Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/SYGgx3NASp9ozHFsfZKmyjtpfO0.roa
File: SYGgx3NASp9ozHFsfZKmyjtpfO0.roa (raw, json)
Hash identifier: JQJgRn4EQt9zBIzXdsrTVoCZU4HFlWLffyZhuoIaONo=
Subject key identifier: 49:81:A0:C7:73:40:4A:9F:68:CC:71:6C:7D:92:A6:CA:3B:69:7C:ED
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 0BB4E67D
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/SYGgx3NASp9ozHFsfZKmyjtpfO0.roa
Signing time: Sat 01 Jan 2022 05:05:43 +0000
ROA not before: Sat 01 Jan 2022 05:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43341
IP address blocks: 194.113.144.0/22 maxlen: 22
2a07:e300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196404861 (0xbb4e67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jan 1 05:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4981a0c773404a9f68cc716c7d92a6ca3b697ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:18:fe:bf:b7:f8:33:7b:c6:4d:45:f8:a6:
48:06:26:da:a3:25:3e:d6:f5:7e:41:d4:c2:51:75:
00:95:bb:a0:88:21:dc:61:77:89:4f:49:4a:ba:fc:
0e:00:c1:0a:0d:26:3d:08:54:33:6e:ff:81:64:ee:
09:4f:94:bb:e8:0b:94:8e:49:27:11:dc:2f:3e:10:
82:d4:bd:d1:3d:e2:0c:2a:a9:0f:da:dd:a8:97:c5:
f8:f9:4a:8d:31:f2:52:2d:49:37:fc:69:71:55:e3:
c2:0f:f7:1e:40:ca:6b:a2:ec:51:7e:a1:47:b9:8d:
7c:3c:3b:b6:2b:f5:b8:4e:01:71:47:4d:08:92:c5:
0e:37:29:fa:8e:cb:b7:f3:d6:53:4f:85:23:ed:9d:
94:6d:41:da:11:a6:3a:91:11:99:c6:9e:5b:09:6c:
32:8e:3c:b4:e4:14:07:e8:da:44:bb:1a:55:f3:9c:
52:92:79:1b:14:a9:14:88:c7:25:a9:6b:78:b1:f1:
dc:fd:33:5d:5c:5f:e7:f9:de:98:6d:2d:b4:e1:f1:
30:f6:92:4d:9c:d7:c0:42:be:6f:1a:e7:f3:25:8b:
4f:84:04:4b:08:b2:71:46:92:5a:9f:58:44:28:b2:
77:f5:c3:bb:98:4d:eb:1e:54:ae:c4:82:aa:b1:46:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:A0:C7:73:40:4A:9F:68:CC:71:6C:7D:92:A6:CA:3B:69:7C:ED
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/SYGgx3NASp9ozHFsfZKmyjtpfO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.144.0/22
IPv6:
2a07:e300::/29
Signature Algorithm: sha256WithRSAEncryption
20:8e:44:e5:d1:31:3e:86:b0:28:92:65:83:68:47:6d:56:6b:
c3:a3:8d:f7:05:23:69:2b:90:50:26:5f:7e:72:28:0e:2a:40:
21:7a:09:b5:c6:b4:ad:37:46:9a:64:66:85:00:75:6b:55:3d:
62:4d:fb:79:8d:62:c3:4b:ec:44:ac:00:2d:4e:a4:c6:3b:77:
3d:12:4e:31:69:cb:76:7c:57:01:dc:81:55:50:4a:c2:7f:6f:
a0:1e:ae:bc:76:f4:25:94:31:67:59:f9:d3:82:fa:a8:a7:36:
3e:81:0c:12:a2:02:21:3a:33:a5:77:15:03:85:79:1b:5d:04:
ae:6c:8b:b1:a5:1d:0e:1e:a6:50:42:2b:74:65:c3:bf:f2:dc:
af:d2:89:87:66:bb:d0:8a:55:bd:dd:4f:0f:86:e6:98:af:d4:
4d:66:f3:71:70:4b:18:2f:1b:c3:ab:19:f7:4b:35:7d:4f:5b:
70:5b:46:a1:a0:a3:09:61:1e:2c:31:e2:f5:c9:db:8d:c1:84:
4d:73:90:a2:57:a0:c7:8f:3b:95:c0:7f:9d:28:aa:84:fa:7d:
8e:a7:8f:44:24:d4:1d:1a:95:bc:f7:b9:95:e0:92:43:b2:63:
92:8d:09:ea:54:82:ba:06:25:2a:a5:64:b7:0e:e5:58:cf:a0:
8f:f1:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org