Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/nle2tfrRKqUj0wWJgllUebGndA8.roa
File: nle2tfrRKqUj0wWJgllUebGndA8.roa (raw, json)
Hash identifier: 2hIfc82mjad5GxLHvdPKQfzhLQFUpIOOfA9oGFnIJ1Y=
Subject key identifier: 9E:57:B6:B5:FA:D1:2A:A5:23:D3:05:89:82:59:54:79:B1:A7:74:0F
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 014D3054
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/nle2tfrRKqUj0wWJgllUebGndA8.roa
Signing time: Sat 01 Jan 2022 05:57:20 +0000
ROA not before: Sat 01 Jan 2022 05:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49754
IP address blocks: 195.130.194.0/24 maxlen: 24
2001:67c:247c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21835860 (0x14d3054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Jan 1 05:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e57b6b5fad12aa523d3058982595479b1a7740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:b9:e6:e1:13:6e:0a:3b:04:3c:46:12:b4:
31:ae:39:70:ea:c9:f0:78:a7:8a:c0:ef:f5:a0:3c:
f6:41:57:9b:6b:6c:14:99:2b:7d:bb:ae:a6:f8:46:
db:fb:c1:d1:64:09:25:e8:93:9d:2e:bc:df:04:1f:
8b:5b:de:cb:2b:da:df:de:54:8d:eb:cf:e3:7d:00:
fd:c5:0d:0a:49:8a:d7:94:72:d0:13:89:78:ca:ef:
6d:df:27:0e:78:86:80:17:81:60:f7:e0:2a:ed:61:
85:b9:5e:d3:02:8e:5f:fd:7e:b5:a7:71:65:f2:8a:
b2:87:21:77:e5:05:5e:15:52:41:03:2d:69:d4:e4:
c1:fc:cf:c9:30:ae:96:71:0d:87:bb:84:f3:6d:43:
61:e4:0f:cc:93:a9:81:4f:24:f1:61:9b:28:a1:8d:
5a:1b:3f:7c:1c:08:23:79:ca:2c:dd:06:a0:8c:ab:
de:7d:73:8d:6d:a6:01:13:a6:9b:f9:53:df:24:de:
7f:e4:bc:d0:14:bd:95:43:73:3c:8c:b6:20:70:af:
fd:c7:4d:cb:93:6b:4f:9c:39:23:f2:71:3d:6b:80:
21:08:05:b4:5a:92:5c:9e:11:90:6d:1b:2c:5f:fe:
62:e6:b7:33:77:77:a6:8c:13:54:f0:3d:ba:92:b9:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:B6:B5:FA:D1:2A:A5:23:D3:05:89:82:59:54:79:B1:A7:74:0F
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/nle2tfrRKqUj0wWJgllUebGndA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.194.0/24
IPv6:
2001:67c:247c::/48
Signature Algorithm: sha256WithRSAEncryption
1f:74:74:45:8c:c6:0c:b1:8b:68:f5:5d:ba:63:91:7f:e7:b2:
1f:0b:10:51:51:26:0d:83:52:41:fc:7b:99:78:33:10:b1:cf:
fb:9e:34:42:46:20:9c:05:84:9a:ea:01:6e:43:8a:91:51:0f:
a3:46:83:1d:53:fc:7e:7b:c0:a7:3c:60:1c:cd:1e:83:ee:77:
3e:ff:0d:f6:fe:be:30:43:fa:13:a3:ec:ba:51:d9:11:99:b8:
4a:f1:36:92:2f:60:85:eb:43:42:41:92:64:33:f9:7e:6b:ac:
f4:38:0a:55:a6:38:e1:4f:83:22:0b:82:16:05:dd:b1:35:eb:
ef:4a:fe:b3:7b:0b:24:32:e3:21:25:0c:ab:9c:d3:d0:ac:04:
13:13:c6:67:89:dc:f1:b2:87:f4:3f:ba:57:0f:22:21:64:67:
59:1b:c6:bc:2b:d3:5e:07:56:67:46:63:98:55:43:92:9d:cf:
d0:e8:04:94:74:c7:a0:b4:5d:66:29:77:f9:59:42:59:d0:39:
fd:9d:72:4e:4a:7d:c8:6b:ee:bc:42:34:f6:2c:60:03:bb:b1:
bf:b2:d9:07:9e:dc:cf:76:75:06:f2:b0:22:02:54:b7:be:85:
d8:3d:2e:56:a6:70:5f:b6:5e:e9:eb:69:b7:c2:3a:4d:cd:f4:
28:d6:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:57 2024 by rpki-client on console-fra.rpki-client.org