Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/rQ0I-9aDZ7CY4-443v9jNVPOZLY.roa
File: rQ0I-9aDZ7CY4-443v9jNVPOZLY.roa (raw, json)
Hash identifier: oH7j/Vk0k9hV5PaCrjlcKfLsL5tma9pR83x8iGsLV7c=
Subject key identifier: AD:0D:08:FB:D6:83:67:B0:98:E3:EE:38:DE:FF:63:35:53:CE:64:B6
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 03E7C016
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/rQ0I-9aDZ7CY4-443v9jNVPOZLY.roa
Signing time: Sat 01 Jan 2022 15:55:38 +0000
ROA not before: Sat 01 Jan 2022 15:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35615
IP address blocks: 194.39.38.0/24 maxlen: 24
194.39.37.0/24 maxlen: 24
194.39.36.0/23 maxlen: 23
194.39.36.0/22 maxlen: 22
194.39.36.0/24 maxlen: 24
194.39.39.0/24 maxlen: 24
194.39.38.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65519638 (0x3e7c016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Jan 1 15:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad0d08fbd68367b098e3ee38deff633553ce64b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:64:1a:8e:6b:ac:34:ab:f2:f2:87:52:6c:
c4:16:83:3f:c3:ed:c0:9e:54:2f:3f:93:08:15:7f:
61:60:48:cf:1d:9b:c9:de:9b:c5:82:eb:b9:9e:dd:
83:50:02:70:54:58:12:cd:91:fb:45:2f:2e:a8:f6:
57:d5:ef:31:cf:c6:86:68:19:11:5e:fc:71:bc:41:
06:39:fe:e0:57:2b:7f:25:63:af:3d:ea:2a:7d:34:
c9:af:75:f9:ff:f9:ac:8e:59:08:42:05:89:38:84:
61:f1:b2:6f:0d:9a:b7:f3:99:36:2c:3c:f7:75:f9:
c0:cd:1e:e0:d4:28:b9:7d:a1:4e:34:fd:8f:de:35:
aa:e4:f4:89:f7:e7:ed:b9:ae:cd:99:7a:e5:1d:ca:
c8:20:d8:5b:49:31:e1:bd:10:f4:c2:c9:c8:3c:a3:
a8:e1:6d:72:27:ea:1d:7b:55:2a:9f:13:57:43:66:
a5:13:18:12:56:8c:88:da:e1:40:fa:f3:72:df:21:
52:f6:ac:78:fb:33:f3:ee:2a:65:64:82:0b:4e:00:
8c:a3:5c:8e:ac:3d:fb:fa:23:65:a8:81:93:26:2a:
09:49:6b:f2:b0:f4:18:b7:53:6b:99:db:69:ef:fa:
25:1b:1b:e9:ae:e1:0c:14:e3:62:ee:ad:7c:f4:8c:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:08:FB:D6:83:67:B0:98:E3:EE:38:DE:FF:63:35:53:CE:64:B6
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/rQ0I-9aDZ7CY4-443v9jNVPOZLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.36.0/22
Signature Algorithm: sha256WithRSAEncryption
42:93:3c:2c:ec:5b:a8:9e:ec:d1:38:01:f2:89:5d:b8:7b:b5:
14:8c:15:cd:30:e6:65:75:f0:42:af:7c:a3:cd:99:f9:66:92:
b9:12:cf:31:29:e3:25:65:be:72:5f:b4:0a:5b:47:85:a7:58:
01:68:73:25:a7:f8:19:62:0d:32:45:65:0e:4c:8f:29:5f:f5:
c3:e6:87:da:81:45:2f:4f:1e:fa:d7:0a:5e:42:02:9a:5b:4a:
83:12:9a:4e:ff:68:f9:7b:b1:c4:89:96:bc:8d:d3:76:8f:82:
94:c9:e4:c2:69:8e:a4:c1:73:55:b1:b4:f4:5e:7b:7c:d2:9e:
f2:fe:d1:ab:bc:07:4b:25:27:bc:d3:33:fc:40:77:14:33:a8:
cc:ad:13:ee:28:0c:00:c7:67:c2:0a:a8:61:49:ab:d5:20:db:
df:0c:01:d2:32:4a:98:57:09:d6:c7:14:79:ff:13:3e:94:2b:
8c:65:0e:a3:19:06:db:fd:cc:1f:72:5c:27:18:5f:95:49:f2:
dd:d4:9f:20:be:88:75:bf:af:33:c8:80:ce:2a:65:2a:41:19:
e3:2b:55:6b:74:1e:a1:78:1b:fa:7f:c3:f3:2a:f4:c2:16:35:
f5:9e:4d:1c:88:9f:67:bc:cd:c3:ae:c7:d3:78:65:ff:64:6d:
ca:f7:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:03 2024 by rpki-client on console-ams.rpki-client.org