Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/iryeBN5Gak8x_4bPNcTS6KKeSTU.roa
File: iryeBN5Gak8x_4bPNcTS6KKeSTU.roa (raw, json)
Hash identifier: Cd6JIJxDS60MDl5ELDfWnIvoNybiUisotEyXPQPrhq0=
Subject key identifier: 8A:BC:9E:04:DE:46:6A:4F:31:FF:86:CF:35:C4:D2:E8:A2:9E:49:35
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 0915FF2F
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/iryeBN5Gak8x_4bPNcTS6KKeSTU.roa
Signing time: Mon 07 Feb 2022 15:22:27 +0000
ROA not before: Mon 07 Feb 2022 15:22:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 194.104.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152436527 (0x915ff2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Feb 7 15:22:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8abc9e04de466a4f31ff86cf35c4d2e8a29e4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:b4:70:d5:e7:83:84:dd:9b:44:42:a0:ae:
99:d1:40:ed:fd:00:11:a5:04:bf:46:2a:33:00:1f:
4d:92:d2:d6:c6:5c:5b:e8:2a:5d:9e:31:19:ba:4b:
dc:07:f5:f3:cc:58:1d:25:b0:d9:e3:71:ad:b7:e5:
f2:6a:05:39:1f:cb:80:e8:be:1f:95:d6:9b:df:40:
16:75:4f:57:e7:d2:e9:db:37:ae:af:7b:c2:1e:2a:
3f:26:ad:1b:f5:58:86:43:2a:64:e6:06:9f:af:44:
e0:88:ba:b3:86:e8:9c:3b:0a:ea:ed:41:d0:64:9e:
9d:d6:12:39:0a:07:5a:92:80:38:fa:75:39:5f:18:
87:71:c7:3f:c8:02:93:65:e1:5d:25:c3:8b:aa:33:
59:ba:d6:8b:e2:6e:e5:c1:6c:89:31:d0:cc:94:26:
15:46:9b:ed:ba:81:88:22:e1:57:0f:fc:7b:b1:49:
e0:93:d7:34:d0:c0:a8:bb:ad:0d:b5:c8:c6:83:72:
89:a3:58:6f:f5:5c:74:2e:8e:e7:5e:da:2a:3b:1f:
34:c7:61:45:51:06:7d:79:cd:e8:19:1e:60:d3:da:
6b:ce:87:39:a5:91:09:a3:0c:50:4b:99:6f:48:71:
72:7f:18:66:1a:b9:f9:78:49:fb:b5:6e:fe:2d:b4:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BC:9E:04:DE:46:6A:4F:31:FF:86:CF:35:C4:D2:E8:A2:9E:49:35
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/iryeBN5Gak8x_4bPNcTS6KKeSTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.191.0/24
Signature Algorithm: sha256WithRSAEncryption
29:90:df:e7:db:45:40:2c:17:ef:3e:d8:dc:5d:3d:27:f4:d1:
cf:ca:b0:2d:2a:d9:3b:b9:9b:df:79:e6:a9:38:f7:5b:8a:c5:
ed:e6:04:ad:9a:ff:63:c6:fd:57:14:d3:cf:fc:2f:54:95:c1:
a8:e8:1e:f0:c4:13:e3:53:50:0a:f8:f8:a9:96:2a:a7:8f:d1:
d5:b1:99:30:e8:de:90:8f:d7:3d:ad:52:e6:90:0b:fe:ee:76:
ed:b2:3b:62:b6:ba:43:ec:98:30:4b:b5:54:c3:4f:9d:0f:c3:
ff:43:78:03:4c:19:b4:a6:c1:af:51:80:f7:df:d9:df:58:a8:
28:a1:4e:26:57:c0:07:d5:c1:35:1a:8e:e9:2b:88:76:ab:46:
3a:98:4b:10:5a:f6:8e:70:d5:f4:a6:57:5b:9f:0f:a1:d2:cb:
c3:96:32:db:0a:91:63:5d:ea:a2:41:f5:21:99:54:f9:e3:d1:
63:52:7c:d5:44:ec:25:57:83:d8:d4:19:b6:7d:9e:a2:37:39:
47:ae:02:ae:ca:27:d6:fc:13:31:ab:d2:2c:17:ab:66:bc:fd:
f4:14:e7:21:4a:a4:7c:66:ff:dc:8f:1c:3e:ef:68:82:7c:3e:
3b:08:20:31:29:08:79:ef:0d:50:b0:a4:3a:5b:a1:b2:4f:7e:
79:1b:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org