Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/irjo-Bkd5ytC-2ACwEjfg8robuQ.roa
File: irjo-Bkd5ytC-2ACwEjfg8robuQ.roa (raw, json)
Hash identifier: DV5dJFZwHU9QEWv+QNII2Gf8NV0XVULc3BgCVh2jpBw=
Subject key identifier: 8A:B8:E8:F8:19:1D:E7:2B:42:FB:60:02:C0:48:DF:83:CA:E8:6E:E4
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 092ED374
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/irjo-Bkd5ytC-2ACwEjfg8robuQ.roa
Signing time: Sat 01 Jan 2022 07:02:38 +0000
ROA not before: Sat 01 Jan 2022 07:02:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16032
IP address blocks: 194.46.136.0/21 maxlen: 21
194.46.144.0/22 maxlen: 22
194.46.148.0/22 maxlen: 22
194.46.156.0/22 maxlen: 22
194.46.126.0/23 maxlen: 23
194.46.132.0/22 maxlen: 22
194.46.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154063732 (0x92ed374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Jan 1 07:02:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ab8e8f8191de72b42fb6002c048df83cae86ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:11:8f:53:05:53:69:98:7c:52:b0:35:0b:
ce:ba:d8:1c:38:eb:a6:e4:e5:36:c6:66:f1:39:40:
9d:b2:05:3a:09:57:74:5f:21:ed:49:11:69:4b:00:
8f:ec:4d:27:39:63:ed:1a:38:42:cf:6e:7e:c4:3e:
7c:d8:97:c4:9d:3e:9b:fa:5f:bc:ab:31:9d:47:74:
3c:a5:d3:63:2f:26:a8:18:9b:e1:fa:1a:a4:61:b8:
96:bf:df:f0:d5:80:5e:60:aa:db:e5:8b:d3:28:f7:
f5:2e:a5:e8:c9:4f:0d:74:e1:5b:20:2e:38:ca:1f:
b7:98:4e:4b:7e:82:d4:e6:6a:c0:38:0c:d5:6f:ec:
94:4c:f8:fa:7c:6f:92:aa:7e:17:fe:53:48:72:07:
a1:4a:19:6c:70:80:90:51:14:c4:da:6e:8b:48:1c:
b6:20:6c:f1:ff:b1:26:d0:b5:74:9e:ac:76:1a:8e:
8b:99:aa:b3:35:f0:96:33:cb:97:d3:3d:cf:7d:06:
44:55:cb:79:f1:a9:6b:b5:c2:7a:f3:af:17:e3:cb:
21:73:3c:25:e8:ec:4a:b2:7a:c5:e6:2e:cc:68:7d:
05:d1:bc:2c:b9:c6:27:d8:47:74:d8:33:ed:9b:6e:
df:88:ac:76:f3:cd:43:0e:3d:99:be:ba:0e:c8:b7:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B8:E8:F8:19:1D:E7:2B:42:FB:60:02:C0:48:DF:83:CA:E8:6E:E4
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/irjo-Bkd5ytC-2ACwEjfg8robuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.126.0-194.46.151.255
194.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
47:a1:f0:93:80:01:91:dc:91:7a:87:64:63:db:c4:01:85:bc:
53:92:95:8e:ab:a2:35:c3:5d:60:7c:0c:22:01:65:b9:11:64:
b9:81:d0:a3:92:66:a2:16:cd:8c:12:9a:13:93:b4:71:1a:7c:
e7:4e:af:66:a2:88:b4:93:0c:f6:05:45:cb:d9:77:d3:fe:56:
5f:e8:fc:bd:a4:e3:4d:c4:c0:67:ff:50:5a:22:9e:6d:71:84:
9b:2d:05:1f:38:d6:c6:a6:86:0c:15:75:8f:0d:42:7d:9b:cf:
0a:17:19:69:71:25:15:ed:36:12:6f:64:70:4c:89:cf:a4:51:
63:19:4d:a9:62:b3:d8:82:c2:54:c7:25:e5:f9:39:d5:26:f6:
20:1c:f6:bb:e3:cb:3c:ce:ef:45:5c:7d:89:a0:c8:38:37:7d:
e8:a8:a0:d6:a5:ab:52:59:9f:3b:6f:d3:8f:17:09:74:80:3c:
ce:fc:3f:14:a5:7a:34:8e:c0:f1:9a:4f:1b:dd:88:ec:89:3e:
f6:eb:42:ff:1f:66:8a:bb:aa:66:65:49:89:f2:60:8c:e3:91:
db:e5:e5:49:a6:23:6d:86:db:97:28:8a:38:e2:84:3b:0a:43:
e8:91:e1:e3:03:e3:c2:c0:cd:21:9e:4b:b5:66:d1:90:33:d9:
1c:33:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:10 2024 by rpki-client on console-fra.rpki-client.org