Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/_kgaikWMJtsquXS7zYRrJx9VDFg.roa
File: _kgaikWMJtsquXS7zYRrJx9VDFg.roa (raw, json)
Hash identifier: h2k72wy7C7pY89GPH3sSRamWnh5JydVSqVGsvjZXVQo=
Subject key identifier: FE:48:1A:8A:45:8C:26:DB:2A:B9:74:BB:CD:84:6B:27:1F:55:0C:58
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01852AA309F75CE1C137AC6C7C3406D6E938
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/_kgaikWMJtsquXS7zYRrJx9VDFg.roa
Signing time: Mon 19 Dec 2022 13:46:46 +0000
ROA not before: Mon 19 Dec 2022 13:46:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209748
IP address blocks: 195.123.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:a3:09:f7:5c:e1:c1:37:ac:6c:7c:34:06:d6:e9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Dec 19 13:46:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe481a8a458c26db2ab974bbcd846b271f550c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:15:d0:8a:d0:23:99:b9:e5:37:5e:d9:41:
4f:02:db:ea:b6:d9:40:51:24:0f:2b:ca:dc:8a:66:
24:45:f0:1a:9e:7f:5c:fc:7a:0e:76:5a:11:7f:73:
6d:e6:71:4e:bd:a8:b7:a1:79:34:cc:0c:78:dd:5c:
b5:6d:09:30:ee:5e:c5:6b:75:35:7a:5d:c2:50:21:
d4:70:e2:2d:ec:fd:ee:4a:b2:76:27:5a:5f:03:be:
07:a2:b4:3a:1c:81:00:f4:69:b1:bd:b0:ad:69:76:
9b:16:e0:97:65:0a:f5:0b:9a:aa:8b:ef:f3:bc:88:
16:86:14:8d:ed:03:f3:2c:b9:b7:25:32:96:8d:d2:
f7:58:96:5e:a1:62:e0:5d:43:e1:ec:d0:ee:5e:b6:
59:15:4c:0b:4d:c3:4c:07:7e:4a:60:60:26:be:32:
2c:da:f8:9f:5a:94:dc:4b:ac:38:71:7a:c2:36:9b:
1f:f0:50:3b:37:90:5f:a5:da:93:b0:49:9b:23:37:
99:a9:74:b3:ce:a2:ac:c9:5e:f0:09:74:55:e5:ac:
c3:75:b3:c9:cc:1c:cb:19:da:91:65:a3:a0:0d:75:
c0:eb:58:6a:5c:41:d1:29:53:70:3f:d5:a3:cf:f1:
c5:26:52:2c:ad:bb:d6:5f:99:20:9b:56:97:f0:91:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:48:1A:8A:45:8C:26:DB:2A:B9:74:BB:CD:84:6B:27:1F:55:0C:58
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/_kgaikWMJtsquXS7zYRrJx9VDFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9a:02:d1:94:20:da:b4:7d:b1:25:c3:51:a5:f8:16:be:8b:
93:58:87:0c:9b:55:db:3e:19:5e:ef:82:c3:09:0b:83:6a:7f:
fc:3d:e1:07:f0:79:5f:96:74:5a:24:e7:95:df:dc:b0:76:28:
c4:00:8a:c4:fc:ab:d0:0d:aa:42:f3:82:31:e8:61:0a:1e:96:
22:03:2c:46:49:42:38:a6:48:5a:fb:83:d3:fa:c6:0b:87:4e:
10:11:6d:bf:e7:93:c5:00:33:57:de:00:f3:bc:da:23:25:c2:
56:d0:6c:00:fa:41:f3:50:26:7d:63:1a:74:0e:35:c2:b7:e9:
1a:54:89:70:8b:2a:71:aa:a7:94:33:a0:57:eb:27:c8:82:58:
17:9a:7e:b6:c9:62:6d:58:57:8f:53:28:9e:1a:88:d3:9e:be:
32:68:de:28:17:30:ce:6c:ee:b5:4d:89:9d:83:c6:30:37:52:
0f:8e:50:62:e8:03:5a:a1:58:92:87:a1:55:42:24:ab:cf:f3:
2f:cc:7e:04:4a:e5:c5:e9:1a:59:4e:6f:2f:52:68:df:26:05:
af:90:3d:92:16:8e:4d:d7:4b:c5:11:8d:2a:b6:56:08:d3:69:
96:ec:7a:34:27:85:46:49:a8:2c:9c:48:be:ea:1d:91:5b:65:
5a:4a:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:21 2024 by rpki-client on console-fra.rpki-client.org