Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/EdCvdJ9D7Qr2JE1WSbmzPoLbwJY.roa
File: EdCvdJ9D7Qr2JE1WSbmzPoLbwJY.roa (raw, json)
Hash identifier: b89+gDUeA6+pFtBgOEJ8X7jmtiq46nYyi5m/rPl1JsE=
Subject key identifier: 11:D0:AF:74:9F:43:ED:0A:F6:24:4D:56:49:B9:B3:3E:82:DB:C0:96
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 05BEAC87
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/EdCvdJ9D7Qr2JE1WSbmzPoLbwJY.roa
Signing time: Sat 01 Jan 2022 14:55:10 +0000
ROA not before: Sat 01 Jan 2022 14:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39373
IP address blocks: 195.178.100.0/24 maxlen: 24
195.178.100.0/23 maxlen: 24
195.178.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96382087 (0x5beac87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jan 1 14:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11d0af749f43ed0af6244d5649b9b33e82dbc096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:4f:46:95:bd:63:78:03:75:7c:05:66:e4:
a7:6a:60:c6:5f:36:f5:3b:5e:2c:a5:05:41:5c:88:
f7:00:6e:30:ad:49:31:6d:56:5c:0e:bf:59:52:97:
91:ff:e6:4d:2e:be:10:74:ae:df:dc:f9:2d:df:b7:
75:d4:90:38:a7:9b:e8:98:d2:34:df:13:0d:ca:3e:
b5:3a:bc:be:fd:5f:95:57:4f:b6:48:c2:19:46:9e:
46:22:fb:dc:c2:df:47:45:35:fb:cc:95:12:94:87:
e1:35:63:ff:9a:c6:a9:88:b4:c0:9f:62:f7:15:42:
04:1b:32:7e:83:41:19:d2:3f:5a:12:7c:97:d9:c6:
91:d7:01:37:ce:f5:43:13:54:d7:9f:8c:2c:6a:a5:
7b:00:71:4f:ed:83:49:04:8f:29:08:36:d5:2a:88:
97:f0:c0:27:be:70:a4:f0:7b:b4:04:8e:17:a5:0c:
a7:0b:d3:ca:a5:52:aa:2f:b6:58:7b:2c:96:02:5a:
7f:83:7f:b9:7d:4f:ee:f8:3e:18:00:5b:06:61:61:
4b:d1:77:09:82:68:ba:fd:7d:0f:fc:f7:7b:47:c5:
95:60:e6:5b:6a:dd:7f:c4:6d:f2:83:5d:8a:0c:24:
a4:69:d3:9c:37:3a:df:3e:85:3b:17:df:d9:fb:3f:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:AF:74:9F:43:ED:0A:F6:24:4D:56:49:B9:B3:3E:82:DB:C0:96
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/EdCvdJ9D7Qr2JE1WSbmzPoLbwJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.100.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:10:51:47:12:5e:8e:b9:71:42:39:8e:87:23:93:16:58:38:
a4:44:e1:45:07:48:9b:c1:a9:07:b8:ae:a7:89:03:ef:6f:af:
8d:08:46:2e:44:30:ed:f1:2c:94:3c:22:b8:7d:cb:aa:46:c9:
fc:31:66:e3:49:e3:fd:4f:0a:eb:04:5a:95:ee:cb:0c:31:c0:
a1:c3:00:a0:e7:ff:50:f6:26:de:dd:7b:42:42:32:64:94:bf:
d9:cb:a7:e7:ee:f7:d4:9b:01:8e:87:2b:8f:60:8a:55:d4:64:
07:e1:ce:e3:7e:d0:68:85:da:5c:e4:69:1a:2e:d3:5d:8d:48:
0d:53:f3:47:bb:48:0a:cf:c0:a6:b8:67:58:25:19:8a:64:dd:
e9:80:96:ba:14:f0:fd:bb:e3:8e:55:a9:91:f5:65:28:99:06:
41:02:41:be:ee:cd:c4:d2:4d:b4:18:e9:36:a8:5a:bd:e0:b2:
b8:18:91:86:4d:6e:9b:40:25:1e:bd:23:e1:12:12:71:36:2f:
a9:2f:60:d4:2e:49:9a:74:10:31:c8:24:ef:65:5d:49:fd:52:
91:c5:c6:6b:8a:7b:b5:dd:4e:b4:13:98:73:ba:3d:b8:30:85:
49:f3:f8:8b:a9:55:ba:5e:46:48:24:21:f5:05:47:18:b2:48:
b6:6b:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org