Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ajxqWBBphBE_AaULqXmWZL_irp8.roa
File: ajxqWBBphBE_AaULqXmWZL_irp8.roa (raw, json)
Hash identifier: LfaX+/ow00l33OFwUOo002q1UNh5KQlRBuiR48lFbp0=
Subject key identifier: 6A:3C:6A:58:10:69:84:11:3F:01:A5:0B:A9:79:96:64:BF:E2:AE:9F
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 37E656
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ajxqWBBphBE_AaULqXmWZL_irp8.roa
Signing time: Sat 01 Jan 2022 00:52:34 +0000
ROA not before: Sat 01 Jan 2022 00:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196651
IP address blocks: 195.246.244.0/24 maxlen: 24
195.246.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3663446 (0x37e656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Jan 1 00:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a3c6a58106984113f01a50ba9799664bfe2ae9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:25:7a:fc:a0:9b:8f:86:59:a3:8c:07:fc:
b5:c1:40:aa:80:d4:7d:25:63:89:74:c7:62:52:74:
7b:bc:a4:ed:e1:36:27:c1:42:95:84:73:1c:4d:c6:
63:a9:23:b5:33:65:f4:6e:91:55:43:7b:ae:97:5c:
89:20:0d:ad:3e:63:cf:62:30:83:b4:c4:08:4a:fa:
66:f8:c8:37:20:ca:17:e0:67:cb:2d:1d:91:bf:b4:
c0:a4:b0:46:70:3d:c2:9e:70:84:3b:96:e8:61:c0:
75:c9:d3:42:1d:d3:fd:48:2b:4f:9e:5d:71:23:60:
4b:67:e9:81:63:50:7e:fa:9e:73:b2:66:62:0b:6c:
88:d6:47:67:2b:a1:eb:cd:56:24:61:34:67:eb:23:
5b:12:2d:11:c6:0d:75:8c:af:07:a7:24:59:be:36:
64:a4:9f:59:3b:74:92:a9:99:e2:ec:89:6d:55:1b:
1e:38:8d:1e:32:41:1b:3f:f2:2d:68:66:51:8b:68:
49:b6:49:27:44:f4:54:01:3d:36:4a:86:06:4a:48:
91:f5:fb:d2:02:96:b5:61:03:21:00:cd:ec:37:34:
70:2d:0c:f7:d4:7c:19:a0:ed:15:5d:03:22:01:34:
92:e0:ab:9a:a8:09:ab:32:6c:81:7d:b3:72:e1:7f:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:6A:58:10:69:84:11:3F:01:A5:0B:A9:79:96:64:BF:E2:AE:9F
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ajxqWBBphBE_AaULqXmWZL_irp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.244.0/23
Signature Algorithm: sha256WithRSAEncryption
94:57:3c:f2:eb:bc:93:37:46:d6:b5:16:75:ba:0b:7d:08:74:
f1:63:d6:be:6d:bf:2d:56:cd:36:de:7f:b9:ec:4f:3c:ec:7f:
5f:3b:a7:bc:f5:76:b9:d1:09:13:71:75:5b:94:ac:3c:cb:2a:
67:1a:e4:c8:84:d1:d8:63:f6:8b:bd:f2:c9:8f:65:34:5e:e6:
0f:b1:49:80:73:2b:bb:25:d7:56:f4:16:77:98:42:d2:98:08:
09:81:59:ed:f1:5e:31:9f:f8:f6:a6:25:e4:b1:7a:74:78:92:
0e:72:13:03:dd:fd:2c:72:58:03:7b:58:bb:48:31:36:9c:6a:
25:09:c6:cc:1e:79:bd:93:8a:f9:75:77:1e:5c:af:06:a6:38:
a0:92:63:49:da:4e:40:e5:0a:26:e8:0d:7e:ef:54:a9:ce:5b:
2b:8f:24:47:f4:b2:a8:99:f1:9a:6f:a7:d7:b2:1f:d1:b7:39:
fd:55:25:09:13:6c:51:57:b0:e0:3a:0b:ed:88:51:ff:4b:1d:
68:88:80:e8:67:54:ac:9d:0a:6d:cb:3d:54:a3:26:36:f2:a2:
2d:03:e7:cf:e3:c4:d2:ae:4c:5f:e3:f5:93:db:75:68:0c:2f:
6a:1e:68:16:03:08:42:29:2e:44:16:27:15:79:1e:21:1b:cd:
b6:6c:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:27 2024 by rpki-client on console-ams.rpki-client.org