Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/2z_MSyhIAR8IW8QqOfC-rh-nf1U.roa
File: 2z_MSyhIAR8IW8QqOfC-rh-nf1U.roa (raw, json)
Hash identifier: lYzWw6Ykwu74UXVjirO4PZG2UPnDEF5wPDPgAVOT86A=
Subject key identifier: DB:3F:CC:4B:28:48:01:1F:08:5B:C4:2A:39:F0:BE:AE:1F:A7:7F:55
Certificate issuer: /CN=dec4ba05c44abfbe6601b2de6549e79151ec9e26
Certificate serial: 0188C5BD
Authority key identifier: DE:C4:BA:05:C4:4A:BF:BE:66:01:B2:DE:65:49:E7:91:51:EC:9E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sS6BcRKv75mAbLeZUnnkVHsniY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/2z_MSyhIAR8IW8QqOfC-rh-nf1U.roa
Signing time: Sat 01 Jan 2022 14:04:35 +0000
ROA not before: Sat 01 Jan 2022 14:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 194.32.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25740733 (0x188c5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4ba05c44abfbe6601b2de6549e79151ec9e26
Validity
Not Before: Jan 1 14:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db3fcc4b2848011f085bc42a39f0beae1fa77f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:9e:e9:80:8c:ec:aa:06:ca:5e:db:7d:89:
01:83:71:8e:30:49:ee:32:83:ac:65:8e:13:b4:e6:
70:fe:18:a6:81:b3:cf:c0:67:93:e5:56:03:46:5d:
06:b8:02:3b:82:d9:d5:1e:8c:14:4c:4c:41:ad:0c:
e6:6b:ee:4c:89:bc:e0:3d:f8:62:19:ab:21:49:82:
8c:33:89:13:95:d6:94:44:fa:8c:26:95:ca:4d:95:
3c:ea:bd:c7:4d:5f:7b:76:61:ca:5a:c7:5c:da:cd:
a0:c6:31:13:9f:70:2b:c8:b2:06:8f:71:58:3f:ff:
1a:b0:7b:c9:07:05:51:1e:ce:a2:47:2f:d1:77:36:
98:4a:45:43:d2:23:68:bb:43:26:93:35:a6:7f:48:
43:87:ae:f0:9a:42:1c:cb:3e:c5:1c:65:06:90:44:
8a:12:97:ca:27:47:68:4c:15:bb:aa:3f:20:28:40:
e9:d7:f9:9c:95:09:ae:83:2b:ac:6f:96:1d:41:38:
cc:1f:57:44:34:32:9a:a3:7b:da:5d:5c:56:34:71:
05:b1:6d:f4:0e:94:d5:49:fe:6d:27:ae:4a:a7:e3:
d0:1d:0d:dd:b6:09:c4:18:f9:1f:5f:fa:ba:5e:0b:
18:cc:d8:80:90:db:dc:66:d3:a8:01:ef:8d:29:4d:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:CC:4B:28:48:01:1F:08:5B:C4:2A:39:F0:BE:AE:1F:A7:7F:55
X509v3 Authority Key Identifier:
keyid:DE:C4:BA:05:C4:4A:BF:BE:66:01:B2:DE:65:49:E7:91:51:EC:9E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sS6BcRKv75mAbLeZUnnkVHsniY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/2z_MSyhIAR8IW8QqOfC-rh-nf1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/3sS6BcRKv75mAbLeZUnnkVHsniY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.104.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e0:57:90:e7:14:7a:24:f3:d0:22:68:7a:c8:ed:f4:12:c4:
15:19:7a:d8:45:98:31:b0:87:21:1e:49:c9:d2:29:24:1d:0a:
c3:8b:b3:a0:17:97:d0:2a:ba:44:ae:29:a2:06:d8:11:be:e6:
5c:c0:e6:60:6a:28:70:8e:11:68:80:a3:59:49:6c:59:c7:d8:
c9:11:9b:f0:1d:86:58:d9:09:78:ba:34:8c:93:b8:b2:cf:aa:
16:3d:1f:ea:a2:32:b2:21:2c:5b:17:73:d8:15:8f:2b:5b:20:
61:8a:8c:fd:5e:fe:0d:94:54:36:02:6c:9e:4d:c1:37:3d:86:
58:4a:78:18:36:51:42:fe:95:42:3d:0f:4d:16:98:dc:73:f7:
43:62:1b:36:d6:c2:e8:62:fc:bf:4e:13:93:a1:7a:22:6d:df:
78:ba:c2:b0:5a:3e:46:01:23:51:c7:25:8c:ed:f6:37:85:91:
df:88:0a:85:c5:1e:51:27:1e:90:84:9f:43:6b:10:8b:f5:4b:
08:73:f6:36:ff:0c:b2:ab:1b:46:75:3d:b7:0e:b9:cf:e0:b3:
83:23:7b:1e:1f:74:b4:46:73:71:b2:b9:ff:13:c9:e0:6e:75:
7e:f6:78:5b:1d:47:60:8e:37:d9:9f:2d:21:45:1c:c4:c4:5b:
e7:a7:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:39 2023 by rpki-client on console-fra.rpki-client.org