Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xE6CxgRHrf_8-y98zwtg5GTZk28.roa
File: xE6CxgRHrf_8-y98zwtg5GTZk28.roa (raw, json)
Hash identifier: Zf7jvoEgwiK0QOb1lzcUnkOwSggCGA4TP8tHZ+uXVF0=
Subject key identifier: C4:4E:82:C6:04:47:AD:FF:FC:FB:2F:7C:CF:0B:60:E4:64:D9:93:6F
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 060569F0
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xE6CxgRHrf_8-y98zwtg5GTZk28.roa
Signing time: Sat 01 Jan 2022 16:01:23 +0000
ROA not before: Sat 01 Jan 2022 16:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210768
IP address blocks: 195.5.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101018096 (0x60569f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c44e82c60447adfffcfb2f7ccf0b60e464d9936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:08:51:67:54:d6:84:53:61:7e:ab:64:06:
a9:c4:c5:af:91:13:30:72:a2:36:f9:88:f9:d3:75:
4f:f6:8e:74:3b:2d:2b:41:95:fc:96:d0:9c:2f:3a:
f1:7a:99:66:c2:08:9b:6b:e1:5b:19:19:d6:b4:06:
76:79:11:8e:b5:ba:73:ca:3c:7d:7f:c6:1a:4e:23:
be:cb:f8:b7:53:8c:b4:c1:b7:3c:33:ce:5a:cc:89:
21:57:59:01:dd:40:ae:7d:09:db:71:56:c6:bd:4b:
86:e1:2a:45:4b:8a:87:86:7d:ad:9e:01:04:ab:a0:
52:66:4a:44:68:48:46:3d:cf:51:8f:a0:9e:70:7d:
7d:3e:65:79:60:dd:8b:58:f3:64:68:7e:a1:a5:c7:
1d:bd:d3:63:cf:83:a7:ab:f8:ca:a2:5c:66:77:56:
58:3d:d6:68:d1:73:85:b9:44:3e:64:5d:d7:28:7f:
5e:3d:3a:df:0a:75:03:97:90:cc:0c:aa:e7:4b:28:
bb:65:2a:03:2f:0a:50:35:80:dc:fa:9f:fb:13:7f:
24:d4:a8:a4:b0:1d:59:53:46:ad:ac:b9:0b:5f:91:
5b:aa:cf:45:1a:b2:32:c7:9b:b1:ce:72:f3:e9:66:
74:69:b6:69:51:8b:79:9f:cc:cd:50:15:ef:85:a7:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:82:C6:04:47:AD:FF:FC:FB:2F:7C:CF:0B:60:E4:64:D9:93:6F
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xE6CxgRHrf_8-y98zwtg5GTZk28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.114.0/24
Signature Algorithm: sha256WithRSAEncryption
75:49:00:81:c2:6e:d3:66:0e:2a:98:fa:79:01:7a:44:08:e5:
a0:31:aa:51:6b:66:7c:f7:d3:3c:92:9f:1d:01:70:e1:af:7a:
df:e9:8f:d6:01:b8:2a:67:e9:86:a8:c1:cc:b7:a9:e9:3d:27:
9c:8b:48:08:17:b8:41:74:07:3c:ce:fe:7a:96:81:1e:3a:57:
d1:9c:88:66:c7:86:37:72:4e:0a:74:ed:08:cf:13:6e:a2:93:
3c:6b:46:c7:fb:95:53:26:ad:87:d8:ba:7a:e4:98:7d:58:7a:
5e:02:be:e5:48:58:08:12:e9:f2:3e:5f:cf:46:9c:5e:09:bc:
e3:95:bb:76:f6:43:67:01:65:4d:93:4b:0b:76:40:ae:8b:ef:
e3:ff:01:e4:ab:16:52:55:54:7a:d4:bb:b9:ef:4b:89:35:e0:
a9:01:9e:ec:c0:1c:1d:6f:cb:d2:03:66:cf:16:a8:f3:0f:20:
15:54:cb:2d:91:dd:ba:e9:d0:7f:48:c5:7e:d2:c0:06:4f:33:
99:76:43:4b:ee:0e:99:95:dc:38:65:28:53:a4:2b:a4:44:0c:
fa:ab:e0:9b:d2:33:2b:cf:1b:e6:37:cc:19:9e:a1:23:66:e5:
b9:7a:4c:c1:fe:0d:bb:9d:76:bc:bd:db:e5:bf:eb:f1:0c:74:
c1:77:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org