30:c4:3b:38:be:bf:54:
e6:9d:b7:18:d0:2b:2c:27:aa:31:2b:78:95:76:fb:af:ad:1c:
7d:59:e6:31:f9:06:79:24:e0:d5:01:e1:25:5b:af:a1:e5:67:
e7:0b:d4:d0:f2:b3:8b:97:83:d0:42:74:65:d6:bc:f9:ac:9c:
8d:93:91:e3:66:5c:bf:18:ba:49:a2:21:ea:96:6d:d3:97:1c:
9d:d9:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org