Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/1-T6ogLGify1VOodRAP_J160JtKI.roa
File: 1-T6ogLGify1VOodRAP_J160JtKI.roa (raw, json)
Hash identifier: 3/s1cxIcV+zNUdrsBgLt4V5L5MK9wxy/fMCVDQSuC90=
Subject key identifier: F9:3E:A8:80:B1:A2:7F:2D:55:3A:87:51:00:FF:C9:D7:AD:09:B4:A2
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 015E3F
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/1-T6ogLGify1VOodRAP_J160JtKI.roa
Signing time: Tue 21 Jun 2022 14:29:44 +0000
ROA not before: Tue 21 Jun 2022 14:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208935
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89663 (0x15e3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jun 21 14:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f93ea880b1a27f2d553a875100ffc9d7ad09b4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:84:60:fc:ad:27:cc:37:5e:d1:21:2a:35:
11:a8:c6:a8:80:a7:4b:26:16:a6:67:e7:0e:ad:f2:
79:61:75:a7:d8:b5:0f:9a:88:3b:12:d0:21:92:4e:
66:ce:e8:54:d8:95:3c:5c:37:97:09:92:33:ec:25:
b6:25:b7:ce:38:5c:25:bb:d9:c8:f8:ac:ed:5f:d5:
cf:5a:15:48:bc:77:f3:f4:b6:14:9a:4b:de:bc:ef:
34:35:40:cd:7b:14:ef:0e:ea:a6:d4:a0:1f:d0:42:
5c:0b:0a:c1:32:3a:c4:89:6a:35:d5:f8:66:dc:41:
82:38:5c:1f:bd:20:f1:04:e5:aa:52:fa:19:3c:c1:
34:04:53:62:93:7e:01:f6:3a:3e:cb:a5:0b:37:19:
43:dd:4d:41:86:74:6f:5e:a3:1b:e7:91:16:aa:74:
c8:09:da:e4:a0:13:87:c1:f0:32:f5:7d:ff:4c:f7:
5c:24:b9:8d:20:69:60:67:59:fa:79:87:cf:f1:62:
81:c4:0d:5f:bb:bd:f4:f4:58:67:9e:a4:b2:09:5d:
95:3a:17:24:95:04:bb:65:24:e6:ab:1c:71:e6:31:
be:f5:ef:1d:ba:c6:7c:0e:89:d2:7d:15:49:6b:8d:
fa:1d:20:48:06:82:45:9c:a2:89:21:49:65:b2:57:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:A8:80:B1:A2:7F:2D:55:3A:87:51:00:FF:C9:D7:AD:09:B4:A2
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/1-T6ogLGify1VOodRAP_J160JtKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c3:a6:af:c0:42:b3:3c:86:79:32:7a:4e:bf:3c:84:89:6c:
55:64:b9:69:2a:39:5c:4f:9b:a7:41:48:2a:13:d1:63:3a:8d:
8c:1b:cd:90:7c:d3:d5:6b:97:45:ab:0b:26:1d:1e:a9:f3:6c:
c5:7b:ad:2f:bc:6c:b1:df:1b:ba:86:e2:bb:bd:c9:79:b4:a1:
c5:ee:ee:39:df:c3:b1:0b:17:2f:f3:75:72:a7:07:73:b9:18:
a1:82:d0:be:33:8a:0f:e6:ba:33:2f:18:db:2a:ff:6d:73:6c:
18:e2:df:5d:1a:d8:1b:65:43:1c:68:8d:52:3b:75:78:cb:03:
93:fa:2c:3e:56:24:b2:26:62:32:6f:5d:a2:de:b8:18:6e:61:
7d:62:37:77:73:66:88:20:a7:5f:99:b4:41:85:07:b5:56:2f:
fe:cf:8a:f8:01:28:ac:95:f5:02:c4:cb:56:0b:fe:f9:f9:15:
2d:be:f4:07:9c:61:45:73:fc:79:5b:11:d1:46:39:bd:54:fb:
62:2b:6a:b9:3c:2d:dd:73:70:0e:c3:b4:53:c0:b6:a9:6c:27:
c5:3c:f7:44:68:de:40:54:09:39:04:12:ae:43:eb:a3:bb:39:
6b:07:bf:e7:c2:27:79:d5:b0:1f:b5:19:e2:09:c3:cb:fc:8c:
c9:a7:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:57 2024 by rpki-client on console-ams.rpki-client.org