Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/oUOf5HPyw0ArctBY4Gimnlf7vPo.roa
File: oUOf5HPyw0ArctBY4Gimnlf7vPo.roa (raw, json)
Hash identifier: GmuSbS0fpqh1Pot1kN8WSL3QSIxFeSeno5LP9xgqZxM=
Subject key identifier: A1:43:9F:E4:73:F2:C3:40:2B:72:D0:58:E0:68:A6:9E:57:FB:BC:FA
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 015C7429
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/oUOf5HPyw0ArctBY4Gimnlf7vPo.roa
Signing time: Sat 01 Jan 2022 15:00:05 +0000
ROA not before: Sat 01 Jan 2022 15:00:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47336
IP address blocks: 195.182.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22836265 (0x15c7429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Jan 1 15:00:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1439fe473f2c3402b72d058e068a69e57fbbcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:77:ed:4c:50:16:32:c6:9c:ea:51:6b:5c:
dc:6e:0f:7e:2d:b3:96:08:1b:cf:a4:c9:14:fc:01:
09:7e:5a:77:5f:4e:55:13:57:b1:04:f2:85:0a:c4:
79:6c:e7:6a:4f:fb:45:1a:2c:bd:cb:b6:2c:2c:80:
ce:71:7b:f8:30:f7:7c:11:31:b8:a2:c3:8d:8e:b4:
cc:6f:5f:26:b9:ef:2c:77:ad:bc:c2:d1:78:cf:48:
1e:46:3a:88:83:a3:76:50:32:f8:86:c9:f9:a8:fb:
dc:49:c0:0a:fb:e0:b7:55:9c:c1:b5:7e:31:7c:07:
e7:47:3a:07:5a:4e:bb:f8:0b:17:ab:e0:c4:04:21:
f7:1a:e8:e3:19:c1:83:79:20:8c:6b:f9:cf:b3:66:
9e:fc:81:c7:10:cf:a8:b9:70:f6:a3:b0:61:dd:df:
72:61:80:e0:2f:49:5a:43:30:3b:3d:50:57:3a:38:
30:8c:7a:e3:5b:0a:14:b4:06:e3:5e:ba:ab:0e:0f:
37:aa:4f:00:95:57:ec:ce:e2:28:e5:e7:ab:01:1b:
1d:65:fd:73:fb:0c:9a:43:95:c6:a3:67:6e:b8:30:
f7:e0:e8:65:3d:a0:e5:fb:cf:ed:4d:1f:f7:50:b0:
89:37:26:4b:e1:4a:e4:46:21:3b:df:cb:95:3c:61:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:9F:E4:73:F2:C3:40:2B:72:D0:58:E0:68:A6:9E:57:FB:BC:FA
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/oUOf5HPyw0ArctBY4Gimnlf7vPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.61.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2b:3b:71:dd:2f:76:62:9a:7d:02:c3:39:fd:20:e3:4c:07:
32:2b:60:5e:63:6c:89:f1:20:ec:b4:ca:ce:03:f5:c9:b6:f0:
f3:73:7f:d7:2e:fa:d5:65:48:e1:b9:4e:69:74:b8:ca:c6:72:
75:f7:cc:d9:0b:3a:23:48:2f:16:40:f0:bf:3b:29:b5:d7:81:
39:c0:e8:b3:d3:c3:30:d0:f6:f9:f7:bf:69:16:ef:e8:88:46:
7f:d6:79:51:e6:42:77:01:f4:4c:ad:96:2e:2c:4f:90:14:67:
cd:8a:e5:e9:3f:9f:79:cc:06:68:8b:10:6c:d8:ce:54:13:4a:
b1:86:b3:27:70:c9:50:56:66:36:7b:66:3b:fc:c2:82:f8:4f:
31:d7:ef:08:b5:64:6f:80:df:73:80:dc:4c:8d:3f:7e:76:8a:
e7:84:3f:3e:b2:ed:3c:e0:52:17:31:a8:32:97:28:8f:51:3a:
4c:73:b2:6d:d5:c8:f9:26:0e:50:ec:03:ad:05:3f:dc:27:5b:
54:1b:fa:7f:14:c1:9a:1b:17:88:bd:cd:34:07:da:0a:c5:01:
58:9b:f3:f7:94:8e:4d:d5:92:74:2f:7a:26:47:87:b9:52:77:
3c:ff:c7:a0:d2:c8:70:ff:58:d2:82:6e:ad:50:ba:5f:11:55:
5b:0c:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:26 2024 by rpki-client on console-fra.rpki-client.org