Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/3bhXvXMF9Ty43SFWQAc05V0pU_g.roa
File: 3bhXvXMF9Ty43SFWQAc05V0pU_g.roa (raw, json)
Hash identifier: PfQgwvLy4UZCh+qiaxqp2TdaE8nc0LEbhN6axBtRKzo=
Subject key identifier: DD:B8:57:BD:73:05:F5:3C:B8:DD:21:56:40:07:34:E5:5D:29:53:F8
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 015EEE85
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/3bhXvXMF9Ty43SFWQAc05V0pU_g.roa
Signing time: Sat 01 Jan 2022 14:04:11 +0000
ROA not before: Sat 01 Jan 2022 14:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41182
IP address blocks: 195.248.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22998661 (0x15eee85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Jan 1 14:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddb857bd7305f53cb8dd2156400734e55d2953f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:2a:31:53:3a:18:04:80:7f:3f:50:59:39:
40:2c:a8:50:05:57:c1:ac:f2:9c:f8:a8:8e:b7:27:
69:c2:5e:0a:b5:3f:8d:bc:9b:91:7e:c9:7e:f3:d3:
d5:af:46:69:af:89:fa:a9:01:33:16:9c:40:6d:9d:
6f:10:4a:37:bd:35:17:bf:3f:a8:05:f5:4e:7e:08:
70:47:1d:4d:db:41:12:94:10:40:f3:e9:5d:c4:eb:
37:97:b9:77:05:68:4c:f9:12:fa:d9:ce:d7:cb:d0:
33:6e:50:09:10:e7:99:ff:69:61:8d:71:62:55:be:
d2:d1:6a:38:fb:b2:fd:38:2d:c9:ba:1d:29:9e:fe:
2f:05:b8:0d:0c:5a:ee:f9:ef:2f:dd:0c:af:f8:3f:
40:5f:26:66:b0:fe:57:77:c9:93:7a:1f:d8:86:d5:
04:ad:62:bc:6e:2c:03:13:96:85:23:db:3d:0f:ae:
dc:34:72:bf:1e:eb:b3:a2:da:3c:43:12:d8:53:53:
07:ef:5f:7e:03:e0:c1:80:12:8e:63:d8:2d:6a:40:
1c:e0:1e:04:1e:05:6f:94:11:30:44:e5:76:2c:9f:
30:b3:e4:f0:8c:f9:5f:61:57:b4:ac:84:9f:40:aa:
37:df:6d:4b:8f:8d:88:f0:70:3a:da:2f:f3:af:57:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B8:57:BD:73:05:F5:3C:B8:DD:21:56:40:07:34:E5:5D:29:53:F8
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/3bhXvXMF9Ty43SFWQAc05V0pU_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.68.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e1:7d:e1:5f:af:1a:21:3b:f6:83:7c:94:4e:f7:91:f1:9f:
4e:3d:96:b8:bd:51:d7:d8:fd:4b:b6:82:fd:cb:17:4e:c5:ed:
c7:87:d0:45:9d:f9:ff:fb:23:63:30:79:38:0c:8b:15:aa:6d:
f1:7a:aa:a6:f2:7b:78:ec:ab:86:2d:4d:24:61:2e:73:38:ad:
9e:5d:ba:1e:55:c9:07:a2:81:4a:75:6a:5f:33:8f:1d:6f:e5:
5a:89:cf:c5:df:70:38:a1:92:f5:eb:0d:3e:94:44:20:06:38:
27:17:5b:44:e8:54:61:56:0e:30:61:20:da:03:58:f5:42:23:
f1:a7:bb:ed:24:0e:65:16:c1:03:f3:70:88:82:eb:91:d4:d6:
e3:e6:25:c4:96:bd:03:d6:ab:44:82:df:7b:01:5e:b7:d0:61:
25:60:b7:4f:aa:91:e2:21:b9:b9:7a:da:25:cd:9c:3a:4b:79:
54:3b:36:57:d9:b0:c3:fc:5a:de:78:1d:6e:c2:fe:c8:7a:51:
66:3c:de:a3:dc:35:0d:1c:6e:3b:62:e5:50:1b:89:96:42:63:
2a:7c:29:9b:13:76:87:86:f3:5d:50:8b:27:6f:fe:a8:04:93:
5e:b2:0b:da:86:b5:21:46:82:65:92:4d:6a:4e:90:2c:a4:aa:
b1:cf:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org