Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/cp2rjkISJb1sricfxr6R-pPSg5E.roa
File: cp2rjkISJb1sricfxr6R-pPSg5E.roa (raw, json)
Hash identifier: 0d9ipzIHITUtLFHul+6BzKpqBVKMgok+bzSbhNcV06o=
Subject key identifier: 72:9D:AB:8E:42:12:25:BD:6C:AE:27:1F:C6:BE:91:FA:93:D2:83:91
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 01842E9F38B075240E9B72083C082AF472DF
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/cp2rjkISJb1sricfxr6R-pPSg5E.roa
Signing time: Mon 31 Oct 2022 15:18:17 +0000
ROA not before: Mon 31 Oct 2022 15:18:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 286
IP address blocks: 194.151.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:9f:38:b0:75:24:0e:9b:72:08:3c:08:2a:f4:72:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Oct 31 15:18:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=729dab8e421225bd6cae271fc6be91fa93d28391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:ad:3a:c3:22:62:5f:7b:c9:e2:25:7c:5a:
44:56:a1:86:48:cb:b7:f6:9a:b7:6b:8e:04:65:a8:
88:e1:a5:0e:7e:88:cd:d2:86:14:34:bb:f5:c0:5c:
c7:47:b8:46:d2:9a:a5:60:3f:50:d9:14:2c:a2:5a:
07:11:46:b4:d8:d7:85:ec:53:b0:2e:9e:53:31:cc:
9a:a5:01:98:ec:66:6a:2f:30:6d:cf:92:b9:b4:d4:
6d:93:d2:99:61:2f:ef:ae:46:43:f3:22:b5:9e:b0:
43:a3:61:ea:21:33:33:fe:c7:09:4e:1a:7a:d8:34:
bd:20:0a:5b:de:9a:c2:06:fe:27:55:42:ad:14:c9:
d0:68:4c:58:97:1c:a9:dd:b2:d7:a3:e4:01:91:85:
4a:67:c4:b3:f7:20:1e:f0:1e:7b:ea:6b:b1:d0:98:
b3:2a:dc:fd:1e:5c:55:7d:1d:cc:f7:31:a3:6e:93:
ed:64:25:05:15:e6:5d:5c:e2:b8:73:18:8b:d7:79:
09:82:e1:f1:62:8b:44:41:9a:9c:21:48:65:3f:d7:
96:f9:ab:cf:9e:37:16:cc:02:22:54:75:d8:a4:eb:
27:cc:ed:e1:10:8e:67:da:64:9d:82:96:f8:0c:58:
99:46:aa:36:f0:58:8d:0f:0e:8a:2d:2c:85:e1:bb:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:AB:8E:42:12:25:BD:6C:AE:27:1F:C6:BE:91:FA:93:D2:83:91
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/cp2rjkISJb1sricfxr6R-pPSg5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.151.203.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e4:60:20:33:a4:1b:6e:fe:c5:24:52:89:ad:2d:ef:ab:37:
3a:10:71:08:3c:5b:bd:38:26:5e:ea:54:2d:cb:45:3e:ed:e0:
e2:7e:0c:c7:38:51:f3:fd:77:71:dd:47:33:df:6e:28:b6:c0:
92:8b:8d:14:59:bb:2c:d2:44:27:e4:a3:a2:a7:dd:5f:c8:4c:
99:1f:e6:43:b2:a7:2a:d1:f1:ca:44:d1:57:e5:29:9a:57:e8:
b4:a3:c5:ba:70:75:e3:e1:a3:67:85:6d:71:5c:3f:c1:9b:13:
95:a9:70:bf:69:eb:93:a2:9e:8c:62:49:d3:2b:c0:e9:a2:8f:
d9:cc:c2:3d:72:0f:d5:56:57:fb:90:2c:18:32:b8:28:9b:e6:
f8:34:14:d8:29:0d:9f:57:e4:0d:3c:9c:f6:ca:93:4f:02:92:
42:09:a2:d3:a1:57:61:e7:11:75:cf:e9:76:0b:6c:9d:95:c4:
09:4f:4d:4a:2a:94:21:15:b4:85:07:1f:0f:f9:42:3f:4f:cf:
87:d2:82:b7:18:b5:78:a6:18:31:ca:f7:ca:4d:c2:a6:b9:e2:
17:ff:d4:c2:93:f9:c2:8b:ab:95:bb:f5:34:cd:24:72:2b:d2:
2a:09:af:0e:dc:66:9d:46:4e:1b:ef:72:5f:1f:c8:29:6b:da:
2a:44:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org