Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/44Lom5Bgm7klQ15jpn7qFjPk9wY.roa
File: 44Lom5Bgm7klQ15jpn7qFjPk9wY.roa (raw, json)
Hash identifier: QIu+XRYel/D4VMbfkgS0uZmr6KRnB686M50e+z5GeAU=
Subject key identifier: E3:82:E8:9B:90:60:9B:B9:25:43:5E:63:A6:7E:EA:16:33:E4:F7:06
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 0182EFECFEFF53761E115F384E37118ABE33
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/44Lom5Bgm7klQ15jpn7qFjPk9wY.roa
Signing time: Tue 30 Aug 2022 18:04:22 +0000
ROA not before: Tue 30 Aug 2022 18:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29522
IP address blocks: 194.48.216.0/24 maxlen: 24
195.182.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:ec:fe:ff:53:76:1e:11:5f:38:4e:37:11:8a:be:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Aug 30 18:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e382e89b90609bb925435e63a67eea1633e4f706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:25:04:6f:01:d3:72:ff:6b:50:64:7d:5d:
2b:29:f3:f4:0b:08:c9:57:a6:12:d9:8c:8a:37:41:
39:28:e6:d9:0f:de:2b:d5:00:23:cb:c5:e7:fb:95:
2d:a6:d5:29:ec:cb:49:51:cf:35:c1:24:c6:3a:e7:
6b:57:c8:94:9c:d6:0c:39:40:bf:49:41:85:56:18:
34:88:79:1c:6e:dc:bc:df:33:0a:77:e3:64:22:ff:
22:80:ad:8b:8c:e0:e9:3e:f9:c7:e3:97:56:da:df:
a4:84:1e:f6:dc:ca:38:60:16:58:5a:c9:c6:72:82:
c4:cf:a4:5d:41:ab:53:b5:5c:43:6e:35:1c:09:2d:
e0:c9:6a:0a:06:6f:8d:af:2b:ef:3d:24:96:c3:36:
ae:90:89:92:b3:fb:9d:ec:cb:ea:04:99:d2:af:08:
06:ae:7f:05:c5:8e:3d:6e:22:62:7c:de:fa:0a:ce:
16:4a:66:63:f0:17:d2:9e:a6:0c:ce:41:73:cb:14:
3e:4f:bb:68:cc:2c:bf:6f:9e:10:72:35:4a:52:83:
e0:b4:61:c2:74:9d:b8:07:26:8d:b1:d5:54:cc:0e:
66:ac:12:46:62:60:f3:3e:bc:67:2c:97:02:18:73:
64:7e:2a:9e:3c:70:9d:ac:9f:db:eb:3e:f6:4f:b6:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:E8:9B:90:60:9B:B9:25:43:5E:63:A6:7E:EA:16:33:E4:F7:06
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/44Lom5Bgm7klQ15jpn7qFjPk9wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.216.0/24
195.182.14.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b9:91:ab:bd:8f:69:45:28:8b:29:ce:5b:cf:00:d3:d2:70:
a2:ec:00:d2:f8:a6:47:33:77:17:53:a1:af:14:f1:50:2b:f1:
25:29:46:19:ad:d3:1b:40:85:af:2c:dc:f5:67:f2:bc:6f:14:
10:7b:7c:6e:58:69:cf:80:80:da:97:6c:ed:52:c5:80:b9:b0:
59:90:c8:43:bf:33:65:63:be:12:91:8e:10:bc:5a:7a:45:4e:
ce:9a:6a:56:ea:a3:fb:82:3e:4b:d0:a4:dd:08:86:ef:9a:9f:
30:c4:66:30:18:49:4d:72:45:d8:66:a1:d6:fa:86:f6:b6:76:
c8:c7:00:90:a3:db:97:04:e8:39:dd:4d:58:1d:51:1a:8a:d1:
45:fa:0e:21:50:6b:f5:80:ae:69:aa:46:74:1a:d2:40:d5:a7:
71:48:58:08:ef:a8:af:28:b3:66:6b:ac:66:48:55:4a:94:0c:
b3:c7:2a:09:90:b1:7e:95:46:9d:95:77:3b:ff:1e:9c:54:f0:
54:40:3a:06:a2:74:61:40:90:cf:6d:08:d3:bb:87:52:48:eb:
80:e4:da:d9:3e:7e:fb:43:9e:c0:2b:35:a8:0e:68:48:00:fb:
1b:dd:3e:ab:50:23:50:b9:8e:82:fe:64:aa:4f:72:30:d4:78:
4b:8c:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:37 2024 by rpki-client on console-ams.rpki-client.org