Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/HA2RXxJFBJwgUR_X2MJmSaP0Syg.roa
File: HA2RXxJFBJwgUR_X2MJmSaP0Syg.roa (raw, json)
Hash identifier: ZEIqw9LFdHrRKE5Z0bG187vVu+ZN1Q3s6Ubj5OFmQKE=
Subject key identifier: 1C:0D:91:5F:12:45:04:9C:20:51:1F:D7:D8:C2:66:49:A3:F4:4B:28
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 18A00795
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/HA2RXxJFBJwgUR_X2MJmSaP0Syg.roa
Signing time: Sat 01 Jan 2022 03:52:12 +0000
ROA not before: Sat 01 Jan 2022 03:52:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48613
IP address blocks: 194.126.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413140885 (0x18a00795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Jan 1 03:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c0d915f1245049c20511fd7d8c26649a3f44b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:dd:35:5e:1b:4e:bb:17:d6:81:ee:ef:37:
98:f6:07:40:b3:26:ff:f2:fb:07:4c:79:1d:9c:68:
d8:8e:cf:5a:46:d3:f7:f5:88:6e:26:24:b0:22:96:
05:e7:89:65:31:30:38:a7:3e:d0:66:94:f8:9c:a6:
b1:34:72:65:dd:f4:02:88:a0:54:48:48:bb:1c:f3:
94:a8:6d:c7:0f:a2:3b:ea:e1:06:59:47:7c:ab:f7:
4c:f4:ca:da:97:68:89:d9:2e:87:4b:ae:45:00:f0:
ad:9b:cb:2e:8e:9f:55:bb:20:38:fb:57:72:e9:57:
b1:e5:cb:8c:76:ff:cc:14:e1:72:dd:9c:52:74:74:
29:74:08:30:78:8f:9b:df:75:13:d1:b2:c5:37:d8:
c6:53:5e:b6:7c:ef:a1:67:e6:22:7b:6d:33:66:cf:
92:de:aa:b3:a9:26:42:22:ea:2f:78:ad:6e:4e:fd:
3a:8f:f8:db:b8:2c:99:00:a6:60:c4:8f:97:b8:19:
f3:3a:b0:72:f2:05:43:96:e5:af:c7:6f:e7:c9:40:
7f:90:f7:69:2b:e8:e0:95:94:9d:8c:3a:c8:7d:23:
d9:7b:40:3a:ea:ed:76:df:c9:e5:72:55:fa:12:19:
5d:b5:e6:af:85:8b:f4:21:fd:11:53:34:f1:98:85:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:91:5F:12:45:04:9C:20:51:1F:D7:D8:C2:66:49:A3:F4:4B:28
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/HA2RXxJFBJwgUR_X2MJmSaP0Syg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.128.0/24
Signature Algorithm: sha256WithRSAEncryption
06:71:b4:ea:0c:ee:49:c9:c2:e0:c2:75:d1:e1:84:72:13:28:
02:9b:f3:07:5e:51:10:37:36:1a:d3:d7:37:be:f9:48:6a:12:
9b:c7:e4:10:19:81:17:45:ae:11:20:a3:5e:ef:e1:b4:f8:84:
1c:ea:12:3b:6f:33:00:5a:10:f3:ef:5e:6f:8b:e6:4e:43:44:
c2:8c:8a:4e:1f:32:18:0e:d3:08:4f:ce:ac:6e:dd:ab:68:7e:
13:ce:8f:36:be:90:d8:37:e4:55:37:0b:c9:cf:30:33:96:03:
10:28:72:bd:3f:9b:0d:7f:59:c2:dc:a4:fa:fb:d9:17:84:91:
94:39:53:91:72:66:21:ae:6c:0a:6a:f9:c5:7b:66:8f:44:6b:
0d:92:68:27:47:a8:5b:cd:02:88:04:03:fa:86:29:4c:3b:3a:
64:58:39:1a:dc:05:e5:99:a8:ec:4b:96:1f:d9:7e:da:80:8e:
4c:a0:46:c9:5e:d7:0e:17:f4:fc:2d:c4:c7:72:4b:6a:0d:9f:
b4:db:b4:6b:34:ab:80:b1:4e:21:24:4e:c2:0c:6c:83:f7:d0:
1a:f1:0d:0c:b3:0a:1f:84:19:09:f9:31:13:c7:62:e3:c9:e6:
53:74:66:22:bf:d6:ef:f3:25:f4:d5:3c:ac:b3:83:e6:bf:1f:
fb:4c:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:22 2024 by rpki-client on console-ams.rpki-client.org