Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/oMJgK1L07txfckP8kkZZDr3mbUQ.roa
File: oMJgK1L07txfckP8kkZZDr3mbUQ.roa (raw, json)
Hash identifier: zIGMKoxlT7s1k2TsRpMwPdrFoCFRXh62tLpBUnLKvAo=
Subject key identifier: A0:C2:60:2B:52:F4:EE:DC:5F:72:43:FC:92:46:59:0E:BD:E6:6D:44
Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial: 055BFF5C
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/oMJgK1L07txfckP8kkZZDr3mbUQ.roa
Signing time: Sat 01 Jan 2022 14:07:15 +0000
ROA not before: Sat 01 Jan 2022 14:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51395
IP address blocks: 188.116.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89915228 (0x55bff5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Validity
Not Before: Jan 1 14:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0c2602b52f4eedc5f7243fc9246590ebde66d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:9f:6c:8a:86:b3:7c:b2:23:4d:65:0e:b1:
72:ee:d1:d0:92:c4:c6:1a:ad:f1:a5:44:24:b6:18:
74:00:d1:e4:45:70:b5:c6:af:1a:74:4f:a3:f3:7f:
e6:73:bf:c2:73:a8:05:c9:1a:e1:03:ef:2f:3d:49:
c3:68:ac:ee:fc:88:6a:e3:a3:0b:8d:49:14:c0:39:
f6:76:ee:86:a0:af:fa:db:25:89:a4:8a:0d:6b:af:
fa:92:37:c8:ee:e4:32:5a:45:07:53:2d:a2:68:86:
97:3d:63:cd:f6:4e:74:df:8f:73:17:9c:da:2c:13:
94:12:30:cb:7c:20:78:33:69:18:08:58:d5:8b:ee:
97:a0:1c:97:ad:52:10:b2:e1:ba:2e:a9:50:b5:ea:
90:8a:b8:8d:c6:12:48:7a:fc:e7:a8:d5:0c:fd:46:
96:ff:11:7a:78:0d:9c:f2:5b:85:50:06:6f:be:7a:
16:5d:34:02:35:33:7a:d7:9c:da:b8:ad:c3:9a:e9:
a8:df:90:e3:a4:7c:dc:6e:8f:e3:12:dc:db:71:b2:
48:0b:fd:60:9b:0a:8d:c9:0d:fa:a7:4f:48:48:35:
95:f6:f5:17:d5:de:44:33:7a:12:64:3f:81:44:10:
ac:0b:8f:a3:61:af:3d:ad:17:72:d0:0c:42:e7:e4:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:60:2B:52:F4:EE:DC:5F:72:43:FC:92:46:59:0E:BD:E6:6D:44
X509v3 Authority Key Identifier:
keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/oMJgK1L07txfckP8kkZZDr3mbUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:39:00:4f:ed:6e:99:69:4d:a4:64:55:73:95:f9:1f:26:1e:
47:1d:51:d1:e5:a8:ea:0b:de:ed:6b:7e:c3:ba:42:08:cb:a5:
ff:a4:e0:bf:5c:bb:bb:6b:2f:56:bf:91:c2:36:0e:fc:40:07:
1d:57:d3:b8:f8:a7:31:48:c8:40:9e:76:b4:73:f4:e9:16:65:
ec:fe:c5:c7:33:62:e2:c4:f4:5d:84:c6:fd:e0:ca:80:d5:85:
f8:d5:e9:c9:a3:5d:e0:65:62:e5:a2:e8:0b:97:b9:ac:40:65:
60:6b:5f:51:10:2a:21:70:6d:da:83:c9:76:17:1e:72:ea:62:
f3:4e:d8:1c:39:9b:ef:86:43:37:0f:b8:50:48:34:70:d2:fd:
16:6e:85:56:a2:b3:64:01:22:37:03:3d:9d:02:c3:04:5d:f6:
08:59:af:b4:27:7c:4b:d1:ae:e0:95:9e:ff:fd:68:03:19:31:
b7:c4:9f:85:57:dd:64:b0:41:d4:94:f8:b7:f0:da:e5:d5:d5:
28:a8:01:c2:b6:e9:15:0a:36:df:cd:e1:4d:f2:7a:ef:63:38:
9d:32:cd:ac:10:e1:4c:bc:d7:34:36:e5:fe:77:17:aa:22:0d:
95:68:fb:ee:d9:52:a6:0e:fe:11:5d:db:2a:82:e9:0d:6d:62:
89:cf:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org