Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/rP9mIHZoPEnVg0Nj51KXlVS9QDI.roa
File: rP9mIHZoPEnVg0Nj51KXlVS9QDI.roa (raw, json)
Hash identifier: 1lzrT0p+5XkrCnqNu1EgItEhR4KfMN9DbhpyC4FQhV0=
Subject key identifier: AC:FF:66:20:76:68:3C:49:D5:83:43:63:E7:52:97:95:54:BD:40:32
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 06FD8640
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/rP9mIHZoPEnVg0Nj51KXlVS9QDI.roa
Signing time: Sat 01 Jan 2022 09:54:55 +0000
ROA not before: Sat 01 Jan 2022 09:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41728
IP address blocks: 194.37.250.0/23 maxlen: 24
194.39.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117278272 (0x6fd8640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jan 1 09:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acff662076683c49d5834363e752979554bd4032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:10:e7:a5:72:20:e2:a2:39:11:7a:d6:ed:
a7:03:17:77:35:34:44:78:ad:0b:11:03:14:97:e4:
29:c3:43:91:eb:af:6b:ae:4f:fa:24:bf:9e:44:18:
b4:43:3f:a1:24:9f:b8:ec:be:d9:93:f0:c2:04:79:
d1:c7:e8:28:28:e8:43:d4:c1:65:36:14:63:88:43:
9b:95:d0:fc:51:c4:b7:5a:57:fe:4c:e8:18:a3:11:
23:e2:2c:01:07:0c:3b:51:fd:0b:a1:1b:52:a2:ae:
95:f5:c5:c8:3d:01:94:8f:53:b5:f9:fa:5c:3d:3e:
10:30:22:33:67:c2:36:01:29:3c:7b:a1:14:cd:1b:
38:5a:78:2f:f2:1d:29:de:78:c1:16:9c:52:08:26:
f0:ff:19:be:6a:ed:b3:8a:99:26:3a:ae:b7:12:d6:
07:5b:6a:1f:33:29:79:27:52:fd:db:6b:39:af:15:
f0:7f:2d:fa:04:fc:8c:af:ac:1a:96:53:b2:75:64:
e3:52:9c:1f:ee:04:0b:12:6d:18:78:fb:97:97:4a:
9f:4f:22:38:9c:d4:38:b1:44:9d:0f:28:a0:35:12:
a9:0f:48:b9:7f:01:c3:f1:ec:0d:6a:38:ba:e8:96:
d5:a7:86:db:87:93:3a:5e:85:cd:03:80:cc:7b:d0:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FF:66:20:76:68:3C:49:D5:83:43:63:E7:52:97:95:54:BD:40:32
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/rP9mIHZoPEnVg0Nj51KXlVS9QDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.250.0/23
194.39.78.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:bd:5d:b2:e1:2d:53:b9:e0:ee:43:4d:d0:b5:6d:ed:6a:cf:
72:46:46:50:ea:88:30:4c:0d:18:06:11:34:0e:f4:50:82:cc:
62:ec:e9:ff:47:6d:57:d5:da:33:04:8d:7e:68:77:3a:07:0d:
0f:8f:b1:3d:e6:87:9d:45:9e:30:6f:d2:2d:7f:4c:02:4f:39:
27:fd:01:33:df:08:4c:53:12:2c:77:ed:f1:81:09:f0:e2:39:
43:b0:18:76:aa:c6:33:56:f1:3a:ae:eb:40:8d:03:b9:34:b5:
e4:bc:37:1d:db:cf:1d:24:83:f4:51:b5:49:d8:08:3c:b2:24:
6c:10:03:43:e0:f7:40:e9:aa:5f:51:4e:76:43:6f:59:66:92:
93:94:d1:4d:a3:d7:f3:14:1a:31:b8:1f:b4:7c:d5:46:72:e2:
f8:0e:2c:88:21:5b:64:7a:e6:c2:f3:fc:14:16:ba:53:1d:c7:
d3:61:5f:55:9c:c3:46:9c:89:96:06:40:35:63:44:dc:0e:77:
0c:ee:1a:cb:cf:9a:2f:55:74:b4:95:b7:d3:1c:93:bf:c5:c6:
25:95:f7:79:0e:14:df:0b:7f:24:a7:2b:b2:ec:39:17:67:a2:
e2:d1:25:bd:60:e9:49:9d:45:ff:8b:17:5c:76:d8:d2:b6:d3:
4e:89:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:23 2024 by rpki-client on console-fra.rpki-client.org