Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/o2nl0YyxLoPgwiLZ7F8Ye01852Q.roa
File: o2nl0YyxLoPgwiLZ7F8Ye01852Q.roa (raw, json)
Hash identifier: Q5edb16cOopXtMBIBN19PJTrxXRUEJI9Uq2kr6e3pDo=
Subject key identifier: A3:69:E5:D1:8C:B1:2E:83:E0:C2:22:D9:EC:5F:18:7B:4D:7C:E7:64
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 0B86886E
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/o2nl0YyxLoPgwiLZ7F8Ye01852Q.roa
Signing time: Tue 26 Apr 2022 15:17:11 +0000
ROA not before: Tue 26 Apr 2022 15:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202405
IP address blocks: 194.147.196.0/22 maxlen: 24
194.147.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193366126 (0xb86886e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Apr 26 15:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a369e5d18cb12e83e0c222d9ec5f187b4d7ce764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:00:9a:41:7c:f3:e4:93:8a:25:1c:a5:58:
8c:07:77:e0:10:7a:2b:9c:40:50:51:d5:24:44:44:
6e:7b:e6:b9:04:ba:62:59:47:43:11:19:54:2f:1c:
22:8e:ad:7f:9d:7a:32:b8:e2:67:f6:8f:97:8e:66:
36:2d:98:a4:d0:f9:51:ae:f5:b5:15:54:a4:c8:21:
90:26:38:aa:de:66:51:c2:86:3d:d0:15:9e:80:91:
38:6e:6e:7a:0d:95:80:dc:2c:61:f0:85:9f:49:b0:
f6:00:93:38:41:14:90:1a:59:45:48:01:e2:15:05:
24:dd:dd:8c:13:8d:20:be:b4:c2:b0:50:68:1d:32:
51:cd:27:48:69:bf:36:fc:63:2a:6d:cf:8c:25:4c:
95:b2:be:05:2e:c3:1c:9b:cc:7f:2a:75:8c:8c:20:
29:33:92:1e:ae:6c:f7:d0:60:6c:41:39:f1:a0:4c:
f6:21:ab:03:5d:81:43:2c:8d:d8:9a:5e:43:49:4e:
c2:9b:5b:b1:01:42:43:c2:e0:30:21:ea:78:57:3c:
40:f5:3c:c9:7b:4a:3c:f1:a3:f6:12:f5:0f:de:4d:
52:c2:2a:2a:4a:f8:b3:a9:6f:00:7a:e5:4e:7c:70:
79:e0:ef:15:f3:70:5a:6b:8a:8d:29:92:31:7e:a4:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:69:E5:D1:8C:B1:2E:83:E0:C2:22:D9:EC:5F:18:7B:4D:7C:E7:64
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/o2nl0YyxLoPgwiLZ7F8Ye01852Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.196.0-194.147.207.255
Signature Algorithm: sha256WithRSAEncryption
7f:c1:b3:59:19:63:e6:a2:04:7d:53:b1:ef:f0:80:fc:61:50:
09:15:9a:62:6c:c8:fc:1a:c0:72:ad:6b:23:55:15:8b:24:44:
e2:32:f0:2b:77:7b:91:25:c0:22:85:73:83:bd:4c:2b:c2:92:
36:97:d7:0e:cd:8c:2f:66:20:74:f9:9d:ae:46:15:03:1e:8b:
db:b2:58:b9:ef:ed:68:56:87:57:77:f0:cd:f6:5a:86:96:f3:
83:97:ad:90:0a:6b:14:3c:9f:f2:b4:9f:23:0d:6d:23:cb:b0:
17:a7:f9:9c:23:02:9c:55:bb:1d:87:cf:d7:ea:e7:23:9c:53:
53:0d:97:dd:12:f0:df:5f:94:29:db:ab:e8:33:48:56:83:5d:
b0:af:83:15:fa:e6:79:24:e6:38:0c:a3:25:cb:36:58:09:34:
c5:84:b7:53:c3:51:db:88:1e:c5:34:03:34:62:2b:45:84:df:
5a:2f:0c:9d:8b:86:80:51:ee:0f:f0:14:94:df:a9:90:5c:41:
a2:7f:cf:a7:fb:dc:31:d6:d0:a1:ba:0f:1b:90:6a:fa:49:e0:
2e:5a:ee:5a:9f:3c:41:41:a1:e1:68:ea:80:9c:59:a0:5f:10:
3c:79:c2:1d:d8:81:e7:d8:4e:49:f6:95:38:de:97:af:fd:27:
57:d1:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:12 2023 by rpki-client on console-fra.rpki-client.org