Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4zTgf144TqDd0zMn1fwr4XDJ9cQ.roa
File: 4zTgf144TqDd0zMn1fwr4XDJ9cQ.roa (raw, json)
Hash identifier: +H8m1rpRDD5t0oY6qUE4pa0ZOEYKRlHZ8ElfYfO9Gw4=
Subject key identifier: E3:34:E0:7F:5E:38:4E:A0:DD:D3:33:27:D5:FC:2B:E1:70:C9:F5:C4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 13101E5A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4zTgf144TqDd0zMn1fwr4XDJ9cQ.roa
Signing time: Wed 25 May 2022 15:19:13 +0000
ROA not before: Wed 25 May 2022 15:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 272697
IP address blocks: 130.185.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319823450 (0x13101e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 25 15:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e334e07f5e384ea0ddd33327d5fc2be170c9f5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:d7:63:db:c9:74:52:3f:46:46:c2:8b:07:
65:4d:0b:59:d7:4b:66:62:af:c2:29:1f:cb:7b:55:
61:7a:36:70:50:bd:8f:e2:12:59:9e:7e:e0:59:0d:
b9:0d:18:55:23:e9:72:3f:65:bd:19:f7:77:65:11:
3f:82:04:d8:d8:66:ef:18:cf:44:b2:86:a4:4c:c2:
dc:41:56:f0:58:55:a2:11:d3:16:2c:ba:52:16:90:
69:58:9c:a2:51:1d:4e:60:67:28:b8:5c:dc:55:96:
56:15:a6:fb:e6:f6:15:ac:2c:09:ea:4e:a0:ce:4e:
89:0f:c2:48:e7:99:a6:2a:75:d4:62:f6:1d:70:1f:
48:59:a1:7c:90:7c:39:af:63:da:f7:ba:de:0e:05:
7f:d3:64:90:c5:4b:29:2a:7f:e6:5b:2e:81:2c:b7:
01:85:58:84:51:4f:41:66:9c:2f:4d:01:12:16:ee:
12:8e:b8:0e:b9:74:d3:e6:c4:d8:4a:78:3c:c0:ad:
70:6e:d8:08:a7:bb:08:3f:91:9d:52:5d:9d:b9:d8:
d9:c9:88:5d:e3:4d:8b:78:c4:2e:cb:54:16:ef:41:
13:64:81:54:8f:0e:5f:c0:1a:c6:a7:42:67:e0:55:
37:46:a1:cd:e5:c1:21:3f:19:09:83:d3:14:74:36:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:E0:7F:5E:38:4E:A0:DD:D3:33:27:D5:FC:2B:E1:70:C9:F5:C4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4zTgf144TqDd0zMn1fwr4XDJ9cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.238.0/24
Signature Algorithm: sha256WithRSAEncryption
95:73:a1:f4:b4:dc:84:ba:8c:d0:59:36:ec:6c:e0:0c:a2:3f:
4e:10:3e:14:27:b5:a7:5d:a5:ee:01:95:24:5a:2b:d1:f7:18:
a9:ba:0d:50:64:74:e7:cc:34:d8:3a:0b:ce:0c:b4:9b:27:cf:
c6:d2:01:ee:f9:2c:1b:bb:f6:fa:dc:6b:53:eb:bb:ca:70:e5:
9c:c0:b7:01:37:9a:df:f5:e1:30:87:76:39:75:06:1a:d2:ef:
b0:eb:0d:66:82:13:72:4e:49:2c:51:85:33:04:f0:76:fd:2c:
20:3b:60:ee:fc:ba:03:6c:52:1f:27:2d:aa:f3:9b:3b:e4:1b:
43:0f:d9:43:d9:bf:32:f2:74:1a:b8:0b:45:53:ba:84:40:96:
fe:1d:6a:d6:4f:16:39:7b:e3:8c:e5:81:90:15:3f:3d:aa:1d:
de:2e:8f:3a:3a:94:61:9d:06:3d:4e:0f:30:32:32:12:96:a1:
a1:28:74:50:ed:fa:a1:e1:72:bc:89:a4:e9:08:d2:fa:69:22:
cf:77:1b:61:48:84:64:21:9a:6e:68:0f:65:51:a6:e2:9b:01:
f8:1f:23:a6:b2:51:d7:8f:bd:66:77:82:6b:7a:04:19:af:cc:
d6:35:e4:3d:6e:52:e0:bb:b8:2f:25:92:81:c3:23:c7:bb:3c:
9d:be:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org