Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/rVoYc-2tUI6zpMbopoSkJ_SQw80.roa
File: rVoYc-2tUI6zpMbopoSkJ_SQw80.roa (raw, json)
Hash identifier: pCorrRdwn1QVn2afshAcHFADpC+FeVpOHKV7HtkMvCA=
Subject key identifier: AD:5A:18:73:ED:AD:50:8E:B3:A4:C6:E8:A6:84:A4:27:F4:90:C3:CD
Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial: 014F5606
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/rVoYc-2tUI6zpMbopoSkJ_SQw80.roa
Signing time: Sat 01 Jan 2022 05:05:56 +0000
ROA not before: Sat 01 Jan 2022 05:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42273
IP address blocks: 194.50.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21976582 (0x14f5606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
Validity
Not Before: Jan 1 05:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad5a1873edad508eb3a4c6e8a684a427f490c3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:67:ed:c9:a1:c1:ad:62:36:4a:2e:6f:b2:
af:f8:1f:e7:b0:11:e9:95:de:dd:60:6e:9c:fa:ee:
6e:1c:31:1f:bb:4f:da:b6:8d:81:65:36:38:90:d1:
d6:6a:69:5e:08:f2:c9:3c:df:d6:0d:22:86:d8:e4:
c3:6c:eb:84:92:9a:5f:a9:c7:ea:7f:c7:49:70:7e:
7a:e5:b9:18:17:75:7e:70:44:fc:73:2d:3d:fd:88:
71:85:26:43:da:2e:10:ab:d6:46:5b:db:6e:a1:3c:
6d:42:23:f8:0a:04:25:3e:57:1f:7d:2c:57:e8:b4:
6e:6e:61:f1:52:41:ec:ee:3e:5b:2c:37:e6:9c:97:
67:34:02:ae:ad:6f:33:ed:a8:6d:d2:a9:45:6f:45:
7b:55:a6:5c:4c:5b:bb:43:26:4d:31:df:3a:bc:7a:
0a:f0:6d:53:1e:48:b5:1d:ed:c7:64:9b:8b:9e:7d:
da:ee:97:c5:21:27:1b:5c:12:19:69:6e:4d:a1:9b:
50:9f:7f:2c:2b:52:ac:81:28:bc:6d:ce:f5:d3:14:
1c:5c:e1:23:a5:9d:25:6a:6b:be:84:a1:b5:10:a5:
03:c9:8d:12:5e:1a:5b:e0:77:32:21:72:6f:93:97:
43:07:68:cb:2f:9b:74:d0:0b:7e:8b:5c:f3:8e:5a:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:18:73:ED:AD:50:8E:B3:A4:C6:E8:A6:84:A4:27:F4:90:C3:CD
X509v3 Authority Key Identifier:
keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/rVoYc-2tUI6zpMbopoSkJ_SQw80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.166.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1a:f5:c5:7d:d8:20:fe:b3:cd:b0:60:53:c6:7e:46:1a:a0:
97:5d:34:1d:65:05:59:3f:7c:e6:62:05:47:34:7c:d4:5a:fa:
2a:36:e7:bc:0c:2c:b2:23:c6:05:53:d5:b2:4f:66:e2:9b:0d:
55:24:52:80:76:9f:93:a3:f7:f8:f6:f3:fc:f0:a2:55:a0:25:
06:76:f2:da:20:b4:4c:c4:f2:6c:4b:9a:2c:45:8c:db:42:ca:
1b:8b:ed:64:71:78:fd:aa:81:54:c0:9c:bc:0d:23:00:17:4b:
c1:01:d8:63:21:14:f6:35:ab:2e:fe:d3:7c:6b:0d:33:e8:33:
2a:8a:2b:25:b9:8b:42:0a:46:f1:e5:b9:ed:64:8b:27:4f:6b:
6e:b4:3f:21:ce:ed:6b:c7:60:df:52:60:00:f4:8c:8c:9e:15:
60:f2:37:d9:05:9b:65:9f:50:ec:f8:7f:80:48:7b:a1:b6:5d:
38:db:cd:b5:2c:81:45:58:d6:d8:bb:67:25:9a:b9:93:14:64:
73:9d:90:e3:46:a5:f0:dd:86:26:be:b5:4a:cb:29:5d:dc:3b:
80:bb:b3:b2:6d:d0:62:6b:1b:cd:36:97:1a:08:5d:69:bc:8a:
ed:f4:c5:2b:79:c8:fe:bd:dc:e9:07:ac:7e:a2:59:e6:bb:cd:
24:5d:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:32 2024 by rpki-client on console-ams.rpki-client.org