Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oXMVipcVUkYgiIIm7Sxc1d5m1dk.roa
File: oXMVipcVUkYgiIIm7Sxc1d5m1dk.roa (raw, json)
Hash identifier: hPgIefdUWcmjSrB9PB76wKDq1QWjG57Uzqwiz8aDq0Q=
Subject key identifier: A1:73:15:8A:97:15:52:46:20:88:82:26:ED:2C:5C:D5:DE:66:D5:D9
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018534515EB54D85A8176211F5B4BF672DC4
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oXMVipcVUkYgiIIm7Sxc1d5m1dk.roa
Signing time: Wed 21 Dec 2022 10:53:45 +0000
ROA not before: Wed 21 Dec 2022 10:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3352
IP address blocks: 194.187.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:51:5e:b5:4d:85:a8:17:62:11:f5:b4:bf:67:2d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 21 10:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a173158a9715524620888226ed2c5cd5de66d5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:a9:31:9b:00:79:6e:87:51:a7:4e:db:67:
30:50:2f:61:9b:de:68:f8:fd:3b:2d:58:49:c9:e8:
36:5d:8f:b1:61:e9:28:e9:38:2a:64:50:cb:2c:17:
8c:cd:e1:5c:05:38:fc:65:9f:b7:f9:67:d1:96:b3:
54:c6:26:02:2c:d6:ca:53:92:72:ba:6b:0b:07:c2:
ec:05:f2:4f:30:68:94:a4:a9:c0:4b:f1:54:53:3f:
2e:1e:d0:ca:44:ff:72:5a:e8:be:b5:60:1b:61:9d:
5f:12:bd:34:7d:2f:e5:1f:02:33:98:61:fd:de:9b:
80:0b:8a:da:48:7e:31:ca:ba:a4:31:38:7b:5b:13:
e0:5a:da:ce:a2:b8:7f:49:f0:fb:57:05:5f:04:26:
f1:5d:31:6f:c5:ba:5d:dc:98:56:4b:6a:b4:98:47:
54:ef:b4:c9:1d:00:97:fb:87:6f:24:b7:b8:f6:50:
28:7b:0a:e7:ce:92:e2:30:1d:29:6b:52:fc:d5:47:
30:2c:c2:11:e9:a3:63:5f:ca:c1:76:35:bb:05:f9:
40:54:c6:c7:b9:bb:66:50:ae:fb:d1:6f:3f:ec:58:
5b:2b:6a:c0:6a:64:2f:f7:75:44:36:3d:ec:37:fe:
a5:db:62:46:66:40:9e:7b:17:f7:dc:b1:54:b2:8b:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:15:8A:97:15:52:46:20:88:82:26:ED:2C:5C:D5:DE:66:D5:D9
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oXMVipcVUkYgiIIm7Sxc1d5m1dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:01:47:36:12:1d:27:6a:35:08:06:67:16:c7:08:f2:58:86:
14:79:ed:84:13:0a:d0:a8:62:da:f9:33:ea:e7:27:47:63:c6:
a4:bc:f4:c3:cf:54:a4:46:2f:ff:77:89:90:9e:c2:df:11:0a:
7b:31:4d:56:58:fd:0b:21:2d:63:fd:f1:7d:8a:dc:11:be:c1:
0d:51:af:e0:62:9c:3e:29:90:c7:e2:29:ea:41:72:31:cd:54:
28:40:1a:4d:c1:18:b5:c0:0f:33:9f:96:b7:c1:41:c2:b5:81:
93:2c:d5:56:db:c8:9f:0e:2b:2e:f7:f1:91:24:7d:be:af:66:
d0:c4:f2:be:36:73:5a:98:af:88:92:8a:fc:03:ab:73:9c:12:
96:e1:44:1d:bb:f6:75:b4:cc:86:59:84:ba:a1:da:72:4f:22:
9f:fe:55:53:2d:fd:c5:ad:19:0d:5f:4a:b9:74:f0:b5:9f:71:
53:c4:c8:99:c2:56:44:7f:bf:75:dc:f4:12:ae:6c:3a:73:73:
30:4b:4d:aa:94:77:d6:17:05:ef:e5:57:5f:a5:87:95:ba:db:
3b:b8:69:c9:eb:e9:e5:d2:bf:4d:24:6c:51:d2:4d:20:3f:7a:
39:6b:3c:89:f3:37:82:90:ee:f8:77:0d:78:e0:47:f4:78:72:
cd:a0:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org