Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/axEJBRy3SKx2y75kFrfnwY--gg8.roa
File: axEJBRy3SKx2y75kFrfnwY--gg8.roa (raw, json)
Hash identifier: nUbWSv0B3Bnhq33QVrA2B7D7bHdrcLnkNUzbrH728ac=
Subject key identifier: 6B:11:09:05:1C:B7:48:AC:76:CB:BE:64:16:B7:E7:C1:8F:BE:82:0F
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: B32FC0
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/axEJBRy3SKx2y75kFrfnwY--gg8.roa
Signing time: Sat 01 Jan 2022 05:53:08 +0000
ROA not before: Sat 01 Jan 2022 05:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24971
IP address blocks: 195.140.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11743168 (0xb32fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Jan 1 05:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b1109051cb748ac76cbbe6416b7e7c18fbe820f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:e3:6d:97:0b:e3:08:91:00:d0:a6:91:b6:
5d:08:8b:ff:ca:d4:5a:7d:45:e9:f7:83:6f:97:02:
c7:33:73:12:b0:e0:ae:a1:b8:68:bb:06:e1:cb:f1:
6a:55:fb:c9:a1:45:6c:90:66:14:e8:90:e0:08:88:
ab:cb:e7:ab:c1:92:0b:a4:bb:d8:01:88:42:5a:7e:
23:b4:6f:af:e6:6d:f5:b2:1d:97:f7:36:08:c1:4c:
e1:63:f5:45:11:f1:fd:ec:39:73:2d:19:62:7f:af:
51:99:e2:08:76:2c:ed:1d:51:2c:7f:7c:a8:7a:c8:
ad:97:18:9c:8f:a9:a7:00:12:f2:dc:d6:65:88:08:
fc:6a:af:6e:2c:32:eb:1b:1d:ee:fa:ef:4a:9e:ed:
3b:15:80:18:05:e6:80:1f:1e:8e:01:f8:b2:3d:99:
e4:20:3e:c5:66:71:04:dd:61:8e:c9:c2:78:3a:38:
3d:1a:49:66:10:3f:da:da:13:fa:99:db:83:4f:9f:
a7:d4:2c:5a:08:00:7d:af:c0:c0:66:5c:fe:0e:44:
83:f2:7d:7b:56:49:4f:0c:22:a1:90:c7:5b:2a:07:
77:cc:37:cd:18:37:27:d7:7f:7a:61:50:d1:59:fb:
c7:c3:fa:74:bb:fc:15:ea:40:c6:36:8d:f3:40:56:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:09:05:1C:B7:48:AC:76:CB:BE:64:16:B7:E7:C1:8F:BE:82:0F
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/axEJBRy3SKx2y75kFrfnwY--gg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.252.0/22
Signature Algorithm: sha256WithRSAEncryption
88:72:ca:af:6d:a6:26:92:f4:43:6e:32:ce:8f:5a:3c:71:00:
35:a9:cf:27:a1:a6:02:90:c9:a5:0b:c1:d5:1d:50:29:8d:83:
6d:5f:45:13:d0:df:f5:73:67:85:86:0b:8e:84:67:bf:90:d2:
80:f5:d6:5b:88:80:d2:99:99:b5:24:e2:ba:7b:12:72:a2:7b:
5b:09:65:3b:08:89:6d:d5:51:30:0a:43:fa:0c:ba:c1:5a:ff:
94:b7:c7:84:8f:5c:50:54:fa:9a:3a:19:45:77:5d:77:1c:1d:
18:bc:39:ad:b9:a9:45:41:3a:2a:ba:3f:c4:d6:7e:30:6d:4f:
60:ba:70:5f:59:8a:8e:c3:10:d9:34:f3:37:8f:5f:87:4f:a6:
f8:24:db:60:90:db:79:df:16:38:c8:b8:00:2b:11:9a:ba:4b:
ee:13:7a:12:6d:3c:08:10:7b:68:94:13:7e:15:de:51:91:b6:
54:13:35:32:f8:bc:4a:7b:19:b7:ac:30:67:9b:13:e3:bf:81:
aa:b6:24:fc:4f:98:c3:4b:4c:a7:89:a0:4a:25:b6:fb:ea:9d:
89:67:38:a0:d3:43:61:c5:46:9d:28:17:27:71:73:b4:fc:de:
ac:59:76:20:20:c9:83:5b:29:4e:55:d9:fc:ac:b9:25:d5:c6:
e2:9a:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:41 2024 by rpki-client on console-ams.rpki-client.org