Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/dqK3RZOU0kIJd8Jsk7DK3cGjBrw.roa
File: dqK3RZOU0kIJd8Jsk7DK3cGjBrw.roa (raw, json)
Hash identifier: CJnzCu6fAymrnWOilcSBDEzJKUmpM44e1mgJywjeI5g=
Subject key identifier: 76:A2:B7:45:93:94:D2:42:09:77:C2:6C:93:B0:CA:DD:C1:A3:06:BC
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 3939ACE9
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/dqK3RZOU0kIJd8Jsk7DK3cGjBrw.roa
Signing time: Sat 01 Jan 2022 03:52:54 +0000
ROA not before: Sat 01 Jan 2022 03:52:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5489
IP address blocks: 195.251.120.0/22 maxlen: 22
195.251.240.0/22 maxlen: 22
195.251.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960081129 (0x3939ace9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76a2b7459394d2420977c26c93b0caddc1a306bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:10:8b:f0:d2:37:d2:87:1e:a0:4c:58:90:
82:60:d6:13:a0:d8:bc:0f:16:69:df:25:09:e2:82:
1b:2a:c0:e7:fb:88:8f:3a:85:46:79:84:9b:4b:df:
17:d1:7c:73:8d:11:c2:c5:8b:00:c7:17:56:46:03:
b9:88:3c:bf:ba:83:ce:ac:cb:07:89:ca:9c:af:c8:
d3:c9:ce:89:57:c9:63:3b:81:52:bb:cd:ce:80:a4:
e9:55:9a:c7:53:4a:c0:6a:59:fd:85:c8:93:49:f4:
9d:da:e1:ea:62:76:72:c7:3d:9f:3f:61:a4:c7:8f:
ab:43:fc:4f:d4:6e:9f:36:de:0a:f5:45:3c:73:a2:
01:d8:63:e1:d7:a3:aa:aa:c6:aa:41:48:db:5a:09:
8f:dc:33:4e:b5:f7:f3:1a:cf:e3:e9:7f:be:df:fb:
d0:ea:f3:c1:af:ec:ba:1f:7a:d1:aa:aa:a0:55:ae:
04:ce:85:db:85:99:7d:57:a3:65:1e:14:c9:9b:d2:
a6:30:64:15:d7:b6:8e:ad:6b:b3:bb:0f:0c:ff:c4:
0a:ef:95:f1:a7:9b:bc:e4:da:67:cb:a8:b2:16:b9:
24:61:1c:dc:67:9f:3e:de:1c:4b:43:0e:26:82:b2:
3d:39:30:12:14:14:6a:48:e7:42:18:66:a1:29:d6:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:B7:45:93:94:D2:42:09:77:C2:6C:93:B0:CA:DD:C1:A3:06:BC
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/dqK3RZOU0kIJd8Jsk7DK3cGjBrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.120.0/22
195.251.238.0-195.251.243.255
Signature Algorithm: sha256WithRSAEncryption
6c:8d:53:1a:bc:31:47:0a:9a:71:32:b5:3c:ff:b3:84:87:5d:
85:21:7e:a0:e0:c4:2b:2e:52:aa:a0:ba:83:a8:aa:a2:44:13:
d4:95:f5:00:5a:b9:08:68:86:19:d0:6e:c8:29:69:89:0d:54:
83:3a:52:31:e1:74:19:6c:e5:df:5e:64:f0:7a:41:76:b1:02:
f1:e6:f7:58:74:ab:a8:eb:af:a6:85:9d:47:c4:42:e1:fe:61:
02:dd:e9:37:51:26:fd:42:b6:5b:7b:29:e0:9d:c9:b9:4b:f0:
18:c3:7e:19:8a:53:bb:3a:dd:95:cd:19:a6:28:47:d8:8e:98:
f6:61:b4:86:24:ad:83:03:fa:5f:44:a6:82:00:50:38:c2:c3:
31:06:fd:20:80:2d:e8:2b:ef:b7:73:02:1c:3f:e6:c7:0a:47:
fe:af:d3:bd:7f:e6:32:f0:78:d0:ac:5c:fb:b4:07:f6:76:a1:
e0:be:c2:c5:40:23:8f:b6:29:c7:ff:fa:c3:f1:aa:a3:4e:53:
af:ea:18:c5:f9:5f:e0:62:2f:9d:fa:ec:87:ae:07:78:e8:93:
49:25:94:99:38:d1:68:0d:95:17:80:09:5f:21:1f:82:cf:0a:
cc:d5:b3:73:a5:15:05:b3:24:a6:1b:2a:b2:9f:f3:af:70:ee:
14:85:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org