Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/xd7eSQRFJEw4KIPOI02G5fqdXWs.roa
File: xd7eSQRFJEw4KIPOI02G5fqdXWs.roa (raw, json)
Hash identifier: 3QgJRgpXpCC7EkCdAW9WKZXGveDTZjUJbmtr8e6zldA=
Subject key identifier: C5:DE:DE:49:04:45:24:4C:38:28:83:CE:23:4D:86:E5:FA:9D:5D:6B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 056271EE
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/xd7eSQRFJEw4KIPOI02G5fqdXWs.roa
Signing time: Sat 01 Jan 2022 13:04:52 +0000
ROA not before: Sat 01 Jan 2022 13:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 194.153.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90337774 (0x56271ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Jan 1 13:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5dede490445244c382883ce234d86e5fa9d5d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:c7:9a:b2:84:80:5e:f6:21:89:31:11:28:
fb:58:01:01:17:87:26:4e:3b:7d:0d:2f:3a:25:83:
ac:ef:df:d4:3b:62:1e:24:48:af:ad:5d:52:98:13:
1b:8b:6a:80:c8:77:d1:e6:1e:e1:26:da:11:22:42:
fe:1d:cf:1e:26:15:ea:a6:71:ee:4f:69:11:7e:72:
7e:40:89:17:e4:51:25:73:b1:46:8d:d5:48:41:b6:
b6:3b:32:83:a2:ff:6e:aa:90:36:27:85:04:24:20:
6d:d6:4a:de:b0:df:61:68:bc:f7:8d:28:ee:50:f6:
82:06:56:9e:f9:bd:52:91:bb:6d:eb:1d:07:ab:dc:
f3:a6:ee:96:c6:1f:ad:f1:45:67:fc:fc:33:fc:48:
e3:a8:2b:f5:2d:fb:31:c8:0e:8c:54:0e:bb:ba:12:
fa:74:ba:a7:cb:1c:5b:d6:90:f6:55:a9:a9:04:26:
b1:c3:b2:76:4b:a7:02:6b:22:53:71:73:36:6c:da:
3f:94:e0:7e:7a:eb:23:fc:20:8b:12:17:56:2c:0f:
d4:4c:c5:c8:cc:6a:9e:62:98:b3:14:34:96:7e:5b:
eb:e0:c1:9f:dc:90:95:8a:67:1d:ec:06:e9:ca:66:
89:e1:b2:db:96:5d:41:b7:1c:fd:ae:6f:7d:33:bc:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:DE:49:04:45:24:4C:38:28:83:CE:23:4D:86:E5:FA:9D:5D:6B
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/xd7eSQRFJEw4KIPOI02G5fqdXWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.94.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d2:7f:7d:5e:ed:b0:54:a1:fa:aa:ac:b1:36:79:db:96:32:
cd:68:b1:12:5a:82:45:89:4f:47:02:3f:e5:87:b6:23:72:5e:
a0:bd:49:81:9f:ca:14:09:6a:09:93:89:ba:fb:49:2d:dd:ac:
2d:0c:59:1f:0d:c5:05:1b:9b:75:9c:35:f9:10:fb:c8:73:77:
1d:bf:94:b5:6d:38:3a:31:67:27:be:95:89:59:8c:e1:09:41:
79:d4:bd:1d:7c:a0:27:b8:77:9a:86:5d:b8:f3:72:a9:8f:c0:
91:6d:a6:16:09:7e:ca:e1:1f:da:e5:6d:2a:ee:a0:d8:3a:ff:
c7:db:9c:ea:b2:4b:ed:1b:97:6a:44:07:b0:52:e3:08:b1:c2:
44:e6:e1:99:aa:00:6f:7f:36:a8:23:b5:53:5e:86:5b:bf:7b:
b6:0d:10:f1:08:18:92:19:51:06:a0:65:35:e9:5d:1b:27:bd:
12:e2:4f:f4:cf:6a:c4:ff:92:f8:c5:e3:cc:99:c9:79:c7:26:
a2:ba:92:66:4e:95:80:4f:f1:d0:b0:e1:30:7e:fb:fc:4d:4f:
86:41:07:88:f5:69:ee:6e:f7:1b:84:4b:35:f5:34:83:eb:fb:
9d:2b:19:f1:7d:2c:b1:dd:fc:83:a2:6b:77:2c:5f:03:67:10:
0b:3e:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:46 2024 by rpki-client on console-fra.rpki-client.org