Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/3t8eJHy240Qj-cxXrX0Mh18XDY4.roa
File: 3t8eJHy240Qj-cxXrX0Mh18XDY4.roa (raw, json)
Hash identifier: llkM51qE3tYjmbN052IwOqQdn4+4Ba9uVM5aotMq4y4=
Subject key identifier: DE:DF:1E:24:7C:B6:E3:44:23:F9:CC:57:AD:7D:0C:87:5F:17:0D:8E
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 08E1E68C
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/3t8eJHy240Qj-cxXrX0Mh18XDY4.roa
Signing time: Sat 01 Jan 2022 11:05:23 +0000
ROA not before: Sat 01 Jan 2022 11:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53667
IP address blocks: 194.50.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149022348 (0x8e1e68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jan 1 11:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dedf1e247cb6e34423f9cc57ad7d0c875f170d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:06:8b:90:76:51:7e:95:c6:14:d3:cd:8f:
bc:a1:40:6d:db:f5:df:60:74:fb:f4:ee:6a:bc:6a:
23:f3:74:d1:ff:cb:88:ad:8c:50:1f:be:cb:f3:a0:
a6:8d:7f:76:69:99:2e:21:ef:a5:8b:92:2c:82:f3:
a2:65:73:d5:c5:c8:81:3c:fc:b3:af:bb:f2:0a:65:
b9:8c:1b:15:43:18:27:6e:07:0c:48:dd:20:83:24:
9b:c5:9f:49:de:d1:e7:bf:da:d6:d9:70:d2:0f:3f:
29:26:56:3e:36:ab:cc:ea:8e:2d:ae:48:33:8e:eb:
45:28:d4:d0:4a:f1:e3:c4:03:95:ca:89:ec:ce:80:
6c:34:82:94:e4:a3:b1:f4:1b:9f:e6:03:d5:9b:9a:
b1:bb:af:1f:a7:e0:0b:ba:d6:55:4a:d8:7a:f9:eb:
33:5a:be:2e:97:b4:af:22:00:58:18:50:cc:fe:29:
c8:c6:c4:a5:39:62:8d:11:92:d5:82:26:f3:78:af:
3a:89:d6:8d:02:aa:85:91:40:26:d9:37:93:61:22:
62:7a:c5:c3:d5:b4:03:ca:a2:cc:d1:be:64:07:2e:
ae:23:7d:e2:12:20:2c:25:c9:e9:14:9e:50:e8:53:
0b:9d:5a:0c:93:23:79:31:96:ed:5e:3e:1a:1f:6e:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:1E:24:7C:B6:E3:44:23:F9:CC:57:AD:7D:0C:87:5F:17:0D:8E
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/3t8eJHy240Qj-cxXrX0Mh18XDY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.197.0/24
Signature Algorithm: sha256WithRSAEncryption
09:85:ff:64:40:93:13:8d:6b:89:70:21:85:cc:f7:f3:6f:44:
7a:25:9a:2f:ba:2f:06:dd:f2:73:d7:7f:31:42:df:17:55:c6:
43:83:d0:6e:1c:96:38:b3:bf:16:c4:6b:d2:3f:6c:d3:92:50:
be:dd:2f:1e:bf:0f:1b:1e:4f:18:36:38:70:a4:d9:22:aa:00:
6b:33:70:3a:4e:5f:1f:9a:61:cf:05:2e:42:d5:af:3a:e2:dc:
51:c0:77:68:c2:9c:3a:97:80:0f:49:18:11:ad:45:db:c6:86:
82:06:cd:76:8e:52:1b:33:79:14:12:53:73:77:41:a1:10:54:
e4:13:cc:f7:50:24:d2:d7:5d:06:a0:5f:cd:15:c0:42:3a:0c:
34:dc:4b:b9:be:41:f4:5d:14:06:d3:f2:6f:87:ff:b1:58:77:
fb:75:41:36:59:cd:e2:3d:8a:d8:e0:0f:6b:5d:03:f0:86:f3:
66:c3:c5:5a:cc:3d:69:d1:80:17:b4:9d:23:e7:99:a8:9e:bb:
b6:30:b9:da:2d:57:d8:d6:be:72:5a:8b:a5:02:eb:cf:58:df:
ed:95:85:ef:7b:45:3b:49:88:71:c3:d3:05:01:1c:f0:9d:95:
22:64:4b:6f:7c:cc:b3:98:cb:2e:b7:7d:9b:c3:e7:14:e5:25:
c1:76:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:05 2023 by rpki-client on console-ams.rpki-client.org