Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C5fFHufZiymWYZI5XCLooJjl8TA.roa
File: C5fFHufZiymWYZI5XCLooJjl8TA.roa (raw, json)
Hash identifier: 4A9ww5YL7Vg8mrMC4ZbBe4pDghqIv3T5OnjLT+CJp0Y=
Subject key identifier: 0B:97:C5:1E:E7:D9:8B:29:96:61:92:39:5C:22:E8:A0:98:E5:F1:30
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42814B35
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C5fFHufZiymWYZI5XCLooJjl8TA.roa
Signing time: Sat 01 Jan 2022 14:03:23 +0000
ROA not before: Sat 01 Jan 2022 14:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198568
IP address blocks: 194.132.6.0/24 maxlen: 24
194.132.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115769653 (0x42814b35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b97c51ee7d98b29966192395c22e8a098e5f130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:67:bd:9a:50:5f:c3:56:19:c2:1e:05:c4:
c4:81:ca:61:37:9a:a6:ba:ad:da:14:4b:d6:00:39:
5f:b8:d1:bc:d9:81:ad:18:f8:18:48:72:24:35:a0:
7f:8b:db:18:fd:26:df:a6:f7:fb:c1:98:5b:d0:2a:
03:94:c5:82:04:e8:f0:48:83:97:39:af:05:c9:bc:
78:5d:19:97:dc:ce:78:84:f2:1f:fd:ae:65:f5:6f:
47:58:c7:31:ce:91:ce:e7:8a:2d:f5:0a:30:37:f3:
82:de:6f:fb:6f:3f:4c:ad:d2:55:df:e1:7c:a2:16:
6a:b4:4f:e3:44:9f:b7:cf:de:17:17:11:39:39:3c:
f3:da:ba:c0:87:54:de:f5:6a:39:37:9a:e8:53:8a:
37:cd:3d:92:1d:70:1a:dd:c4:8f:73:30:2a:f1:71:
67:e2:d1:d9:94:04:8a:c3:04:02:51:d3:11:66:a2:
0e:42:e1:f0:78:ac:cb:ce:e9:cd:19:1e:9f:14:a6:
dd:15:f6:b5:d8:c3:c6:a6:d2:89:80:37:bf:6e:a0:
3f:c3:06:b8:69:a2:92:0b:5f:8c:7b:48:38:30:c4:
0d:cf:6c:f0:f7:4f:eb:6e:a1:52:ba:aa:24:eb:69:
f1:5d:31:3c:b5:cd:e0:17:ef:1e:0b:62:c1:d8:ef:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:97:C5:1E:E7:D9:8B:29:96:61:92:39:5C:22:E8:A0:98:E5:F1:30
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C5fFHufZiymWYZI5XCLooJjl8TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.5.0-194.132.6.255
Signature Algorithm: sha256WithRSAEncryption
27:60:e7:9c:5d:87:5d:62:0f:18:12:64:5e:0d:26:c7:a6:ce:
7e:d4:cb:f7:3b:0d:6b:74:e9:c3:94:e2:d0:30:c2:f3:a5:cf:
02:0d:69:73:84:e5:9b:92:4b:2d:c2:15:1b:70:7a:1d:04:82:
82:e1:24:aa:a5:13:91:44:c4:a8:43:64:16:68:42:1a:59:18:
d2:20:2d:6f:2c:eb:d4:1b:ec:ae:bb:0d:ca:36:12:42:42:c6:
64:c8:8e:03:7a:e2:19:95:07:d3:f7:60:57:55:58:32:96:99:
f5:ad:e9:96:1e:41:fa:c1:8f:92:ab:f6:12:ba:df:95:32:8e:
b4:10:31:55:43:3a:4d:6e:d4:60:ba:77:c8:45:f4:59:aa:29:
9d:45:65:62:28:b0:2f:9a:29:d9:10:1a:e6:9a:bd:9d:3d:04:
88:bb:98:14:28:f0:36:b6:a4:88:e3:c4:30:95:66:6f:b0:89:
c5:7d:bf:6a:67:51:70:a6:11:18:a8:60:06:29:1b:12:85:d2:
cb:de:0f:92:8d:3f:70:21:88:93:ed:a5:aa:fc:d9:b8:1a:25:
79:69:5a:9b:fd:42:97:8a:53:35:12:59:25:2e:c0:7d:76:d4:
b2:7e:15:d4:be:a8:38:51:ad:10:8d:51:00:cd:88:bf:bf:8e:
7a:72:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org