Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/oVxYQJ2jpVASjqvmeDUl5rkw11E.roa
File: oVxYQJ2jpVASjqvmeDUl5rkw11E.roa (raw, json)
Hash identifier: h3Zm14nmQxNlaQG5rgrkz186z8bXIsWbGqhSsieetkA=
Subject key identifier: A1:5C:58:40:9D:A3:A5:50:12:8E:AB:E6:78:35:25:E6:B9:30:D7:51
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 431A6E95
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/oVxYQJ2jpVASjqvmeDUl5rkw11E.roa
Signing time: Sat 01 Jan 2022 05:05:27 +0000
ROA not before: Sat 01 Jan 2022 05:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12582
IP address blocks: 192.194.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125805717 (0x431a6e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 05:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a15c58409da3a550128eabe6783525e6b930d751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:9d:f9:37:e8:24:49:cd:23:a5:9e:0c:8c:
3a:a8:ee:1d:5a:c4:ad:57:b3:0a:20:36:9e:5c:c1:
d9:a9:a3:0a:1a:1e:79:75:06:3f:df:6e:c7:6a:37:
fb:cc:68:d3:47:1c:4d:d5:36:9f:db:ee:65:73:ab:
4d:8f:9f:4e:2f:1b:0e:0b:a9:b8:0f:68:b2:fc:f4:
de:0d:d1:50:25:e3:2e:ef:8d:4c:b5:a7:43:e0:5d:
3f:28:3b:37:d2:7a:a3:37:0c:2a:53:a6:77:86:71:
2c:d7:77:94:a0:83:e4:4a:51:17:f8:16:ce:4a:a4:
e4:a6:2d:54:0e:90:59:b7:21:3d:2a:9b:d6:1c:12:
83:ac:2d:e3:50:4f:e9:7c:94:50:b1:08:27:36:c3:
54:12:2d:90:9b:cc:61:53:13:a8:0c:9a:8e:b8:62:
38:f3:0b:bc:0b:4f:f0:b4:0f:a3:ea:a4:b8:6d:32:
b9:92:ae:6e:52:dc:8a:74:a0:2c:86:a7:7a:b6:82:
9b:59:45:b3:8a:ab:6b:6a:bf:76:59:97:d3:91:66:
6f:84:03:18:92:c9:12:58:ff:b9:19:f8:36:07:3f:
f3:bd:db:4b:b7:9c:a8:1f:85:ae:24:58:8f:d8:56:
82:98:25:78:ad:88:58:a4:3a:0f:00:1f:d2:47:fb:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5C:58:40:9D:A3:A5:50:12:8E:AB:E6:78:35:25:E6:B9:30:D7:51
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/oVxYQJ2jpVASjqvmeDUl5rkw11E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.194.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c8:85:ae:14:9f:6a:67:3e:d2:d9:54:c3:16:70:ce:af:52:
fe:e3:40:d8:8e:17:5c:be:ad:89:61:1c:93:5f:ce:ce:50:bc:
f9:93:17:43:22:e0:c7:95:d7:c8:86:ab:a5:18:45:28:f7:94:
21:6e:a0:33:0e:32:34:62:01:cf:10:26:11:2b:1d:be:c5:81:
bc:46:8a:e5:9f:ab:9f:8b:01:3d:87:2b:b8:8f:c0:53:87:d2:
6a:82:ff:2c:ef:83:63:4d:f7:1f:9c:52:f4:d9:f9:40:2c:a0:
48:6e:40:62:97:5a:5d:5d:73:ec:ca:dd:9e:e4:62:b4:92:07:
e9:4f:79:ed:89:03:e8:d5:a2:df:a2:2e:10:b2:41:5c:69:eb:
84:b1:8b:73:2f:37:68:08:d2:27:1a:c5:80:20:98:cf:ca:a2:
50:44:a5:e2:7c:f8:38:5f:1a:96:db:51:0c:c0:c7:3e:e8:77:
18:43:8e:7d:62:ce:1d:0e:51:78:72:17:62:c1:00:f7:0a:e3:
70:8c:90:54:74:3f:0b:35:78:2a:3d:a7:68:c1:09:4e:68:74:
d1:aa:bd:f8:ee:63:04:eb:3a:9f:01:67:cf:2d:72:5b:97:e9:
20:a0:9f:52:91:ff:b7:ea:bf:61:00:5c:52:ae:8b:53:a9:6c:
23:ff:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org