Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/2lkXEHT5Se8PDKnkkxzB-dTxipA.roa
File: 2lkXEHT5Se8PDKnkkxzB-dTxipA.roa (raw, json)
Hash identifier: kQkl3RpT7lpUM54pyqpfCuwgmHIr9iYDxkz26sC2V0U=
Subject key identifier: DA:59:17:10:74:F9:49:EF:0F:0C:A9:E4:93:1C:C1:F9:D4:F1:8A:90
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 10CD3315
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/2lkXEHT5Se8PDKnkkxzB-dTxipA.roa
Signing time: Tue 17 May 2022 05:03:29 +0000
ROA not before: Tue 17 May 2022 05:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212220
IP address blocks: 194.226.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281883413 (0x10cd3315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: May 17 05:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da59171074f949ef0f0ca9e4931cc1f9d4f18a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:6b:2e:4d:d5:21:05:94:30:dd:64:55:28:
93:b7:48:97:16:55:91:5e:15:c3:d2:70:2e:23:84:
99:55:61:f9:10:9d:f9:23:70:51:59:3d:c9:08:2c:
54:22:63:d2:d8:b8:ce:b3:72:c0:ce:aa:32:96:32:
cb:86:a1:76:70:5b:95:50:d9:eb:25:d1:d2:27:a2:
38:dc:c9:28:82:a8:f4:c0:4e:f6:a0:bf:47:67:6a:
1b:0d:30:2d:ab:d3:5f:bc:eb:12:8b:a9:f5:fd:a5:
f9:69:31:3e:2f:5e:5d:b2:4e:0a:d5:91:6e:6f:a1:
4b:d3:33:5d:ca:c9:9a:40:bc:18:0a:7a:9a:0a:b1:
f9:7e:7e:54:2c:6f:3f:36:d6:29:00:80:0e:40:f7:
80:81:20:51:56:20:d7:44:58:00:a1:c1:77:2a:54:
cb:a9:72:1d:99:01:8c:11:d4:50:aa:4a:53:d4:3b:
00:a5:79:af:b4:9d:36:ee:7f:d1:7c:da:62:05:86:
c0:02:b4:69:cf:da:e3:b2:0b:92:d2:0b:5a:30:a2:
e0:46:e4:89:d6:65:ad:de:0f:31:29:45:ff:c7:ab:
8d:c6:b0:e3:ef:5a:8d:8c:f5:a7:a4:e4:dc:e1:f7:
5f:1c:90:f2:2b:03:07:c6:9c:3d:93:4f:fa:a2:18:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:17:10:74:F9:49:EF:0F:0C:A9:E4:93:1C:C1:F9:D4:F1:8A:90
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/2lkXEHT5Se8PDKnkkxzB-dTxipA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fb:3b:76:96:62:23:c0:92:ed:a0:5c:d5:8c:36:09:95:45:
78:dc:3f:fc:33:86:46:a2:c6:36:14:51:fe:83:3d:54:5a:39:
3a:23:ba:d7:be:2f:a8:10:fa:14:38:81:f9:6a:79:ee:15:5d:
cb:d7:56:bf:0c:07:eb:a6:c1:91:04:b8:79:49:f8:94:70:5a:
83:57:dc:b4:df:99:fd:3a:11:34:40:c5:67:4d:07:e0:75:2e:
09:1f:b0:12:2d:e1:2b:b7:34:7f:44:a1:46:d6:b3:d2:4a:e9:
5a:c3:70:a1:52:12:f2:77:a6:69:9c:a9:fb:3f:a9:96:20:79:
11:cd:c6:da:04:4e:ff:fb:5a:fd:db:d2:59:33:0b:52:56:00:
33:c2:65:0a:0d:b2:de:c3:da:f2:f8:f3:50:3f:d4:1e:4f:ff:
c8:f9:cb:1f:0d:cc:d9:0f:05:77:40:a7:3c:3b:d5:ee:a3:fa:
02:6b:fc:0f:77:ba:eb:28:33:a2:db:08:6a:42:7f:30:08:a0:
3a:39:be:bf:4b:39:02:b8:26:1b:e5:17:63:e3:3a:f3:be:e1:
ab:b8:06:f6:f0:04:2e:96:e4:9b:2d:5a:59:3e:4a:46:63:58:
2e:22:27:43:05:b7:91:2b:5d:69:c4:bc:f4:6b:21:7a:d1:8f:
cb:96:96:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org