Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/I2HDpRky3CATugeLHuFFep99vAY.roa
File: I2HDpRky3CATugeLHuFFep99vAY.roa (raw, json)
Hash identifier: 3QB2zRdQ+XAy6Q6pM1xtrLIBpIsFtWABY40NDOVeleE=
Subject key identifier: 23:61:C3:A5:19:32:DC:20:13:BA:07:8B:1E:E1:45:7A:9F:7D:BC:06
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 3939AFDA
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/I2HDpRky3CATugeLHuFFep99vAY.roa
Signing time: Sat 01 Jan 2022 03:52:55 +0000
ROA not before: Sat 01 Jan 2022 03:52:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6867
IP address blocks: 194.177.197.0/24 maxlen: 24
2001:648:2c00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960081882 (0x3939afda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:52:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2361c3a51932dc2013ba078b1ee1457a9f7dbc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:27:a7:d5:90:fa:1f:4b:d0:ec:88:1c:59:71:
36:88:18:18:74:45:74:a2:31:35:ee:53:1b:c2:5e:
aa:6b:f8:72:d8:d2:f0:8b:4a:1c:c2:cd:ad:46:d1:
fd:e5:4c:b3:e8:93:dc:d9:5c:45:1e:d3:bb:41:d3:
40:f1:ec:a1:c7:89:7c:64:ab:cb:32:d9:ae:02:45:
90:a5:fd:2c:55:77:1e:af:a5:f8:02:e9:19:82:cd:
82:1b:c1:a0:42:04:6d:9e:92:bf:e7:1f:a8:9e:d3:
88:d3:46:a8:7a:0e:df:f1:1a:62:57:e8:cc:ea:ef:
76:80:71:13:97:fb:c0:b7:6a:8b:41:c0:89:fc:da:
59:08:cd:17:2e:19:5e:23:95:a4:3b:21:1d:0d:6b:
bb:01:ab:78:1f:65:c6:4f:a3:4d:b3:34:3c:c5:31:
17:4f:53:08:07:d9:58:1f:69:6c:78:68:15:bf:83:
eb:26:c1:6c:f8:38:73:e3:3d:70:db:7f:42:d3:0b:
8f:90:c0:5c:26:71:6d:06:34:54:92:85:d9:0d:b9:
f1:f4:30:57:61:1f:20:70:85:5a:e0:0e:7e:7c:8e:
2e:e2:c8:69:69:92:e1:f0:95:82:55:34:26:67:34:
79:27:7d:bc:9e:55:de:4c:9e:7e:b4:65:35:53:23:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:61:C3:A5:19:32:DC:20:13:BA:07:8B:1E:E1:45:7A:9F:7D:BC:06
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/I2HDpRky3CATugeLHuFFep99vAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.197.0/24
IPv6:
2001:648:2c00::/48
Signature Algorithm: sha256WithRSAEncryption
1b:2e:b0:79:00:b6:85:c8:8d:49:20:75:f2:86:2a:97:8b:b4:
9a:5e:ad:a8:ba:23:4d:4b:6c:2a:c2:5f:94:5b:df:2a:57:90:
bf:69:d2:1e:8c:81:19:96:b8:3f:42:06:2b:dd:d8:58:f1:44:
26:f3:6c:cd:7a:0f:34:5b:c9:29:54:9a:be:9b:46:1d:a3:e1:
98:ab:e1:f4:cf:bb:a8:b8:20:14:63:6a:da:cb:3c:30:45:c0:
c8:59:e4:1f:b2:09:8a:9e:87:1f:05:c2:2d:a9:72:1d:69:17:
1f:d6:26:bb:5e:a3:ce:60:14:0c:6a:62:c3:da:fa:1e:89:8c:
fb:29:e0:71:da:f7:64:23:2d:0b:c1:96:3e:1e:33:d6:f6:36:
32:07:64:01:2d:77:8d:14:bd:9b:76:e9:8f:f5:94:e8:01:4e:
53:4e:b2:75:7d:8c:71:05:c9:36:78:9d:d5:b5:e4:29:85:17:
83:92:4b:55:95:a4:59:08:7d:8e:14:f5:a6:5e:f4:f0:14:5d:
4b:a1:28:88:8c:73:d7:83:aa:3b:98:37:65:8c:f5:8d:d8:a1:
e1:a9:af:a0:ad:37:3d:7b:1c:cc:1d:d5:33:20:ca:d5:e0:28:
f3:56:01:f4:87:e4:40:41:59:23:fe:1d:fd:e4:37:b6:69:3b:
98:06:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org