Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8k0yFCsHUSwFeef6AtTI3pbgH4k.roa
File: 8k0yFCsHUSwFeef6AtTI3pbgH4k.roa (raw, json)
Hash identifier: pAdtb9Zy5LrXEzSKt32ZtaE9dbnMfqA3DWQ9QFfj5Uw=
Subject key identifier: F2:4D:32:14:2B:07:51:2C:05:79:E7:FA:02:D4:C8:DE:96:E0:1F:89
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B5C4E94
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8k0yFCsHUSwFeef6AtTI3pbgH4k.roa
Signing time: Sat 01 Jan 2022 10:02:31 +0000
ROA not before: Sat 01 Jan 2022 10:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16015
IP address blocks: 194.149.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459034260 (0x1b5c4e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f24d32142b07512c0579e7fa02d4c8de96e01f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:7d:22:80:94:77:ec:29:ed:d8:a5:74:e0:
47:3d:17:40:0f:f3:8c:da:a0:f8:b3:5c:b7:63:51:
db:8d:03:2a:8a:bf:44:ea:03:be:c1:5e:7a:42:bc:
34:46:9d:4d:a2:b4:c0:fc:76:a9:10:60:f3:cc:fa:
c7:c0:57:7d:60:20:db:ce:f2:47:d4:c1:f1:cc:96:
7a:ca:d8:fd:ad:9e:59:15:18:b5:b1:76:07:d7:67:
c6:cb:17:5f:90:f6:7a:57:8b:b4:7b:73:aa:58:b3:
67:7e:66:d0:92:ed:25:d8:a2:e8:b5:1b:27:f3:75:
08:4d:58:5a:e1:ab:a5:a9:79:6e:c9:a0:4e:63:11:
e3:ee:7d:f1:f0:f0:52:9c:fd:2f:bf:eb:63:51:d1:
5e:35:eb:5c:e2:12:93:3f:9a:34:8e:96:16:49:94:
08:41:7f:30:c1:65:da:4e:0f:0d:13:5e:33:a5:d7:
35:4e:2a:5b:2c:99:26:0b:68:95:14:23:cd:ce:e1:
7f:aa:81:a7:0f:b4:51:86:e8:1c:79:96:df:fa:03:
31:fb:00:dc:ba:89:d7:2b:d1:41:d0:b5:7d:ce:a9:
fe:f5:89:04:6a:73:13:78:ff:c8:03:1b:d1:10:a4:
3b:1f:91:f1:84:73:8d:d2:a6:9f:ab:e2:fa:30:f4:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4D:32:14:2B:07:51:2C:05:79:E7:FA:02:D4:C8:DE:96:E0:1F:89
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8k0yFCsHUSwFeef6AtTI3pbgH4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.46.0/24
Signature Algorithm: sha256WithRSAEncryption
32:53:4c:db:bd:ab:43:dc:fd:de:66:59:56:72:09:c8:c3:81:
3d:e1:5a:84:18:69:92:14:ae:e0:e5:1f:69:df:d6:55:f9:72:
10:8f:6b:84:fe:46:2d:77:93:7c:1d:ed:f3:03:ea:12:ca:5f:
90:e9:5d:99:c5:bd:dc:51:37:30:f7:85:03:4f:c2:67:ae:e3:
5e:dc:da:2c:d4:9c:35:f8:fa:03:93:95:e1:27:4a:6d:c2:b6:
1d:05:8e:d1:19:6c:07:9b:be:5a:54:0c:28:cb:3e:04:c2:29:
9f:c4:83:14:02:14:cb:82:5b:22:37:f5:c4:e0:dc:80:00:1e:
9f:60:ab:bd:7a:89:9d:9e:eb:60:b4:a8:63:05:02:6e:ca:74:
37:f2:17:f1:ea:89:13:62:ff:95:89:f1:a1:49:84:37:f4:63:
b9:11:e8:94:d5:57:ba:f4:00:07:76:25:b6:83:ee:2f:43:80:
65:43:1c:1d:c2:2c:8b:99:d0:8e:91:65:4a:82:cf:df:ac:3f:
bd:b0:4d:5b:0e:a6:bf:3a:96:ce:77:57:02:57:4b:70:78:e9:
4b:14:aa:ba:47:cb:89:d1:6c:80:be:31:ee:3e:2e:7e:46:d7:
66:82:fb:88:61:cf:d6:7c:28:4d:8f:7d:a9:66:e5:44:1c:1f:
c0:2b:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org