Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/Fz4u4Gq2rCRVWOnTblUUc57Cbek.roa
File: Fz4u4Gq2rCRVWOnTblUUc57Cbek.roa (raw, json)
Hash identifier: 3CQUclfmYQXASJn4Bt0eGwEtVS031G0VO+dxmdTO8Fw=
Subject key identifier: 17:3E:2E:E0:6A:B6:AC:24:55:58:E9:D3:6E:55:14:73:9E:C2:6D:E9
Certificate issuer: /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial: 091725B2
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/Fz4u4Gq2rCRVWOnTblUUc57Cbek.roa
Signing time: Sat 01 Jan 2022 11:57:49 +0000
ROA not before: Sat 01 Jan 2022 11:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42708
IP address blocks: 194.50.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152511922 (0x91725b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Validity
Not Before: Jan 1 11:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=173e2ee06ab6ac245558e9d36e5514739ec26de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:0e:6b:e7:21:4b:ae:8c:53:c4:e3:b3:ed:
b6:25:65:63:ea:65:cb:45:3b:f2:5e:f5:47:1f:3b:
12:fe:68:1b:87:17:dd:da:0b:92:0f:76:bb:f0:e9:
9b:3b:f3:7f:1f:10:66:de:26:ee:2a:2f:2a:7a:cc:
f5:22:b2:5c:70:07:6f:c8:de:f4:bc:a8:de:5d:5e:
84:63:ab:25:1e:21:d2:d4:d4:de:ef:7c:ab:85:fc:
0d:2a:7d:94:3b:01:68:70:1d:30:11:8d:5e:13:5d:
ca:eb:6c:14:82:82:b8:32:29:9c:7f:4d:f7:0e:23:
b5:43:8b:ae:bd:63:35:e4:4f:80:d9:b4:c8:68:c8:
4e:91:56:2a:44:9d:48:c7:a2:77:be:b5:6d:7e:f1:
f6:64:5d:f3:9b:5c:3f:02:2b:01:73:0a:9e:71:06:
4b:9f:7f:47:03:a6:2b:f7:b6:c0:90:12:0d:d7:eb:
d1:f5:47:6b:95:07:78:f4:38:14:95:2d:12:2b:0d:
7f:ff:52:c0:e8:6f:49:b6:46:97:80:94:1d:9d:f3:
3d:70:3c:37:97:1a:b6:3d:97:62:35:15:0b:6c:9d:
5c:70:b9:ff:90:a7:20:8e:df:b4:a6:b2:68:23:f0:
8b:e7:54:f2:cf:1f:f5:42:a5:8a:bc:b7:6b:57:90:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:2E:E0:6A:B6:AC:24:55:58:E9:D3:6E:55:14:73:9E:C2:6D:E9
X509v3 Authority Key Identifier:
keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/Fz4u4Gq2rCRVWOnTblUUc57Cbek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.181.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5e:00:2a:30:e9:af:16:b7:ef:7a:90:e9:16:b1:bd:cb:fd:
09:72:ab:26:8d:14:de:49:98:69:59:85:d3:a7:61:ee:47:3d:
ea:07:b7:84:42:41:5c:ec:59:6d:35:ed:42:6e:42:b0:29:3a:
a2:29:63:0f:eb:dd:5d:8b:6e:06:2e:27:f0:4a:a5:05:52:4e:
f1:b6:ad:6a:09:69:db:ae:0c:df:b5:28:b0:75:6e:9d:02:ec:
9e:2d:8b:6b:17:c5:6e:42:a6:6e:01:c7:37:cb:7f:d2:ed:74:
13:d6:31:1b:d9:14:36:f0:75:b1:57:2b:d4:c6:bc:82:dd:a2:
3f:eb:e8:bf:55:80:eb:fb:5c:3a:d7:5d:90:1f:fb:35:1b:7b:
54:d8:c1:52:fa:2d:51:46:c7:8b:7e:d7:6f:6f:51:a4:38:9b:
74:b0:d0:10:85:e3:97:5e:1d:e3:6f:3e:d9:f2:9c:8d:08:bd:
59:c7:37:5b:ed:ae:c9:d2:55:13:50:4e:32:3e:a9:42:58:69:
19:ba:2b:69:4f:4d:f6:5b:54:89:38:75:d3:e0:19:e6:db:fe:
1e:25:ec:c7:af:a0:ef:3a:41:00:84:10:67:99:da:3e:de:72:
3e:b4:9c:54:54:55:ee:15:2c:ce:b8:95:a1:48:8c:5a:5a:7b:
ce:4b:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:33 2024 by rpki-client on console-fra.rpki-client.org