Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_dYucsQSS6H_RbUI4IRxi8PFzuw.roa
File: _dYucsQSS6H_RbUI4IRxi8PFzuw.roa (raw, json)
Hash identifier: fyoA+2mprRXktzNbh0idLJ1inLSt6BcKSf1hJtoTDJk=
Subject key identifier: FD:D6:2E:72:C4:12:4B:A1:FF:45:B5:08:E0:84:71:8B:C3:C5:CE:EC
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B6414D2
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_dYucsQSS6H_RbUI4IRxi8PFzuw.roa
Signing time: Sat 01 Jan 2022 10:02:36 +0000
ROA not before: Sat 01 Jan 2022 10:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30723
IP address blocks: 194.149.38.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459543762 (0x1b6414d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdd62e72c4124ba1ff45b508e084718bc3c5ceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:fd:02:2c:ea:b6:2a:57:dd:0d:ae:2e:f9:
79:4c:05:8f:c6:46:8a:7b:dc:34:a5:58:17:42:7a:
83:fb:31:7b:dc:bf:23:48:0b:3c:67:7c:54:bb:96:
46:8d:56:84:c6:70:ab:c6:62:e0:d4:81:b9:33:a3:
a4:0c:af:71:9f:2b:dd:b3:ad:d5:c0:7c:be:0f:f3:
e4:d9:59:37:60:2e:f6:1d:6c:80:d7:f9:bb:0a:a3:
d7:1c:10:b5:ab:dc:fc:1b:d3:00:2c:5b:6e:e1:13:
76:47:79:12:4d:62:8f:ce:0a:cb:d6:2a:93:f1:cc:
d9:43:87:ee:5f:bb:9a:41:43:4b:31:c4:fa:49:3f:
3a:42:5f:a7:16:2e:5a:62:cb:e7:c1:98:4c:6a:51:
41:2e:04:dc:91:0a:96:ae:fa:f2:a1:68:42:99:97:
db:c5:1c:75:c3:a7:ec:e4:f8:7e:76:d8:fb:09:78:
ed:67:c1:d4:c2:ee:c2:c5:34:4b:dd:45:e9:23:9d:
ea:d5:eb:0f:89:cb:df:ed:22:58:4b:4f:f6:fa:a2:
c5:7b:d9:e6:13:5b:4b:32:1d:a6:e2:16:20:44:d4:
c5:9d:8b:9f:02:b5:0f:4f:3f:7f:64:a4:96:1e:5b:
2f:e2:99:41:ca:51:34:4c:4d:c0:ba:5a:3d:25:e7:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D6:2E:72:C4:12:4B:A1:FF:45:B5:08:E0:84:71:8B:C3:C5:CE:EC
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_dYucsQSS6H_RbUI4IRxi8PFzuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.38.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:0d:a3:44:68:ae:ea:5e:1a:23:fe:a8:c4:7d:23:20:10:5f:
4b:79:26:0b:e8:7a:dd:08:07:b8:c8:cb:fe:cb:e2:9c:a3:bf:
43:3c:85:d7:c5:f3:09:27:2b:7f:94:e2:8a:ed:07:de:60:9e:
9c:16:0f:64:26:7b:70:dd:23:5b:ac:8f:ed:c5:22:96:68:28:
6a:d7:57:84:1d:05:b5:0f:5c:75:82:9e:73:69:15:5c:73:fd:
0a:dc:3a:5f:ce:f1:d0:bc:04:80:23:3a:07:f6:90:35:34:19:
08:1f:49:20:bd:90:2b:a7:22:f1:c6:09:68:af:3b:2f:27:5b:
c6:56:35:47:89:8b:a0:0c:f0:aa:93:8f:53:0c:0b:ec:e7:96:
d3:16:54:35:64:a0:07:58:db:22:b6:6d:bd:5d:13:49:80:52:
48:a3:26:7a:8c:40:fe:0f:78:3e:d4:6d:96:4d:a7:0c:ed:5f:
d6:7d:05:a2:d5:9f:0d:a1:20:a4:11:f1:2f:cc:b3:cd:23:6b:
24:a4:67:dd:9c:5b:9a:03:8c:cf:4a:93:51:a1:7c:d3:8c:74:
e4:7a:02:24:86:19:9e:db:71:89:82:d6:aa:8b:ce:74:f5:cc:
bd:68:e0:7c:d7:2e:da:52:ff:7f:43:41:9c:65:5e:48:b7:57:
9f:64:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org