Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/1RPQPnO3O2ONFD3eWO4pBKO0Jug.roa
File: 1RPQPnO3O2ONFD3eWO4pBKO0Jug.roa (raw, json)
Hash identifier: 4HJWdcEZ+BR4IYKz0FB0+hvtNjWGlyRIUG1xoppwW1s=
Subject key identifier: D5:13:D0:3E:73:B7:3B:63:8D:14:3D:DE:58:EE:29:04:A3:B4:26:E8
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 06513241
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/1RPQPnO3O2ONFD3eWO4pBKO0Jug.roa
Signing time: Sat 01 Jan 2022 13:56:14 +0000
ROA not before: Sat 01 Jan 2022 13:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 195.177.230.0/24 maxlen: 24
195.177.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105984577 (0x6513241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jan 1 13:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d513d03e73b73b638d143dde58ee2904a3b426e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:3b:51:bc:f0:fe:c5:4b:d8:43:a0:f7:15:
16:af:48:ee:c6:12:dc:50:bb:19:79:dd:50:1b:dd:
71:92:27:ca:b6:86:39:1b:87:3c:fd:e6:62:fb:66:
c3:07:df:99:1a:85:8a:df:2d:db:9f:ff:45:66:bd:
d5:8b:3b:cf:3c:98:c8:81:cc:24:63:72:81:70:c1:
ab:6f:e2:4b:ce:7c:aa:47:30:f9:de:f7:e0:17:4f:
e0:e9:6f:df:e6:62:de:ec:4b:9c:12:6e:ff:2c:f4:
d3:53:29:50:71:6a:cf:91:fe:75:d5:82:8f:3c:b9:
29:5b:bb:84:d4:d1:3f:c6:63:8a:c4:50:08:a4:de:
ed:45:13:dd:85:62:f4:90:91:a5:b6:0a:a4:c0:6d:
1c:f7:be:ce:0a:ee:6f:33:cf:b0:da:08:35:0f:5e:
6b:02:62:fb:1e:22:da:e4:62:11:02:9b:08:4e:a3:
16:0a:84:e7:3c:70:a6:80:2b:a9:9d:aa:51:55:ee:
a6:2f:2c:9c:1c:1b:cd:5f:e1:0f:7c:79:9d:c1:ef:
74:ad:64:49:98:b3:6c:a5:dc:99:f0:58:a6:eb:fd:
11:d4:b6:57:7d:47:09:9f:2f:06:3f:5d:b0:39:63:
ba:78:d3:93:cc:9b:22:96:c1:e9:c0:6e:c4:01:c1:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:D0:3E:73:B7:3B:63:8D:14:3D:DE:58:EE:29:04:A3:B4:26:E8
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/1RPQPnO3O2ONFD3eWO4pBKO0Jug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.230.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:02:93:5c:51:d3:1a:01:5f:63:47:07:6a:bf:e7:22:47:d8:
dc:d9:bd:b2:9d:87:b2:ae:98:bf:9f:62:90:2c:83:39:95:85:
40:d2:06:43:04:3f:10:3c:77:fa:37:f1:b9:26:4a:95:19:a3:
66:d2:50:69:2b:33:44:1c:c8:11:02:39:31:d1:0a:c6:20:77:
9e:e3:46:cc:65:f7:f2:94:98:0e:34:36:92:63:1a:05:10:40:
66:a9:61:9f:95:31:5a:63:bd:ab:b5:9e:77:ca:e9:28:c4:2d:
90:4e:99:3d:db:05:bb:44:ad:93:05:b8:8c:36:39:22:bb:86:
c4:21:25:66:aa:54:1c:4a:38:3b:27:f8:1f:58:fe:60:d5:2e:
1f:83:16:06:37:d4:4e:ce:af:99:da:f7:19:02:9d:01:b2:ce:
c4:db:ba:b5:ad:a2:cd:83:ce:6c:4b:92:93:eb:69:0d:8c:92:
7a:bb:dd:cd:5c:9f:b7:42:cb:bd:d0:35:5a:a7:27:84:56:da:
4a:f3:e4:4d:ce:c4:7f:2a:a1:19:72:58:f8:ac:70:f2:35:94:
53:db:2c:ea:b9:c1:1e:a0:a0:87:11:8d:7a:ed:3e:f6:b7:6a:
70:38:3a:af:45:70:a6:c6:87:6b:c5:01:1e:bd:bb:7e:eb:40:
d9:f9:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org