Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gKvWn9NfBODX5gkEwIvH-oTHfsY.roa
File: gKvWn9NfBODX5gkEwIvH-oTHfsY.roa (raw, json)
Hash identifier: W9FRpZ4fNAgU6NamAQwIZgPGnuHMXuZ6HGGB19Txwjo=
Subject key identifier: 80:AB:D6:9F:D3:5F:04:E0:D7:E6:09:04:C0:8B:C7:FA:84:C7:7E:C6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0348660B
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gKvWn9NfBODX5gkEwIvH-oTHfsY.roa
Signing time: Sat 01 Jan 2022 16:04:40 +0000
ROA not before: Sat 01 Jan 2022 16:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210071
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55076363 (0x348660b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80abd69fd35f04e0d7e60904c08bc7fa84c77ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:84:6f:c0:4b:fe:0c:a5:9a:ef:df:cd:79:04:
a4:1e:25:39:28:4e:d8:37:f9:12:bf:2e:d3:7e:59:
99:66:f4:2f:f4:64:44:09:08:51:fa:87:1e:91:2e:
82:d6:b2:33:aa:51:44:71:59:9a:fa:e1:40:38:da:
76:d7:df:94:85:2d:11:59:bf:e9:7b:b9:44:e2:f6:
3b:30:64:33:ae:5c:da:a4:ec:a5:c0:fd:57:66:00:
ef:bc:e2:d9:bd:46:3e:17:09:77:4b:b7:6a:9e:37:
83:da:be:1b:ff:3c:ff:d4:17:b6:b9:a4:b3:b5:97:
c4:e6:9e:c3:1d:69:34:09:9c:df:7f:44:de:b1:f7:
b4:eb:11:2e:21:03:72:a6:40:e9:88:52:41:df:99:
82:c7:67:87:c7:59:1e:e7:c5:2d:58:3b:51:98:b0:
76:0c:b1:40:3b:b2:ff:aa:b3:9b:0c:7f:2b:d5:9e:
44:d3:89:92:5b:8a:ce:d0:b2:c0:1e:b7:84:c4:23:
78:81:d3:c7:c3:74:36:da:18:6b:df:2e:ef:5d:a4:
8f:13:5c:aa:35:fa:39:50:e1:ba:72:af:21:41:c8:
88:07:00:fe:61:3a:36:29:30:19:13:fb:5b:83:d1:
f4:65:da:52:9e:52:e7:c5:d0:3e:b3:67:11:a2:3a:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AB:D6:9F:D3:5F:04:E0:D7:E6:09:04:C0:8B:C7:FA:84:C7:7E:C6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gKvWn9NfBODX5gkEwIvH-oTHfsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8e:1e:76:46:65:f3:09:f2:7d:0d:74:c1:08:7b:29:78:11:
04:6e:a7:a1:fb:c5:1d:7b:15:14:7b:d9:d8:39:37:ed:9c:d1:
5b:78:71:0b:4c:68:d2:ba:3a:2e:a4:1d:4f:70:37:e6:2c:a9:
e1:55:55:83:a7:d4:fd:78:dc:f6:49:6a:55:35:56:0d:9f:aa:
11:74:2a:c7:a2:4b:ec:06:ab:d6:7e:b1:7f:cd:4c:ea:3f:2d:
7e:79:85:d8:16:7d:b1:d9:67:df:1b:f6:90:0d:53:54:d3:0b:
f2:d4:59:0b:7f:51:c1:9a:4a:66:e7:67:a8:89:2c:f9:f9:c6:
f6:8c:bd:88:24:83:8f:22:d0:ae:a2:b0:f0:0c:46:93:bc:2d:
f8:14:04:fa:d5:bf:f1:34:69:ca:29:b7:01:14:9c:7f:02:f6:
0c:37:83:0f:68:d4:8c:86:ef:0b:5d:32:6e:cd:c4:cb:e7:6f:
b6:ad:ee:d7:b6:2b:c3:63:c8:1c:d5:2a:ce:1f:08:6a:9e:d4:
01:03:e7:3d:61:29:a0:91:d0:2a:a9:4d:ac:83:26:5b:86:af:
2b:58:fc:90:b7:c9:18:18:e3:0f:f8:16:dc:af:9b:8f:6b:a3:
d9:f1:93:87:c6:0b:5d:bd:3c:68:78:22:dc:ad:16:c9:79:34:
5a:93:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org