Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DdK8RquEZdUXkNdqiMsm5C5_-7s.roa
File: DdK8RquEZdUXkNdqiMsm5C5_-7s.roa (raw, json)
Hash identifier: TrafsOk1V28la1PzlAb/3hNuNlJxmTadehZqqgkSHko=
Subject key identifier: 0D:D2:BC:46:AB:84:65:D5:17:90:D7:6A:88:CB:26:E4:2E:7F:FB:BB
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D5626E79A64B79E372503679C22DDD2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DdK8RquEZdUXkNdqiMsm5C5_-7s.roa
Signing time: Mon 31 Oct 2022 09:18:51 +0000
ROA not before: Mon 31 Oct 2022 09:18:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35000
IP address blocks: 195.144.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:56:26:e7:9a:64:b7:9e:37:25:03:67:9c:22:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:18:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dd2bc46ab8465d51790d76a88cb26e42e7ffbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:5e:38:de:ed:5f:d6:01:2b:45:44:52:88:
8c:d6:1f:12:6b:6f:e6:9f:c6:58:e0:55:42:c7:f4:
51:f9:0a:b3:f1:7f:2c:85:d8:89:f1:63:b3:c6:c5:
76:8b:3e:e4:8a:1c:af:94:17:1c:84:ef:ea:38:00:
c4:32:cc:ee:7f:e5:9e:dd:c5:fd:08:a2:1d:00:21:
9c:38:03:3b:44:47:d3:bd:76:7d:11:8a:ef:9f:18:
31:87:b2:df:c8:2d:80:86:eb:37:ea:27:3b:53:64:
8a:6d:ea:10:33:35:3a:87:36:47:56:8f:e9:f7:9f:
4b:d7:c7:10:b2:2e:f1:f2:88:42:95:03:74:15:60:
d6:c4:d5:6f:50:64:84:3f:df:c5:27:dd:be:90:6a:
d3:63:45:9b:4e:37:97:9c:7a:36:20:fa:3f:60:ae:
8b:d8:be:16:d2:66:88:cd:32:d1:47:e0:e1:d2:07:
9b:0e:08:ed:6f:92:0d:95:6e:ba:de:4b:cd:24:8e:
54:94:7a:61:ac:9b:f6:3b:1c:3f:9b:92:3f:0c:b6:
77:e5:e3:cb:a0:42:0f:b3:10:3b:64:de:b2:ce:7f:
21:e4:1b:d5:3c:4a:27:85:e1:a4:ab:00:61:40:4a:
94:96:e3:5c:71:f2:1b:74:42:12:ed:d6:e3:7d:7c:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D2:BC:46:AB:84:65:D5:17:90:D7:6A:88:CB:26:E4:2E:7F:FB:BB
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DdK8RquEZdUXkNdqiMsm5C5_-7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:df:19:00:6b:ed:0d:25:d3:1d:8c:cc:fa:6b:ed:9a:25:0f:
b1:2c:01:34:83:0a:85:1f:84:3e:dd:cd:7f:4b:01:bc:d9:9e:
59:b5:1c:1e:f3:68:b6:6f:54:f2:5d:f6:a8:b9:c3:c3:cd:41:
76:b0:eb:04:06:73:d6:e9:2e:fb:d5:ee:4b:82:67:53:65:5b:
27:88:a8:d6:bd:4f:ed:71:f8:ae:b8:b2:ec:ed:06:ce:56:2b:
5c:2d:1c:f1:dc:d0:79:b3:e6:8a:76:06:60:39:b8:f7:3a:c0:
03:4f:62:48:e9:4e:10:af:36:c0:76:77:86:6f:35:90:3a:75:
c2:d4:9c:53:0c:46:d4:85:6b:4b:46:1d:85:aa:29:f6:39:a6:
65:b8:c1:17:fa:bf:8c:a4:b2:04:ad:2e:70:86:e3:c1:9d:ae:
6a:c5:60:5c:63:04:5d:0c:07:c6:61:0c:1e:e0:80:6c:b2:3f:
1c:4b:0e:a3:9e:e5:63:77:82:18:8e:89:71:05:fd:f8:aa:71:
c7:21:0c:69:02:6b:0f:dc:fc:80:91:63:4b:85:5b:18:d7:5f:
60:17:52:16:bc:51:ca:52:71:f4:b9:e4:32:b3:26:4d:2e:b9:
58:cb:92:a6:31:b3:8f:da:82:aa:d8:08:1b:4d:3e:57:13:e4:
a7:fb:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org