Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/b2EMeNJJQk0nK6CT46Md-7dAHWg.roa
File: b2EMeNJJQk0nK6CT46Md-7dAHWg.roa (raw, json)
Hash identifier: T0eLiUQ1ycC6MYVt7NDTw/AULhp0sLrCX1x/OVC124s=
Subject key identifier: 6F:61:0C:78:D2:49:42:4D:27:2B:A0:93:E3:A3:1D:FB:B7:40:1D:68
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 0968D4AD
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/b2EMeNJJQk0nK6CT46Md-7dAHWg.roa
Signing time: Tue 15 Mar 2022 09:23:15 +0000
ROA not before: Tue 15 Mar 2022 09:23:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 194.104.188.0/24 maxlen: 24
194.104.189.0/24 maxlen: 24
194.104.190.0/24 maxlen: 24
194.104.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157865133 (0x968d4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Mar 15 09:23:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f610c78d249424d272ba093e3a31dfbb7401d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:37:90:28:15:cf:ec:d7:48:cd:72:93:ae:
7a:ba:b4:98:b2:53:a5:76:40:44:55:64:36:49:c0:
5e:03:a3:b5:97:32:60:26:32:59:5f:c0:50:21:05:
5b:7a:d0:ff:8f:df:e2:8d:92:de:c3:33:3c:67:6c:
66:d9:b5:01:e2:0d:ec:cf:64:d7:bc:37:d1:21:d9:
65:bc:7e:c6:15:5d:3d:45:3b:5e:ae:60:fc:b7:0a:
cb:90:36:3f:e7:40:7d:5f:84:50:c9:fd:1c:94:53:
aa:d6:7b:91:37:87:4b:c6:67:d2:13:4c:36:a4:23:
1d:8c:4b:54:86:a9:16:52:9b:b3:f7:11:c6:86:f6:
16:5c:4d:ce:08:b2:3c:5c:dc:d3:e2:45:6a:36:d7:
07:21:1d:ad:c4:94:10:a7:e9:53:f8:4f:cd:ca:de:
ac:de:bf:d9:b4:19:68:15:e3:eb:d1:4b:67:7c:f8:
eb:51:1b:3e:f6:ed:91:da:7d:0c:70:8e:ab:30:29:
2d:c4:56:34:bc:81:09:58:ca:15:6c:66:de:97:18:
f5:4c:50:42:f2:c1:fb:b1:a3:0d:81:4e:ff:34:ea:
80:a1:4a:d9:61:22:75:64:93:92:00:5d:f0:5c:79:
af:61:0b:cc:b7:45:12:5b:6a:4a:88:e6:b1:5c:f2:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:0C:78:D2:49:42:4D:27:2B:A0:93:E3:A3:1D:FB:B7:40:1D:68
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/b2EMeNJJQk0nK6CT46Md-7dAHWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.188.0/22
Signature Algorithm: sha256WithRSAEncryption
58:57:84:9c:c4:16:e6:35:d6:e9:66:98:20:ae:aa:16:03:e1:
c8:a6:11:0a:86:f7:fd:9a:ea:5f:5a:24:6d:35:8a:d0:6c:a9:
8b:1e:75:fd:26:93:52:50:f3:f5:9c:ff:9a:41:e1:bb:6f:69:
f3:59:7c:c5:59:1e:8d:b8:f9:1c:fd:01:00:fe:90:4d:49:33:
9d:cb:6d:2d:2b:2e:34:46:50:47:4f:96:fc:65:22:cf:88:5e:
3a:57:d1:09:82:19:d8:e0:bc:36:d2:86:e9:01:1f:85:e2:3f:
16:c1:78:42:83:da:06:e2:8e:0f:af:b8:ad:ba:75:66:f8:9e:
db:bd:4e:9e:3e:9d:26:5a:c3:69:37:69:4b:d4:a1:3c:4a:09:
f2:a9:48:33:1a:f7:6b:e8:38:15:c8:72:43:c0:96:4c:4a:e2:
fe:d4:1d:f1:ef:ad:d5:c0:58:0f:8a:5b:3f:1f:79:e2:41:c0:
55:ba:ab:72:64:af:cd:f3:4b:3c:b3:34:07:70:f6:bc:2c:7e:
dd:a1:0b:ba:ce:3a:4f:e8:e7:5c:3b:27:28:96:e7:9a:03:4b:
d2:4c:62:e1:84:73:b2:33:43:8a:38:e1:aa:e0:d0:1b:a1:4c:
91:d8:6b:2f:11:45:a3:16:15:e8:f1:8a:ef:89:88:a8:a5:9b:
20:55:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-ams.rpki-client.org