Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/oiCXTufMkbxG_BZIG7V72LLZ5CE.roa
File: oiCXTufMkbxG_BZIG7V72LLZ5CE.roa (raw, json)
Hash identifier: i6XtgHry3AgRnBJIeh92P4g67maZS3fhO+kVPU2wfPI=
Subject key identifier: A2:20:97:4E:E7:CC:91:BC:46:FC:16:48:1B:B5:7B:D8:B2:D9:E4:21
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 393ECEFC
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/oiCXTufMkbxG_BZIG7V72LLZ5CE.roa
Signing time: Sat 01 Jan 2022 03:52:58 +0000
ROA not before: Sat 01 Jan 2022 03:52:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8618
IP address blocks: 195.130.124.0/22 maxlen: 22
195.251.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960417532 (0x393ecefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:52:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a220974ee7cc91bc46fc16481bb57bd8b2d9e421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:77:8e:26:74:93:df:9e:e5:92:de:57:b6:
25:67:c7:15:9d:1a:28:85:1a:02:b9:fc:3e:e2:a7:
c7:0f:bb:61:5e:58:9a:8e:85:b5:d2:50:29:5a:22:
3a:e4:1e:f4:71:a0:15:ef:a8:1c:1b:c8:81:3d:e4:
0d:04:03:01:32:b8:10:d8:f1:24:8f:e8:3c:e6:f0:
f9:61:f0:8c:5a:eb:3f:c0:3d:d1:fd:c4:c1:51:45:
b1:38:fd:6c:bf:5e:50:43:d0:00:bb:dd:f9:af:b3:
09:c7:d3:6c:f6:01:9b:5b:41:e3:88:88:88:78:e5:
2c:6b:a3:75:cc:7a:07:18:4b:ce:d3:85:fa:8d:90:
1f:31:76:74:a5:a9:2a:ef:ce:c9:5d:eb:8e:e5:08:
5c:82:b6:57:19:5d:f4:bf:45:c9:1a:e9:4c:66:74:
b1:dd:47:3b:0a:7f:57:37:17:5b:05:6a:e5:c8:23:
45:3a:c5:b6:70:22:12:ec:ca:7a:ef:d9:57:dd:18:
13:23:2c:cf:d7:33:bf:a4:d8:bc:72:a6:c9:b3:8f:
0d:03:96:c4:b7:cb:49:5d:26:d8:39:f0:09:1a:e5:
50:7e:a9:9e:c3:f8:b2:9b:68:31:f4:7b:71:9b:8f:
f7:4d:1b:dd:98:c1:1a:ac:7f:2a:a8:e7:f4:d1:02:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:97:4E:E7:CC:91:BC:46:FC:16:48:1B:B5:7B:D8:B2:D9:E4:21
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/oiCXTufMkbxG_BZIG7V72LLZ5CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.124.0/22
195.251.110.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:cc:a2:e8:12:9a:59:d6:d8:4d:70:49:fa:cf:ca:99:de:72:
be:90:2e:d9:6f:90:ee:98:6f:5e:5f:e6:ff:27:e2:8f:8f:b1:
0c:53:86:6c:c8:da:bb:f0:46:2d:b8:87:86:cb:66:d9:d6:58:
33:4f:dd:78:e0:46:f1:7e:9e:61:f1:62:88:6f:75:45:2d:f3:
86:5d:04:eb:24:ca:51:42:db:b7:86:24:5c:6a:63:68:83:e9:
dd:af:df:9a:80:c1:39:91:7f:04:32:71:ee:fe:e3:0d:64:e5:
a2:a9:bd:73:6f:d7:2f:ba:ac:41:dd:fe:47:9a:25:aa:02:87:
f4:02:04:c1:75:6a:30:4d:dd:4b:68:c2:97:6e:d3:e6:9f:a0:
5e:2d:f9:7d:42:5d:e8:5e:87:06:a2:ab:81:14:e1:20:71:78:
e0:be:dd:a6:45:1d:2b:3a:b7:14:31:27:36:07:10:29:7f:52:
6b:e6:bc:b6:a3:90:e8:8f:98:c4:31:29:ab:00:6b:1e:52:7f:
5e:62:57:c3:f5:65:0f:0b:af:98:4c:5e:98:9a:01:5d:d8:6b:
a2:18:ab:df:9a:c3:3d:8c:e9:c1:98:68:b1:cb:2e:a5:76:71:
18:68:58:b3:fa:3c:c3:b5:fd:77:a1:d5:3c:96:e0:24:23:bc:
f3:58:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org