Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/CaGuNWUo2xittlMdXt_M3zGl-R4.roa
File: CaGuNWUo2xittlMdXt_M3zGl-R4.roa (raw, json)
Hash identifier: 6ZelabkKgI/MbicFuBxRmI1h/ZTBoubcYW3LDuWrC48=
Subject key identifier: 09:A1:AE:35:65:28:DB:18:AD:B6:53:1D:5E:DF:CC:DF:31:A5:F9:1E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 06B4D08D
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/CaGuNWUo2xittlMdXt_M3zGl-R4.roa
Signing time: Mon 14 Feb 2022 11:51:59 +0000
ROA not before: Mon 14 Feb 2022 11:51:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210289
IP address blocks: 195.177.230.0/24 maxlen: 24
195.178.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112513165 (0x6b4d08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Feb 14 11:51:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09a1ae356528db18adb6531d5edfccdf31a5f91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:01:ed:ea:d2:88:d4:44:00:2e:7f:59:2e:
52:7f:66:be:71:b4:20:de:5b:07:1f:3d:ab:d5:a9:
bf:97:f4:ab:b9:f4:fc:e5:90:f0:c0:87:d1:e0:19:
c8:8b:10:b6:59:43:f4:16:b0:54:95:c2:52:a6:45:
b8:14:7d:28:aa:fa:77:67:2f:e8:80:fe:b2:1c:4b:
18:db:13:58:30:d6:ce:41:c6:3e:53:0a:e6:65:aa:
90:bc:97:f7:4b:84:41:66:de:3a:1b:4d:c3:0a:48:
4b:ea:bb:31:9e:93:00:24:b2:25:bc:54:6f:d3:ff:
59:d0:45:78:5b:39:aa:c2:36:95:b2:db:f0:ea:03:
d6:4f:ee:d5:c6:32:de:af:6e:4c:cd:d2:2b:ab:96:
c7:34:7e:35:32:44:d2:ed:d8:e4:d7:d0:47:c0:bc:
cf:fe:09:a7:b4:60:5e:6e:34:b8:e7:d5:2d:b4:8d:
6c:8e:4d:92:d2:bf:6e:49:63:ab:69:d0:82:6a:e5:
2c:fc:bd:a3:8c:18:a2:54:94:73:d3:b8:e9:f1:2c:
06:ba:aa:f2:d1:98:3b:66:60:69:27:df:c2:07:e5:
17:58:d7:6c:90:b0:ce:77:35:82:12:ae:cf:61:44:
79:d1:2a:fb:3b:45:42:a2:69:34:48:aa:49:b8:18:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A1:AE:35:65:28:DB:18:AD:B6:53:1D:5E:DF:CC:DF:31:A5:F9:1E
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/CaGuNWUo2xittlMdXt_M3zGl-R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.230.0/24
195.178.104.0/23
Signature Algorithm: sha256WithRSAEncryption
af:15:13:31:df:1f:2f:f3:93:3f:f6:38:c5:50:73:23:68:5d:
7c:ca:51:dc:04:3d:dd:bf:28:cb:61:7c:af:19:4f:56:48:9f:
a7:27:f3:e1:c6:28:14:03:a3:54:19:31:43:89:49:76:64:0a:
c5:c3:1b:fe:a9:80:36:06:7d:22:69:b5:4b:7b:8e:27:4e:81:
ca:33:b0:73:32:73:24:a4:60:bc:17:1a:65:5e:f9:3b:15:78:
4d:25:bb:e5:c9:eb:14:be:e2:28:d7:c5:b7:0b:b0:95:a5:14:
0b:b2:97:90:7a:00:29:15:cd:fd:a9:88:1f:7f:02:70:22:ce:
34:38:4f:34:2a:70:d1:0b:24:e8:5b:5b:14:70:71:00:80:3f:
90:f2:54:07:cf:b9:af:04:ac:35:ba:b4:29:72:ee:1a:0d:9c:
18:f0:cb:42:48:d0:22:0f:d3:f1:12:51:d9:9a:dd:d6:28:b1:
c2:76:e4:2a:d3:8e:cf:50:55:10:4d:61:ec:31:b3:5d:b5:75:
29:33:08:5e:12:b8:55:b0:ac:80:f8:11:96:9a:6e:cc:b3:39:
4f:f6:79:da:1c:80:58:04:fb:d4:91:4c:ec:e9:7a:75:86:21:
16:6d:c5:8d:e6:f5:a8:3b:8b:3b:d2:86:9e:1a:f8:f2:5c:e2:
87:6e:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:56 2024 by rpki-client on console-fra.rpki-client.org