Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/M0Ejzju8tFh8vMc92r_F_wP4nUI.roa
File: M0Ejzju8tFh8vMc92r_F_wP4nUI.roa (raw, json)
Hash identifier: pip2QAt6xfTk/bu2cV34Mzbb+sZvN2P8mgEj0+5esYU=
Subject key identifier: 33:41:23:CE:3B:BC:B4:58:7C:BC:C7:3D:DA:BF:C5:FF:03:F8:9D:42
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 0363D93B
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/M0Ejzju8tFh8vMc92r_F_wP4nUI.roa
Signing time: Sat 01 Jan 2022 07:03:25 +0000
ROA not before: Sat 01 Jan 2022 07:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.39.0.0/20 maxlen: 20
194.39.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56875323 (0x363d93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Jan 1 07:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=334123ce3bbcb4587cbcc73ddabfc5ff03f89d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:ac:f6:92:b8:23:14:23:f8:d0:ed:4d:81:
fc:5c:53:ba:9e:23:73:69:11:40:41:f8:d3:94:71:
c0:2d:ce:14:1c:e1:e9:83:e7:d9:7f:fe:c3:d2:b2:
18:7c:7c:d4:cd:71:36:82:95:79:a0:4e:dc:00:ac:
89:b7:2c:fd:fd:44:d5:ce:81:61:67:37:9b:a3:ab:
5a:da:d3:86:e0:7f:1d:0b:20:ff:c7:10:bf:65:c4:
93:39:19:1c:a8:bc:73:7e:b3:e4:b1:b2:cb:e7:19:
9e:60:22:4b:54:12:56:23:1d:f3:d8:7b:67:02:c9:
1b:98:7a:f8:0d:50:83:5c:9a:02:3b:d0:eb:a3:67:
f2:1a:2b:c8:78:a0:e0:96:9b:71:b0:6c:49:fe:f3:
d6:61:92:ad:55:dd:d2:e0:0b:e4:ac:2d:2f:88:6a:
8d:44:c8:db:78:af:bc:78:aa:01:04:5d:b0:f9:21:
37:dc:91:1b:e4:a4:32:44:65:a0:5a:83:23:2d:99:
ae:ee:59:83:24:f3:ac:1e:c5:43:c3:ff:cd:ed:ef:
fd:9c:c8:64:58:8a:44:c5:9d:51:19:8a:2b:a7:bf:
f5:48:3d:b1:b8:df:06:80:a8:f3:47:f3:3d:44:53:
47:21:8f:3d:96:6c:98:08:04:f8:a5:3d:ce:d8:4d:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:23:CE:3B:BC:B4:58:7C:BC:C7:3D:DA:BF:C5:FF:03:F8:9D:42
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/M0Ejzju8tFh8vMc92r_F_wP4nUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.0.0-194.39.23.255
Signature Algorithm: sha256WithRSAEncryption
12:52:6e:48:84:54:10:6b:70:60:d8:cf:3d:4d:d4:c3:a7:0e:
ff:08:ca:0b:e4:de:d2:af:a9:f9:7c:9b:e0:50:65:b0:3e:ea:
d0:0a:44:a5:6c:bf:a3:47:d4:17:b9:c6:2b:9b:38:f1:84:e3:
d3:d0:34:92:60:88:2b:ba:ac:58:06:80:dd:a4:63:5e:0a:4e:
13:f0:02:61:3d:5d:7c:72:76:49:e7:67:aa:62:65:7a:bd:8f:
c3:99:a3:99:94:4f:5e:3b:fe:5b:a8:c0:56:cf:81:dd:fb:f8:
39:02:0a:7f:85:d3:7c:33:a4:47:80:a8:07:ba:c7:bb:de:31:
80:77:a6:df:fa:5b:94:d9:ad:2f:ad:a2:90:fb:f5:64:c7:9b:
46:aa:cf:3a:c1:67:9a:ce:60:d0:1f:b3:bb:f4:72:a1:c4:34:
ad:3d:98:30:15:d4:88:5b:3b:f1:01:7a:50:3b:72:61:ee:27:
e8:95:11:9e:c1:33:d4:2c:21:c4:58:e5:ee:4e:15:36:f3:a0:
9f:f8:2f:48:8c:b5:28:e2:c2:99:ea:37:27:f3:19:07:22:c8:
1d:52:66:7f:1d:8c:57:28:fc:86:29:f7:81:6c:87:e3:e7:0c:
76:76:0a:cd:a7:ed:dc:c6:dd:64:4f:ce:05:a0:25:7d:fc:34:
05:3f:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:20 2024 by rpki-client on console-fra.rpki-client.org