Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kkAHbGBNPVJ0BApTa_le1Z-SZLg.roa
File: kkAHbGBNPVJ0BApTa_le1Z-SZLg.roa (raw, json)
Hash identifier: 2QH1fXSxwOraJ+HdVYuTM7gIluEW+nrcaXbGhC8YD6A=
Subject key identifier: 92:40:07:6C:60:4D:3D:52:74:04:0A:53:6B:F9:5E:D5:9F:92:64:B8
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 39F65491
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kkAHbGBNPVJ0BApTa_le1Z-SZLg.roa
Signing time: Sat 01 Jan 2022 14:00:32 +0000
ROA not before: Sat 01 Jan 2022 14:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42402
IP address blocks: 195.94.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972444817 (0x39f65491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9240076c604d3d5274040a536bf95ed59f9264b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:fc:8d:74:5a:f4:34:c1:b4:9d:50:7d:c9:
95:f4:90:2f:c7:b8:1f:6f:7f:4e:02:97:5f:c9:c9:
4d:a9:30:18:da:12:d0:f5:07:32:e3:a5:1b:0f:1e:
00:8f:fd:6d:7a:7a:d8:56:f0:d9:0f:1b:cb:01:26:
d8:63:60:49:70:e8:e0:5d:3e:75:05:27:b6:d8:1c:
ed:81:df:c4:76:a5:04:80:20:75:bd:47:8c:9b:53:
4c:c0:7c:40:50:b9:39:5f:cf:75:0c:0b:9a:ef:05:
e1:8a:eb:c6:c8:eb:5a:27:dc:56:bb:9a:f1:04:be:
73:3c:67:c1:30:61:98:48:1e:02:b7:fc:32:95:a0:
3f:9e:60:a7:de:e6:3b:c4:18:37:9d:5a:39:7d:2a:
e1:66:ef:f0:c7:7e:79:4f:27:48:fe:71:63:b0:42:
5c:43:71:4c:f4:18:7c:77:1f:72:bd:a1:7d:9d:9b:
bf:0f:9e:8d:24:18:f8:4e:2f:57:d9:f2:0a:52:48:
52:35:04:b5:e0:8a:ab:b5:40:ea:3e:0e:f3:dc:a3:
b4:75:17:e9:c9:d5:b2:d7:6f:4f:a2:bb:44:de:e4:
1a:8f:04:34:0f:a9:cc:06:a4:bb:65:86:da:57:6a:
6e:67:4d:25:a7:14:f6:75:48:73:e5:90:69:34:cf:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:07:6C:60:4D:3D:52:74:04:0A:53:6B:F9:5E:D5:9F:92:64:B8
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kkAHbGBNPVJ0BApTa_le1Z-SZLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.202.0/24
Signature Algorithm: sha256WithRSAEncryption
79:14:fa:53:8c:56:1d:0c:e9:c3:fe:4f:15:ae:50:13:81:64:
69:17:62:4d:6e:6b:1d:f7:b3:d4:b8:1a:4b:94:7e:05:c8:2c:
f3:07:be:4f:99:a2:9d:b6:2c:40:09:32:ec:a2:07:ea:24:7c:
c0:82:c2:ea:83:0d:49:97:b4:68:6e:5b:f3:08:b1:2e:e5:f3:
c6:84:a8:1c:4d:32:ba:00:91:20:07:16:a8:ab:a0:cd:76:32:
08:3a:36:97:b6:30:23:10:6b:15:20:07:eb:9a:3f:b4:b1:a7:
d2:88:00:3e:71:3b:ba:41:06:07:70:62:2c:ff:2e:84:30:e2:
c7:54:4d:11:bd:e2:02:dd:b4:e2:de:97:fb:09:d0:59:20:de:
a8:b0:a8:d4:3a:a4:45:7b:17:10:54:18:bd:d6:10:6f:1b:e9:
93:51:0d:fb:2b:24:8a:ab:61:3e:ce:bb:29:30:df:f5:33:18:
00:e6:4b:2d:a8:da:e7:ba:1b:33:b1:28:64:1f:32:a7:52:b0:
51:9e:c5:12:cb:33:2d:7e:a9:38:37:f2:09:6c:53:85:4d:48:
68:32:c2:12:b5:11:f4:32:53:c3:ef:13:69:85:3c:04:c7:a1:
60:da:7b:c5:ff:90:60:89:1b:92:f4:8c:b4:cf:e3:1b:95:e3:
c7:b3:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-fra.rpki-client.org