Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/OfrFL-TomaJ7ygP2ArQyFFbvaaU.roa
File: OfrFL-TomaJ7ygP2ArQyFFbvaaU.roa (raw, json)
Hash identifier: F/7HrwqbJ+NbpIMxd6owNcS4DSJVPPkZp49ivmY6uX4=
Subject key identifier: 39:FA:C5:2F:E4:E8:99:A2:7B:CA:03:F6:02:B4:32:14:56:EF:69:A5
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 06424CF3
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/OfrFL-TomaJ7ygP2ArQyFFbvaaU.roa
Signing time: Sat 01 Jan 2022 08:59:53 +0000
ROA not before: Sat 01 Jan 2022 08:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58131
IP address blocks: 194.8.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105008371 (0x6424cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jan 1 08:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39fac52fe4e899a27bca03f602b4321456ef69a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:3a:b5:5a:ff:b3:a9:2e:f1:8b:d0:69:94:
e0:da:04:40:04:6c:df:7e:da:75:51:27:f8:fa:26:
74:29:7b:86:7f:06:9b:b6:35:46:1f:57:ad:8a:75:
0d:e4:b4:4e:f2:a8:02:76:0e:60:49:4c:a6:d9:b8:
fa:d9:0f:44:91:e7:3c:c8:16:b8:13:1f:89:a7:10:
11:5d:f7:1a:b7:ae:c6:0e:58:3d:9c:6f:95:99:5d:
74:7b:1f:28:e4:c7:5b:5f:f7:f3:d6:50:c7:08:01:
45:e1:33:e2:f6:a7:d1:e6:b7:01:71:5b:a2:d4:fc:
d9:0d:2d:d9:e5:bc:a9:5d:7b:b7:1b:ab:92:3c:a4:
cf:37:a9:f0:db:d5:17:99:e2:7e:f9:0c:f3:66:d6:
b6:9d:27:65:3e:27:27:f1:eb:75:3d:9b:b8:3d:13:
ae:7f:fe:86:64:cf:2f:71:ed:6b:85:e9:7e:bb:9e:
96:28:38:34:e1:b1:f9:fc:7b:22:59:92:5f:f2:66:
fc:10:aa:f6:b6:03:55:44:51:44:f7:7d:6b:d7:be:
8e:f1:5d:00:86:9f:f8:de:37:f6:21:3f:e3:0c:59:
2e:f8:cb:23:bb:a4:c4:c5:78:3f:db:bf:76:a2:6a:
4a:31:15:46:47:f7:30:eb:8b:0a:fc:58:aa:cc:2f:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:C5:2F:E4:E8:99:A2:7B:CA:03:F6:02:B4:32:14:56:EF:69:A5
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/OfrFL-TomaJ7ygP2ArQyFFbvaaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.63.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:18:cd:d8:f6:56:b3:99:7f:ee:d6:0a:a4:4f:fa:f5:7e:fc:
38:8a:db:81:62:dc:1a:d7:4f:8b:91:e8:c5:f2:83:52:80:de:
76:75:5d:4e:af:fc:a7:43:04:5c:c2:84:f4:34:8a:a7:a9:9d:
1b:d2:60:56:36:d3:88:e8:a8:ca:78:ab:c4:d0:5b:3a:25:6f:
fb:f4:bf:bd:ea:41:98:37:32:c4:9b:a9:19:ad:c2:21:b4:ec:
58:82:19:41:c3:a6:e4:ee:dd:f2:de:2e:0e:0b:a1:af:3c:a0:
8b:93:5e:fa:d2:b5:1d:0e:77:a3:5f:a5:ea:a7:48:98:24:c1:
ee:fb:f4:99:ce:0d:a4:6c:66:e8:ef:04:0b:a6:bf:54:53:a5:
9c:2e:66:50:dd:5c:39:6b:21:0d:23:04:1c:4a:8b:ef:f5:87:
1d:d5:ee:5c:3b:0d:8c:e9:83:29:6f:88:bb:5a:69:2b:d7:53:
94:85:e3:ba:94:a7:ce:54:4d:ce:07:98:0b:1d:89:29:9d:6b:
24:7b:11:86:f8:38:38:97:3c:db:b1:eb:fb:f5:19:10:bc:e1:
31:42:0d:f6:c0:43:fc:88:43:cb:f6:b9:0f:ec:c0:66:98:45:
d0:50:c5:94:3a:46:1c:d9:d9:99:4f:70:56:e7:ae:88:85:dd:
a6:f0:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org