Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oRSq7q1p5_hf3_9jpiq0b1pX1Yk.roa
File: oRSq7q1p5_hf3_9jpiq0b1pX1Yk.roa (raw, json)
Hash identifier: uHGqbdJyXls+CE5znse1RLyeartq/El5aDBtaiYZ1dY=
Subject key identifier: A1:14:AA:EE:AD:69:E7:F8:5F:DF:FF:63:A6:2A:B4:6F:5A:57:D5:89
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 434D39DD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oRSq7q1p5_hf3_9jpiq0b1pX1Yk.roa
Signing time: Mon 14 Mar 2022 12:36:24 +0000
ROA not before: Mon 14 Mar 2022 12:36:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199470
IP address blocks: 194.103.162.0/24 maxlen: 24
194.103.176.0/24 maxlen: 24
194.103.184.0/23 maxlen: 24
194.103.182.0/24 maxlen: 24
194.103.180.0/24 maxlen: 24
194.103.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129134557 (0x434d39dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 14 12:36:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a114aaeead69e7f85fdfff63a62ab46f5a57d589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:45:e4:9d:b1:e9:66:36:69:53:b8:0b:a8:
62:3d:92:b0:54:1c:1c:0c:af:79:bc:d6:3f:09:ed:
16:ef:44:ea:7e:26:24:2d:e4:05:be:d8:49:13:b3:
b7:34:57:c5:c2:2c:b9:7b:02:f7:b0:a9:6a:16:92:
c1:19:f4:92:6d:10:74:6f:c7:69:a3:bf:af:8a:1f:
7d:da:d9:47:72:cf:96:24:c0:5c:3b:bb:b7:b8:55:
40:d6:37:fe:e5:ac:4e:34:83:86:36:23:c9:b8:f9:
69:4c:13:7d:77:5f:13:5c:03:1d:f6:23:4f:6b:f9:
4f:63:be:8f:e6:1a:29:d1:ce:d2:67:d3:9a:01:9d:
63:c7:74:e1:1d:b6:69:f9:c6:7b:e1:67:f0:72:85:
30:a1:9c:d9:4e:09:ed:10:96:52:e0:b3:67:9e:1d:
11:e5:32:37:48:be:d3:e9:4d:e2:16:2d:2e:d0:59:
89:38:be:fb:75:83:a6:dd:53:dc:14:6c:34:ce:06:
fa:1c:bd:c4:83:f7:f2:e1:46:54:fd:b2:0d:91:9e:
4d:ff:6c:f9:11:07:5e:57:7b:ae:10:88:c9:bb:ad:
7c:c0:10:e9:11:be:5f:03:c2:0f:22:9f:b0:29:53:
18:8c:35:9d:fe:d0:23:2e:8c:4e:10:cd:ac:2a:a7:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:AA:EE:AD:69:E7:F8:5F:DF:FF:63:A6:2A:B4:6F:5A:57:D5:89
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oRSq7q1p5_hf3_9jpiq0b1pX1Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.162.0/24
194.103.176.0/24
194.103.180.0/24
194.103.182.0-194.103.185.255
Signature Algorithm: sha256WithRSAEncryption
8e:65:c9:66:ec:53:c8:a5:01:d3:06:9a:27:67:a8:b3:dd:ef:
d9:13:a6:a0:5f:66:7a:1b:53:d2:1b:8e:28:38:ca:1f:79:c1:
ec:f0:2a:fc:c2:44:6c:4b:59:fb:5b:89:34:01:7b:f9:ab:4e:
81:d9:aa:fd:23:20:d9:29:40:2f:dd:ba:2b:f1:0e:ff:0c:2d:
ef:12:7b:61:a3:af:73:40:91:0d:dd:20:59:a6:b3:d1:6f:0e:
7d:52:ea:98:b9:d9:80:88:6a:41:79:53:38:4b:ba:9d:6f:3a:
db:2a:e8:c5:03:36:ce:16:e0:4b:2c:e4:ec:de:28:6e:e7:e0:
b1:80:a1:2e:51:05:45:a1:56:63:14:a8:00:4f:66:d9:30:b8:
65:52:58:33:b3:ca:9e:17:81:9c:5d:84:b1:44:46:a7:87:1f:
ff:4e:8a:f7:68:d0:b7:8c:b5:34:91:a0:aa:7d:6a:d0:a4:2c:
27:fb:8f:db:c2:23:70:34:7e:93:e7:99:38:04:7e:71:24:fc:
4c:15:4d:97:55:b0:84:6f:79:24:bc:af:52:80:6a:6f:df:f5:
c7:9c:6b:47:dd:8c:2f:93:9f:79:54:7e:1d:17:e1:13:5a:89:
97:4a:a9:72:40:1e:2e:e7:61:e3:6b:13:8b:fe:43:24:ad:65:
39:19:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org