Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/p3vMxc22cMWHmquo4Zc67YeGQjQ.roa
File: p3vMxc22cMWHmquo4Zc67YeGQjQ.roa (raw, json)
Hash identifier: TJbL8zQsJilgBYeojWCFeu4K6DwOaeyML4jR6/5NfTQ=
Subject key identifier: A7:7B:CC:C5:CD:B6:70:C5:87:9A:AB:A8:E1:97:3A:ED:87:86:42:34
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B615485
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/p3vMxc22cMWHmquo4Zc67YeGQjQ.roa
Signing time: Sat 01 Jan 2022 10:02:34 +0000
ROA not before: Sat 01 Jan 2022 10:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25539
IP address blocks: 195.56.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459363461 (0x1b615485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a77bccc5cdb670c5879aaba8e1973aed87864234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:40:e8:a8:8d:4e:31:88:f2:8b:de:09:68:
8b:bd:a3:bc:94:87:9f:60:7f:21:9a:2a:bb:45:28:
2a:67:91:37:7a:d0:5d:ef:0e:97:77:93:a7:4f:85:
5a:67:bb:0c:ed:6c:5f:93:ed:ff:97:d4:8b:13:5e:
85:25:02:21:ff:a5:c6:c1:9f:03:5b:b5:62:66:9e:
c1:a1:66:12:45:94:f8:ed:69:77:42:04:d0:fc:64:
90:2e:6f:09:bc:9a:92:17:13:bd:16:10:93:d9:64:
16:80:21:f8:ce:fd:13:cb:77:bb:20:50:c6:72:f3:
45:1e:8d:f7:c3:4e:02:74:98:41:cb:43:d2:33:3e:
89:c6:2f:81:3c:e5:c7:37:3a:da:d6:84:93:ab:05:
a1:3e:af:44:f3:3d:4a:5b:ad:a3:a9:ea:4e:ac:fa:
a8:b8:41:bd:76:f7:86:5d:dc:3c:0b:ff:78:75:a3:
05:af:11:cc:c9:24:d2:47:6c:35:54:f2:77:56:b4:
77:34:95:2b:c1:81:50:ba:ed:f5:9a:80:c1:7d:42:
d5:fa:8a:97:7e:71:5f:13:11:c3:8f:f6:e9:18:2e:
f3:77:ac:97:d8:21:f1:1e:29:f3:f1:66:7b:c8:0b:
72:b6:4f:f6:16:46:c6:50:33:25:12:8b:05:56:a2:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:CC:C5:CD:B6:70:C5:87:9A:AB:A8:E1:97:3A:ED:87:86:42:34
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/p3vMxc22cMWHmquo4Zc67YeGQjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.56.68.0/24
Signature Algorithm: sha256WithRSAEncryption
66:08:ad:43:fd:24:98:b1:20:be:1f:49:b2:f5:a0:d1:f1:f7:
3a:22:2c:ba:c4:de:86:e7:2a:19:fe:84:80:9d:3d:07:fb:3d:
63:0a:01:43:5b:6c:3f:c6:6a:12:2a:87:76:af:19:04:ad:ff:
43:e2:c1:06:89:20:d8:df:d5:2d:3b:05:30:43:6f:8b:61:56:
22:8f:0c:2c:36:9f:aa:6b:d6:68:5c:74:c2:0f:df:31:82:6f:
35:71:e1:57:07:03:fb:f0:86:1b:aa:4f:29:f4:26:f6:bb:03:
66:cf:aa:81:37:45:81:fa:1a:b9:ba:bf:05:ca:51:a0:38:90:
ea:f8:03:40:f8:c9:cd:5c:c4:c2:ce:30:fd:01:84:c0:77:8c:
85:9e:9a:b3:49:7c:81:37:b7:f8:13:69:af:8e:49:a9:43:ac:
fd:47:40:61:d3:30:11:3d:2e:59:24:3f:86:8c:64:99:b5:48:
4e:c5:1e:bf:ac:0c:d4:fc:f9:1b:cc:81:f5:bf:48:15:75:3e:
1b:b9:b4:b6:bb:bb:4c:b1:bf:48:b1:f1:0f:fd:42:ec:26:77:
69:b9:b6:56:32:a5:28:8e:2d:b4:67:45:04:1d:1e:99:b9:64:
84:78:db:fe:de:3a:b2:75:df:d7:e6:5e:be:2c:71:8e:d2:65:
17:72:8d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org