Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/pIWBkUluxdI-INk8cpWSkSSvy_A.roa
File: pIWBkUluxdI-INk8cpWSkSSvy_A.roa (raw, json)
Hash identifier: xFPMPsvaoSe1KUweMzx1o2N2ivxy8VOLhMV1Z7mI/YM=
Subject key identifier: A4:85:81:91:49:6E:C5:D2:3E:20:D9:3C:72:95:92:91:24:AF:CB:F0
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B5A307B
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/pIWBkUluxdI-INk8cpWSkSSvy_A.roa
Signing time: Sat 01 Jan 2022 10:02:30 +0000
ROA not before: Sat 01 Jan 2022 10:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12589
IP address blocks: 194.88.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458895483 (0x1b5a307b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4858191496ec5d23e20d93c7295929124afcbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:f3:f2:80:74:fd:48:ac:1f:28:53:90:a5:
75:74:3f:12:8e:d1:f6:3c:7b:62:a5:07:0b:92:0d:
63:c5:bb:5f:c6:d0:89:41:21:b2:91:20:ae:68:03:
dc:0d:ac:93:fc:39:93:1f:b2:61:13:09:2d:c3:90:
7e:59:4e:b1:42:9e:73:cc:2c:d5:b8:7d:97:f6:aa:
f1:a0:fd:b0:43:5a:0e:97:96:36:12:5a:c1:af:44:
97:ac:1a:ac:a8:3b:06:ca:22:b2:43:ce:28:ec:a0:
40:e2:f2:ea:e7:1a:c0:23:d9:d7:96:33:cf:f7:13:
50:60:6d:ab:e3:ca:fb:a4:3f:44:5a:d1:d9:5a:38:
ed:71:59:60:65:c3:01:c0:03:7f:42:78:33:88:47:
82:75:96:e6:34:f3:ed:68:e6:fa:da:86:3a:80:3f:
63:1f:26:f5:0b:4a:5d:88:ed:ea:d9:49:13:35:ec:
ab:01:37:50:de:2b:04:5b:d8:b2:3f:2f:0d:35:fd:
9e:e8:3f:45:35:ed:82:74:1c:d6:ed:6b:83:c2:8f:
38:2d:18:fc:d0:7a:f5:7c:00:e8:77:f7:af:6c:e5:
d9:b6:b9:84:40:aa:a3:fa:72:61:bc:e4:06:73:89:
ca:db:5c:5f:97:93:33:52:83:5a:e7:89:bb:73:f8:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:81:91:49:6E:C5:D2:3E:20:D9:3C:72:95:92:91:24:AF:CB:F0
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/pIWBkUluxdI-INk8cpWSkSSvy_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.45.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ca:fc:af:38:9d:ac:af:97:75:f6:03:a5:e7:0d:39:8a:50:
ad:0c:a0:f5:3f:26:f7:a5:94:97:68:da:d6:64:7e:4d:88:01:
a8:76:07:b2:a3:b0:56:db:be:c5:5b:58:15:20:e2:6f:09:6c:
57:f1:43:a3:78:d0:23:f7:7d:39:60:3c:54:6a:f5:72:77:60:
84:0b:59:3f:78:a8:1d:57:84:f9:be:bf:b0:e6:0f:be:96:95:
83:b6:63:29:10:d7:a7:75:47:38:88:03:2a:2b:dc:34:e0:e3:
91:d3:6e:77:f3:3c:f2:41:1a:6b:87:be:74:69:29:97:c3:ed:
23:69:5e:d9:00:6a:08:cf:8e:02:62:f0:d5:a9:55:99:96:d4:
5e:39:ba:01:34:bb:8c:59:07:a2:24:fb:f5:37:63:fe:80:da:
a2:27:dc:b7:74:0b:2c:b7:55:e8:61:b4:8a:66:34:62:bf:ab:
b2:cb:58:eb:48:71:2b:47:7c:d5:3a:8c:4f:f8:3a:10:65:8d:
43:ac:69:24:e1:be:3c:3f:5e:44:d3:53:fc:61:bc:c3:62:68:
0b:53:3b:25:8f:bd:10:b2:0a:09:f4:b6:75:69:e4:52:51:c0:
82:66:9d:88:c4:4b:7d:07:ca:ff:b1:20:c7:ba:9b:50:3a:59:
51:1b:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org