Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa
File: AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa (raw, json)
Hash identifier: W/eF4B7tsG8W46RQCmzvLWOkJqCXHsNO/4W5yY+urk8=
Subject key identifier: 01:E4:D0:77:B3:6D:E5:DF:E1:11:3B:F4:1F:05:C5:E6:43:D8:10:8E
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 0A1AAC
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa
Signing time: Mon 28 Feb 2022 08:23:52 +0000
ROA not before: Mon 28 Feb 2022 08:23:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8535
IP address blocks: 194.149.228.0/22 maxlen: 22
2a02:bd8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662188 (0xa1aac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Feb 28 08:23:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01e4d077b36de5dfe1113bf41f05c5e643d8108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:47:dd:c8:28:6f:43:b7:44:8e:08:a1:59:
81:28:3c:47:76:a9:4b:89:38:34:85:a3:c9:83:4d:
e5:b5:c7:dd:1f:5e:e1:3c:d5:1d:af:d8:f9:e7:42:
61:02:ef:48:a0:f1:0c:3c:84:97:f3:99:8e:aa:2f:
86:27:55:aa:0c:3e:06:65:f6:27:be:b4:32:37:93:
53:fc:0a:30:0e:8c:aa:3d:84:dc:af:d1:30:79:d6:
e3:82:1d:62:eb:3e:f3:16:64:bb:c7:56:7a:54:5b:
bd:9e:89:01:88:d8:0a:6e:90:a7:7b:4e:79:7a:60:
28:0c:26:f4:be:0f:a3:33:47:e4:6e:64:f8:3f:bb:
24:f1:66:95:02:4d:b7:fb:73:4c:d0:f3:47:4e:7e:
94:a0:f5:38:97:3f:ed:5c:07:f9:1b:21:25:5f:c6:
6b:16:83:7c:98:79:12:51:ee:3b:13:a8:02:6c:4b:
2a:5f:b5:80:fe:37:c0:62:36:90:41:d6:a6:56:0b:
41:01:5c:13:a4:6b:c4:d0:ee:06:eb:62:49:3c:46:
a6:ea:52:70:1d:72:1b:34:32:ca:b7:5c:16:6a:c3:
e9:ca:0f:52:a7:3a:e9:ea:51:f8:2a:b4:4f:b1:22:
52:25:f9:67:7f:40:47:f8:f6:8f:20:81:76:3b:82:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:D0:77:B3:6D:E5:DF:E1:11:3B:F4:1F:05:C5:E6:43:D8:10:8E
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.228.0/22
IPv6:
2a02:bd8::/32
Signature Algorithm: sha256WithRSAEncryption
0f:78:d3:be:73:ce:8e:98:0e:a2:83:8b:28:87:32:27:a2:f6:
7a:f6:f6:8c:4a:f7:81:64:43:b8:18:b6:63:f7:c2:b4:3f:68:
d7:33:77:77:1b:aa:06:c3:39:3a:f5:63:4a:26:93:30:d8:10:
53:fb:74:ec:47:e0:8a:44:98:b6:24:68:88:9b:06:2f:2b:22:
3a:13:cf:0e:e6:de:8e:cb:b6:76:c5:48:d1:29:4b:7c:45:5d:
02:9e:65:2f:bd:9d:75:07:9e:d4:87:22:31:6c:e5:34:5b:7f:
f6:6e:43:67:3f:65:73:b6:a9:81:41:ed:87:84:f3:52:70:e8:
f7:59:da:d5:4d:c2:bc:f8:f7:07:94:69:13:95:03:84:91:5d:
03:68:03:3b:97:c4:6a:6e:f0:ab:e2:0b:86:69:d7:60:f3:c2:
c1:31:49:5b:46:22:ac:d5:f6:c4:74:9c:6d:65:4d:42:e6:80:
82:81:4d:46:c0:a9:c1:ca:e0:e6:6d:0a:5c:9b:c8:33:2c:26:
53:71:2d:3a:b2:27:df:8f:76:14:bb:e6:2f:12:75:5b:68:a4:
3f:bc:16:c2:db:d4:84:44:99:81:1c:ed:54:f9:56:e4:f4:73:
2f:91:e4:2a:86:52:6c:c4:2e:2e:43:ad:c5:41:d6:eb:8a:44:
d0:99:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:54 2024 by rpki-client on console-fra.rpki-client.org