Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/rT_k6PnQhF3BBEUd-rl7r54ux_o.roa
File: rT_k6PnQhF3BBEUd-rl7r54ux_o.roa (raw, json)
Hash identifier: OoODpT1A/kasXAwrn2N6KmNVTI4i2z4Ia5z61xdYSk0=
Subject key identifier: AD:3F:E4:E8:F9:D0:84:5D:C1:04:45:1D:FA:B9:7B:AF:9E:2E:C7:FA
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 0A102DF3
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/rT_k6PnQhF3BBEUd-rl7r54ux_o.roa
Signing time: Sat 01 Jan 2022 11:59:19 +0000
ROA not before: Sat 01 Jan 2022 11:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47432
IP address blocks: 195.182.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168832499 (0xa102df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Jan 1 11:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad3fe4e8f9d0845dc104451dfab97baf9e2ec7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:02:0c:a1:5d:4c:21:ab:62:48:32:92:6d:
b2:69:5e:bd:30:eb:4b:84:39:cf:81:d4:ce:79:a4:
9a:dd:ab:c8:16:04:d3:fb:66:eb:70:49:01:56:d7:
b3:3b:3a:d3:1d:3d:15:d6:76:1a:52:1b:67:1e:65:
e3:f7:f9:54:d4:d7:0d:15:03:13:bd:4e:3a:b1:5b:
16:f4:87:af:58:f7:ef:30:f2:f6:d5:c5:22:a5:a0:
49:a7:82:4e:3b:2f:02:37:5e:eb:91:81:e9:de:08:
11:10:40:62:89:26:5d:d9:c5:9e:40:42:20:35:09:
b0:7c:2a:b6:57:f6:03:2c:8d:53:8b:72:a3:be:b7:
ff:46:81:16:5b:e3:7e:d1:4b:a1:50:de:8a:08:51:
cd:a7:b0:c8:2a:29:cd:15:4e:bf:cb:30:04:5b:19:
05:ff:4b:7e:21:03:99:39:6a:36:82:fa:ec:d8:06:
71:89:af:47:ae:03:11:dc:dd:d4:64:f8:e5:8d:de:
cc:98:c5:c2:a3:d6:a2:01:0f:2e:66:79:ac:9e:56:
15:7e:f8:25:0d:1a:bd:07:6d:6c:37:a9:58:ed:12:
a5:09:52:88:ed:26:c9:87:e6:5a:6a:b6:e6:58:06:
9d:5f:e9:70:8f:eb:f1:71:2c:bb:e8:b3:88:8d:d5:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:E4:E8:F9:D0:84:5D:C1:04:45:1D:FA:B9:7B:AF:9E:2E:C7:FA
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/rT_k6PnQhF3BBEUd-rl7r54ux_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b4:3d:31:85:99:d8:e3:0b:87:2a:0b:4f:fc:e3:00:4e:e2:
12:fa:dc:bd:92:92:58:dd:62:b6:a6:47:61:1b:f2:3e:19:d5:
b4:e2:53:07:2b:f7:c0:55:39:6b:be:0d:0d:70:7e:17:fb:ea:
af:9f:9f:2b:ab:d6:f9:a1:46:54:7a:18:ff:e0:8d:55:63:8b:
88:2f:d3:93:26:31:1a:f0:36:de:ba:63:f7:c6:75:18:c8:00:
97:cc:b7:fc:98:2c:fa:a8:42:20:5d:e1:5f:cb:fb:9b:5d:e4:
e2:bc:05:c1:16:64:34:e0:8e:86:0b:cd:60:32:75:12:9f:fb:
8a:88:02:97:f8:1a:30:97:06:dd:31:f2:fc:a1:b1:f5:d2:c3:
90:2a:91:23:1a:d8:d6:1b:a1:8f:b8:84:b4:d1:77:b5:42:c4:
e2:75:f3:f9:16:83:84:ab:0a:ca:12:db:95:c8:b5:93:0f:ce:
8d:84:cc:bd:63:4c:3c:de:52:03:ad:b8:53:53:4d:a7:e8:d9:
25:de:ba:99:4c:8d:26:7f:08:85:09:31:c9:57:07:25:5b:73:
57:c8:d1:05:7a:1c:f1:08:26:b2:86:1d:f3:3f:2a:5d:1b:5f:
38:f8:31:e3:5f:5d:8a:99:69:d2:12:57:32:4c:3c:84:80:1c:
cf:05:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:30 2024 by rpki-client on console-fra.rpki-client.org