Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/0nwMs-Q55z8IsCV2-lYKD7JfaW4.roa
File: 0nwMs-Q55z8IsCV2-lYKD7JfaW4.roa (raw, json)
Hash identifier: /lAt8e1I0kjJf/TX3iTYJ3s6L5nE3rLeHF+tKk3AGNg=
Subject key identifier: D2:7C:0C:B3:E4:39:E7:3F:08:B0:25:76:FA:56:0A:0F:B2:5F:69:6E
Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial: 0FD5E987
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/0nwMs-Q55z8IsCV2-lYKD7JfaW4.roa
Signing time: Sat 01 Jan 2022 16:06:14 +0000
ROA not before: Sat 01 Jan 2022 16:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50134
IP address blocks: 194.246.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265677191 (0xfd5e987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Validity
Not Before: Jan 1 16:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d27c0cb3e439e73f08b02576fa560a0fb25f696e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:6e:d6:5e:b8:cf:2d:16:3f:3a:82:08:ba:
ee:8a:3c:9c:57:cc:6e:59:d3:fd:d0:2d:e8:c0:a6:
4f:a9:a3:d1:37:a2:38:bb:1b:a6:25:7e:4b:b2:d3:
10:2f:7e:88:d3:57:49:4f:7e:87:f5:ab:14:ea:95:
72:b2:c9:2d:19:cf:93:87:28:f6:15:bd:df:6d:e4:
a6:e2:8f:9a:c6:39:d0:36:c8:57:1a:7a:8b:91:44:
15:3a:6f:1c:a7:33:42:de:fa:de:c2:92:83:97:05:
da:44:21:03:ae:ae:4c:fc:f7:52:56:5f:e3:60:46:
7b:92:15:d6:06:1b:5f:da:4c:be:8c:13:25:ed:1a:
21:47:ce:af:07:2b:1d:fe:96:1d:23:60:b3:25:db:
74:34:de:b3:b0:0c:ca:01:71:7a:96:99:d9:cc:bb:
33:b2:97:8f:30:1b:39:20:fe:d3:67:ec:a7:68:13:
0e:1d:62:0b:77:8b:3b:91:06:2e:83:0e:ff:c4:dc:
e8:bb:cd:df:16:8d:00:98:54:16:37:a4:10:84:24:
41:80:9a:9d:28:ea:21:47:0f:60:51:c1:00:11:c5:
96:18:e9:1a:41:e4:d5:69:6c:54:5b:34:d7:1f:e6:
c8:bf:24:be:d6:b3:96:d1:f5:8c:07:03:04:c8:06:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7C:0C:B3:E4:39:E7:3F:08:B0:25:76:FA:56:0A:0F:B2:5F:69:6E
X509v3 Authority Key Identifier:
keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/0nwMs-Q55z8IsCV2-lYKD7JfaW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5f:0b:0e:07:a7:b7:03:39:5e:fd:6c:3d:7a:14:d2:e8:02:
ca:43:f0:f8:2d:96:c9:bb:f2:ac:90:72:bf:dd:96:f4:98:d5:
07:d8:67:1b:5b:1d:06:e9:35:ab:87:55:9b:b8:1a:db:ec:f7:
11:b8:6b:77:05:f9:37:78:48:87:2a:b9:91:eb:61:ba:72:af:
cc:3e:71:74:47:c0:db:98:65:5a:8c:9d:1b:f7:af:6a:77:68:
fc:ec:8a:46:bc:65:e9:4c:55:c7:43:93:ea:ec:6b:a5:d8:68:
70:5b:4c:03:cb:bb:a4:42:82:b8:42:8b:b8:3e:9f:2b:70:5e:
15:0f:c5:23:bc:f0:1e:19:a3:1f:b8:c8:08:4a:25:6e:1e:cc:
64:09:71:b3:62:bf:12:6b:67:b2:b8:f5:98:a1:bd:bf:60:2a:
ed:d2:10:15:33:71:aa:8b:d7:5d:60:27:c3:f0:9e:4c:39:ea:
3f:61:84:69:d8:31:dc:3e:14:09:63:09:48:57:8a:a1:a6:cf:
3d:58:59:49:fd:a1:54:b3:51:b8:d4:bd:d7:70:44:38:28:56:
f7:c0:92:23:2c:52:a1:83:34:3a:a9:d7:60:61:3d:05:6b:af:
5b:65:7d:82:3b:63:d8:01:49:0f:73:4a:d5:86:aa:a4:81:d8:
e2:e2:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:08 2023 by rpki-client on console-fra.rpki-client.org