Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/H8V4UiGkp0Cqmu_elZsVAxMxk3c.roa
File: H8V4UiGkp0Cqmu_elZsVAxMxk3c.roa (raw, json)
Hash identifier: jNZGFZyopNbzHf7XWr5Na29OlGoA+dhvInO2KAL+4M4=
Subject key identifier: 1F:C5:78:52:21:A4:A7:40:AA:9A:EF:DE:95:9B:15:03:13:31:93:77
Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial: 09470E86
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/H8V4UiGkp0Cqmu_elZsVAxMxk3c.roa
Signing time: Sat 01 Jan 2022 09:59:38 +0000
ROA not before: Sat 01 Jan 2022 09:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15814
IP address blocks: 194.36.224.0/20 maxlen: 24
2a03:98c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155651718 (0x9470e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
Validity
Not Before: Jan 1 09:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc5785221a4a740aa9aefde959b150313319377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:2e:24:4e:a8:c9:aa:36:79:d3:09:ef:f0:
5e:8e:b3:5b:f5:c0:03:99:ef:3d:56:e0:62:ec:ae:
a1:51:65:a5:db:ef:78:70:0c:db:70:85:49:93:7f:
83:b6:a5:b5:c3:c4:d8:cd:4d:fe:ee:33:e9:3e:e9:
62:d4:da:d0:eb:3a:72:69:50:0d:a8:16:ab:d9:03:
58:55:98:01:e3:8f:fd:0f:e5:9c:6b:bf:4b:69:6e:
5b:e6:1b:b2:5b:bf:9b:e1:c4:77:6b:39:b4:f6:aa:
05:c7:15:f6:12:9f:e1:34:8b:d2:96:86:ad:77:14:
72:eb:8a:c4:8d:80:33:7d:1d:6d:2d:80:7f:1f:f5:
73:8c:a3:80:b7:4e:d7:a1:8b:de:51:24:76:6f:f2:
13:48:2d:d0:75:4d:2c:5b:47:98:e5:37:64:b1:b2:
61:1d:91:0f:87:03:1e:33:f8:44:dd:de:f3:7a:4f:
3c:ed:df:41:94:31:d4:83:f7:4e:10:ca:da:bd:f6:
cd:b9:ce:2c:c1:be:7e:60:d5:26:21:a3:1e:c9:a6:
d9:9d:e4:b8:bb:fb:5e:83:67:dc:5c:cb:21:1b:22:
89:c5:e0:04:fd:4f:a0:c6:ee:b8:46:6a:a2:35:60:
c5:a8:b1:69:92:9f:5d:db:95:5a:9a:26:f0:78:63:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:78:52:21:A4:A7:40:AA:9A:EF:DE:95:9B:15:03:13:31:93:77
X509v3 Authority Key Identifier:
keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/H8V4UiGkp0Cqmu_elZsVAxMxk3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.224.0/20
IPv6:
2a03:98c0::/32
Signature Algorithm: sha256WithRSAEncryption
60:4f:ae:fa:e0:4d:e0:55:05:13:f7:29:cc:f0:1d:68:7b:79:
2e:3b:cc:f8:c5:c9:46:59:e2:42:c2:de:51:25:bf:a0:bd:e9:
8a:65:b8:ca:9c:13:75:52:ba:ba:75:d0:46:47:94:02:d7:ab:
92:35:36:d5:e8:09:e7:82:69:57:7c:ad:a0:0e:e8:ec:6b:a0:
4c:ae:3b:24:e4:be:65:46:81:8a:97:db:60:03:7e:47:d7:58:
f0:c4:97:cc:35:3d:28:dc:70:c3:18:2c:c6:01:e4:ec:a2:58:
37:77:4d:69:43:74:d4:4b:26:52:61:88:a0:b3:b0:bf:24:68:
4d:fa:2f:3d:c7:72:e1:f9:84:ce:4d:2e:60:41:c7:a7:15:b7:
c1:aa:05:f7:9a:80:47:3b:23:8a:8a:46:a9:80:77:19:c0:0d:
48:d8:fc:80:0c:2c:c1:ed:6c:44:60:13:30:5e:cf:cf:ff:c0:
48:e9:b3:bb:97:91:42:63:46:8f:10:5e:06:fb:6e:74:66:d8:
b3:6b:86:d5:af:03:d4:2e:2a:e5:72:90:59:2b:0b:bb:98:88:
54:af:d6:b0:96:9c:53:b2:24:f7:65:0d:cc:a8:07:80:22:3c:
fc:95:97:11:d0:92:03:d8:6d:71:e0:e7:6f:d3:2c:f4:6e:6e:
52:1b:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:18 2024 by rpki-client on console-fra.rpki-client.org