Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/FHAddaPfCx4GsHmBtq_1tejJeKs.roa
File: FHAddaPfCx4GsHmBtq_1tejJeKs.roa (raw, json)
Hash identifier: Y09IFU43hLRbFC0GHuO6ofX71+w8V/PeMCtJ3YC4r28=
Subject key identifier: 14:70:1D:75:A3:DF:0B:1E:06:B0:79:81:B6:AF:F5:B5:E8:C9:78:AB
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 0EFAD80C
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/FHAddaPfCx4GsHmBtq_1tejJeKs.roa
Signing time: Sat 01 Jan 2022 14:01:30 +0000
ROA not before: Sat 01 Jan 2022 14:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50464
IP address blocks: 195.191.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251320332 (0xefad80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jan 1 14:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14701d75a3df0b1e06b07981b6aff5b5e8c978ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:4f:98:bf:fa:da:da:96:95:15:14:6f:28:
ea:ec:4a:64:dd:79:19:f9:89:59:cd:42:f8:09:c2:
79:82:2d:f4:70:8d:5e:ee:77:af:58:fc:80:2b:6b:
fd:4d:d9:53:2c:95:14:65:f8:0f:58:47:2d:9b:43:
79:1f:ba:d8:c2:0e:7a:d3:ba:40:f1:0c:8f:58:1d:
6d:ef:50:13:c8:80:e0:44:81:f6:91:e6:15:4a:76:
7c:d2:13:67:72:43:f1:1e:21:0f:e8:09:9c:e7:14:
8f:ad:88:41:81:5c:94:74:a4:a2:fd:e8:dd:79:b6:
c5:c3:ca:be:eb:6a:4a:c0:66:24:81:f2:05:40:cf:
ec:b8:a6:a4:86:3a:60:6f:68:9b:38:89:bb:46:6e:
bd:89:da:9f:a6:b5:cb:a2:1d:b9:66:85:5e:1d:88:
ea:1e:38:79:c9:3f:d8:86:b1:3f:4a:68:b6:ac:19:
1d:b5:35:d9:ae:e6:8a:01:68:eb:ed:b6:b1:dd:87:
41:9e:fd:fd:d2:b2:e6:73:da:1a:19:fe:9c:fe:c2:
62:b8:82:6d:fe:50:3c:ca:99:c6:f6:79:4f:73:77:
fb:dd:79:8d:35:24:43:ea:93:4d:11:f9:61:0b:98:
20:a7:fa:46:4a:27:7d:b3:cd:e8:b0:84:20:9d:a9:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:70:1D:75:A3:DF:0B:1E:06:B0:79:81:B6:AF:F5:B5:E8:C9:78:AB
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/FHAddaPfCx4GsHmBtq_1tejJeKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.76.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:f7:7d:a2:b5:ef:47:3c:1d:a7:c4:8e:84:5a:b3:8a:14:4d:
3d:09:2a:63:0d:61:de:da:fe:6b:ee:d2:4a:97:35:b8:79:4a:
22:cf:85:c9:48:2c:00:a6:a7:84:10:bc:69:64:c7:e4:dd:57:
9b:4b:e2:0e:f2:7e:6a:cb:3d:79:64:3f:36:83:15:d5:3c:e0:
89:35:d4:f0:7c:91:a8:7a:c8:fa:8a:ff:69:d0:82:d7:fa:13:
06:8b:d2:e5:cd:cd:0f:e9:ca:81:47:3c:4c:e3:5b:2f:c0:a6:
b6:9f:f2:e3:c4:04:57:6f:3b:41:9f:ea:8f:37:17:94:2d:ca:
4e:5b:06:7f:5c:e4:ef:a5:8a:53:68:a4:23:1d:01:74:96:b5:
2b:01:20:52:59:b4:e1:48:60:31:dd:09:b7:e2:8b:bd:80:de:
da:e0:07:c0:1d:3d:a9:a3:dd:18:10:75:c9:e0:09:91:db:1d:
55:04:fe:48:a5:69:d0:72:cf:67:d6:0e:a1:31:d2:7f:d3:b0:
8f:8b:b7:1c:6f:2f:ec:79:64:d0:9c:cc:a1:75:fb:0b:95:92:
e4:25:19:77:fa:cb:40:9f:89:f2:bc:e7:b2:82:5d:a2:ff:eb:
f3:65:11:3e:b1:1b:11:3a:bd:72:4b:3d:03:65:76:9a:65:20:
77:10:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:36 2024 by rpki-client on console-fra.rpki-client.org