Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/sGbV3FLjJghwj2ErTfxMS1QlEYA.roa
File: sGbV3FLjJghwj2ErTfxMS1QlEYA.roa (raw, json)
Hash identifier: +6CZbHFzMnGY2A1aOIXpMaq8Kzz2+03LJ6AvFgWFkFw=
Subject key identifier: B0:66:D5:DC:52:E3:26:08:70:8F:61:2B:4D:FC:4C:4B:54:25:11:80
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 0A17F14B
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/sGbV3FLjJghwj2ErTfxMS1QlEYA.roa
Signing time: Sat 01 Jan 2022 14:58:38 +0000
ROA not before: Sat 01 Jan 2022 14:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29182
IP address blocks: 195.140.144.0/23 maxlen: 23
195.140.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169341259 (0xa17f14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jan 1 14:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b066d5dc52e32608708f612b4dfc4c4b54251180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:13:87:f2:cb:2a:b9:76:ae:c8:4f:36:a1:
8e:c4:2e:a8:e6:90:7f:cd:4c:a4:9d:07:f2:bb:3a:
c0:bd:73:a6:37:a7:dd:cb:4f:89:fb:a1:4f:c5:58:
81:b5:51:64:95:1a:6a:4c:75:dc:d5:8c:73:cd:fd:
33:a0:b6:94:77:4a:6b:45:63:fc:43:b6:71:c3:67:
ae:88:1d:51:14:65:b3:c0:be:0f:21:cd:9c:11:7c:
34:26:5f:e5:40:7a:01:52:26:d8:5b:0c:fe:0e:25:
1b:9a:19:a8:46:6c:7e:7a:59:89:73:2f:bb:47:0a:
69:84:65:8e:90:02:4c:4c:58:90:99:2c:00:34:1e:
21:f1:ad:a9:26:4a:81:21:a6:9c:d6:fa:18:6b:b0:
69:da:62:46:26:9c:e6:10:e3:3d:ae:6a:10:29:fe:
26:eb:8a:85:ad:99:89:ec:43:1f:d8:91:d0:b7:bc:
8a:8a:3a:ca:a0:6d:95:00:f1:ba:34:c5:8f:27:05:
ea:6f:55:f6:04:63:e1:0c:af:29:fb:bd:ca:a0:80:
d0:8e:f4:68:83:2e:b8:17:d8:5a:59:eb:9c:cf:30:
90:96:0e:88:44:68:b9:f5:22:e4:c3:b0:e7:fc:44:
b4:37:97:d3:28:ea:f9:b7:cf:2d:20:72:10:c2:e6:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:D5:DC:52:E3:26:08:70:8F:61:2B:4D:FC:4C:4B:54:25:11:80
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/sGbV3FLjJghwj2ErTfxMS1QlEYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.144.0/22
Signature Algorithm: sha256WithRSAEncryption
07:5a:d0:b5:b7:b0:0f:bf:e8:3a:31:05:65:7c:f6:b8:93:c8:
6a:31:31:72:d4:16:22:58:2a:6a:7f:85:84:92:b2:85:20:99:
42:c5:15:3c:68:d2:33:dd:3d:fe:7d:b7:6d:ec:ae:7d:af:22:
5d:5b:70:6e:1b:06:da:67:2b:8e:33:59:45:f6:9d:0a:08:78:
89:46:01:cc:38:bb:cf:23:cc:9e:5b:86:59:55:d9:7a:bb:04:
27:f5:c6:61:6f:35:24:39:06:a0:0f:ef:7f:86:95:eb:3d:98:
ed:14:21:80:44:6e:af:6c:11:e4:05:ce:87:f9:ec:45:21:2b:
ef:72:4c:91:a0:6b:78:e9:09:6c:fa:e8:7b:13:81:e4:14:c2:
ef:2b:e0:b9:77:df:8a:89:f3:fd:3b:6b:cd:86:ea:90:3e:ee:
96:6b:82:f9:a2:8b:36:72:75:75:00:6f:a9:d6:a4:51:db:7a:
b9:ca:e6:b9:c3:4b:8d:af:1d:da:83:38:06:38:9d:1d:22:6f:
dc:a9:e6:99:31:22:6e:24:e2:9e:d6:31:60:4c:49:53:1b:13:
72:a3:2c:bf:00:15:a3:8f:2e:e7:2c:4d:dc:0a:35:26:24:e7:
70:58:ab:b9:a9:9a:8d:5d:d3:c6:51:df:c5:a4:42:c0:df:f6:
76:f2:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:58 2024 by rpki-client on console-fra.rpki-client.org