Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/AYNKV_a-G2RDMExKYcT3XEo0bKI.roa
File: AYNKV_a-G2RDMExKYcT3XEo0bKI.roa (raw, json)
Hash identifier: HPS2gDNuXxFK4EXufTlR/F0RGvmkGzHab2+W87kqNvs=
Subject key identifier: 01:83:4A:57:F6:BE:1B:64:43:30:4C:4A:61:C4:F7:5C:4A:34:6C:A2
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 189FF140
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/AYNKV_a-G2RDMExKYcT3XEo0bKI.roa
Signing time: Sat 01 Jan 2022 06:55:20 +0000
ROA not before: Sat 01 Jan 2022 06:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60670
IP address blocks: 195.110.184.0/24 maxlen: 24
195.110.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413135168 (0x189ff140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 1 06:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01834a57f6be1b6443304c4a61c4f75c4a346ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:38:fe:cf:d9:c1:bf:99:d0:d4:c4:ad:8d:
9f:05:1b:e6:8c:e7:ab:76:43:fa:b5:f1:28:23:31:
d6:5b:94:82:f6:a0:98:5d:c9:29:19:90:a8:26:e0:
04:35:28:c5:b8:2c:f6:16:e1:25:90:ca:77:5f:0d:
d7:53:d6:bb:d8:dd:23:c4:20:72:2c:d3:e0:5a:7d:
5a:fe:d9:14:b9:63:98:ae:6f:66:36:4d:4b:8b:9a:
c8:cf:4a:36:a9:17:4f:52:89:8d:58:95:a0:e5:72:
2c:c7:e5:5e:fd:00:57:54:c5:f7:1d:b3:36:3c:7d:
f5:6d:78:af:17:1a:f9:60:92:4c:2b:7e:e2:90:ec:
f9:2c:2b:a1:23:1c:5a:72:ef:e2:8e:96:31:e0:ea:
ae:1d:03:83:51:70:3b:bc:5b:20:79:47:e4:59:0c:
68:30:e4:47:01:ca:5f:f8:35:5b:3c:dd:12:c1:10:
4f:fc:19:d9:7f:ba:e2:12:db:ea:70:ff:c0:13:bb:
71:46:9c:a9:3b:e9:9e:fe:ed:3b:53:b5:c9:25:d9:
aa:9c:6e:d8:4c:73:87:74:ea:85:6d:73:7d:81:25:
aa:7e:ed:c9:09:be:2a:29:dd:be:54:33:33:a5:6d:
5e:b1:9a:36:6e:b9:80:8c:44:41:77:85:e0:02:be:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:4A:57:F6:BE:1B:64:43:30:4C:4A:61:C4:F7:5C:4A:34:6C:A2
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/AYNKV_a-G2RDMExKYcT3XEo0bKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.184.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e9:7a:43:53:00:4c:cc:56:c9:ef:2f:fa:ca:13:bc:08:9a:
ba:71:a3:67:15:f6:61:84:1a:c6:e7:7f:53:02:f4:75:84:cb:
42:08:29:d1:d8:57:ae:cd:e4:06:38:3c:ed:ba:bf:2e:03:35:
e7:8c:d0:c5:4d:c9:cd:07:7f:00:af:90:09:14:ac:f0:a0:4b:
f3:55:bb:52:09:5d:9c:dd:17:03:74:55:4c:07:b7:63:e8:fe:
bb:53:c5:6f:87:1e:38:b8:82:25:a0:56:78:dc:2f:64:4d:45:
b5:45:9a:cf:02:74:5d:d3:92:64:08:24:07:f8:4e:0e:ce:03:
68:b2:62:84:96:96:14:b7:5f:c9:c4:da:cf:a0:0e:13:8d:99:
20:eb:cb:c4:d9:59:ae:60:2d:a3:53:78:f0:17:38:8e:5f:02:
99:10:4a:8a:47:91:7d:d9:fd:19:03:3a:c8:6b:e6:14:f0:26:
7e:db:5c:a3:af:ea:c2:e2:df:a3:40:97:a2:eb:0a:f8:17:40:
fd:81:7d:0b:99:9e:a7:ac:d6:55:5d:41:68:fa:0c:cb:bb:18:
71:8b:0f:5b:46:83:3f:08:62:29:a2:89:fb:5e:ce:43:48:fe:
d8:9b:a7:77:3f:25:46:55:11:a3:2a:9e:4a:5d:95:0d:09:9f:
4b:8e:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:11 2023 by rpki-client on console-fra.rpki-client.org