Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/elE3Fq29EfQDa-I8ZgJ9UPdXKg4.roa
File: elE3Fq29EfQDa-I8ZgJ9UPdXKg4.roa (raw, json)
Hash identifier: 9U8n/NVykzPnOuXrWkJzeOzIG+VaWGX0Ijq7WzDaIyU=
Subject key identifier: 7A:51:37:16:AD:BD:11:F4:03:6B:E2:3C:66:02:7D:50:F7:57:2A:0E
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 17C31C
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/elE3Fq29EfQDa-I8ZgJ9UPdXKg4.roa
Signing time: Sat 01 Jan 2022 02:51:31 +0000
ROA not before: Sat 01 Jan 2022 02:51:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59253
IP address blocks: 194.127.192.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557276 (0x17c31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Jan 1 02:51:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a513716adbd11f4036be23c66027d50f7572a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:24:79:67:37:ce:6b:d7:7b:9b:34:96:21:
de:54:e3:cd:ee:3e:f0:22:e9:dd:53:f1:45:f6:7e:
53:a0:68:96:da:52:2f:0b:dd:58:07:bd:3c:f0:dd:
7b:5e:72:ab:ec:41:7c:93:85:1d:91:6b:09:14:b3:
2b:d8:49:a5:d1:a2:90:32:40:3d:e5:f4:77:92:c0:
0b:97:bd:b9:05:27:6c:15:94:04:f3:80:06:8c:d4:
42:c3:7c:50:27:ba:11:1c:b6:b2:6e:81:43:c8:a3:
04:45:00:7c:08:5a:5b:fb:73:bd:cf:d4:91:53:85:
93:41:45:f2:70:ba:f8:38:fb:16:13:6b:ca:17:26:
3b:08:63:80:66:1c:00:99:f6:15:e1:ad:ef:73:61:
9f:2c:39:7d:a9:cf:64:46:41:dd:e3:0f:ff:89:97:
81:f2:14:8f:b2:d9:6c:a7:8a:8b:d7:ee:7b:23:08:
ec:1a:7e:c5:37:a9:89:68:e6:22:f4:2b:03:08:95:
29:e7:a1:22:12:1d:e3:a7:a3:7e:d9:10:3e:ca:50:
62:cc:65:91:cf:e0:94:95:ce:13:1e:7d:69:cc:32:
45:eb:71:39:cb:69:10:79:2e:40:31:7f:03:79:29:
9b:29:11:79:2b:38:02:97:df:de:94:37:e2:54:f7:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:51:37:16:AD:BD:11:F4:03:6B:E2:3C:66:02:7D:50:F7:57:2A:0E
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/elE3Fq29EfQDa-I8ZgJ9UPdXKg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.192.0/23
Signature Algorithm: sha256WithRSAEncryption
08:38:3d:79:0e:b1:7b:99:c5:66:b8:47:90:ea:23:d8:e0:02:
9d:da:3e:8f:d0:1d:b1:af:f9:d1:48:9f:cc:ee:70:20:04:01:
fc:70:06:c1:5c:87:f0:53:59:fe:8e:80:88:6e:7b:9f:cb:4c:
d1:8b:b2:9f:74:54:15:26:2a:e8:04:c7:71:84:42:48:3d:0d:
97:9b:72:0a:8b:8a:0d:1b:52:6f:e7:78:8f:ec:38:ab:b0:79:
0d:fb:6a:f8:bc:9f:15:97:11:01:c1:8a:c7:e0:18:cb:b9:a4:
af:a5:2a:1c:1d:3c:1a:5c:d3:bb:93:bd:d1:59:91:fb:62:51:
87:39:5a:8e:f6:9c:fa:62:4d:db:92:1c:88:ac:51:c5:89:40:
2b:ca:f0:b1:d9:93:a9:b6:d4:25:e5:aa:c4:f8:96:cc:a4:38:
04:7f:31:60:36:fd:81:54:ae:28:89:a3:88:8e:e8:40:13:52:
72:6f:53:fc:e2:d1:3f:75:1b:cb:25:d7:3d:f7:43:8f:7d:d6:
46:3e:75:92:4c:fa:27:81:5e:54:51:9c:11:63:ff:83:41:b1:
18:8f:60:10:34:7d:fe:2c:e0:c9:95:00:b2:6c:21:fb:c2:45:
b3:0a:c5:eb:a1:58:66:02:51:1c:a5:87:df:a6:e8:5a:30:54:
cc:6d:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org