Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/8Dt6ktUkWA6-wXf2y9dJoUmzRaY.roa
File: 8Dt6ktUkWA6-wXf2y9dJoUmzRaY.roa (raw, json)
Hash identifier: M79ZPQyYYcgRRf/TG4dxtMGFAP8NHrgROugDyNTUWWs=
Subject key identifier: F0:3B:7A:92:D5:24:58:0E:BE:C1:77:F6:CB:D7:49:A1:49:B3:45:A6
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 0183D5C27DEA2D327B9859F71FBD49D714EF
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/8Dt6ktUkWA6-wXf2y9dJoUmzRaY.roa
Signing time: Fri 14 Oct 2022 09:10:36 +0000
ROA not before: Fri 14 Oct 2022 09:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21137
IP address blocks: 194.4.141.0/24 maxlen: 24
194.4.142.0/24 maxlen: 24
194.4.143.0/24 maxlen: 24
194.4.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:c2:7d:ea:2d:32:7b:98:59:f7:1f:bd:49:d7:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Oct 14 09:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f03b7a92d524580ebec177f6cbd749a149b345a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:2c:b0:26:19:ae:3f:e6:68:aa:6c:e4:d6:
e7:13:0d:a3:c4:5e:7a:77:6a:87:12:62:c5:7d:12:
59:34:3f:74:a2:06:d7:de:e1:e3:ef:a6:7c:d7:41:
a1:c3:b0:6b:1a:ba:01:95:b9:e6:ee:08:8a:21:a9:
d8:da:ec:ab:ac:7b:d0:94:c6:7c:15:34:3e:df:7e:
ec:03:de:c7:38:f8:4f:75:94:16:9a:86:b4:57:7f:
41:b7:7e:bd:71:a1:f0:2d:cf:40:95:a0:88:77:a4:
a1:6e:08:5c:24:f3:45:2d:c5:02:99:e3:a6:24:3e:
0f:db:e3:a5:c2:77:3a:dd:1d:8b:54:75:49:7a:04:
4e:19:86:c3:3a:b2:ff:74:4e:23:c5:bd:1b:9c:d5:
1b:7b:40:7d:d6:00:7e:21:02:78:c3:ad:f7:fd:6b:
6b:82:74:a1:b4:93:11:b3:1e:dd:93:9d:d9:be:ac:
16:d7:43:4f:e4:9d:61:2d:02:08:b1:e3:67:aa:7f:
43:5a:f0:5a:39:bf:f9:ab:f5:1d:00:8c:78:2b:88:
b7:37:28:e2:93:1f:53:b2:43:4b:d9:7c:09:79:cb:
ee:ef:2e:cd:59:87:aa:dd:a9:92:9c:0f:21:71:1e:
43:08:d1:60:c8:f2:f9:07:a4:e8:24:34:6c:b2:11:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:7A:92:D5:24:58:0E:BE:C1:77:F6:CB:D7:49:A1:49:B3:45:A6
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/8Dt6ktUkWA6-wXf2y9dJoUmzRaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.140.0/22
Signature Algorithm: sha256WithRSAEncryption
47:d8:15:8d:f8:bb:4d:59:de:b7:28:3d:0f:63:36:9b:bb:21:
cd:94:f4:ae:3a:15:6e:26:5c:5a:a3:fa:dd:ff:b3:48:78:6f:
76:e9:fa:c1:51:ce:f6:04:37:b7:9c:93:62:6f:f5:96:d8:42:
0a:7c:38:0c:ef:94:d2:4b:70:aa:53:0b:c0:0b:a1:d7:87:21:
04:a1:ad:6e:81:e1:3f:6f:80:b6:f0:5d:4f:81:95:e7:97:32:
71:e1:2d:5e:56:49:a4:3e:33:6b:cf:04:ff:8a:87:d5:d3:ca:
14:21:16:4f:d7:26:d7:d5:7a:57:cc:c1:a1:6e:81:31:86:d3:
ec:1b:61:ce:a4:28:fd:ea:cd:dc:db:0c:0d:85:26:2b:1c:6d:
ea:62:0d:22:3c:3a:58:ea:54:94:37:12:3f:b1:48:f3:e1:31:
3f:4a:a6:f9:2a:76:4d:5f:49:00:e3:3b:4f:73:53:10:c3:d2:
f7:44:99:80:92:43:4d:2f:5b:49:03:03:6d:5b:42:be:de:0a:
11:47:8d:34:bd:3a:c8:c6:dc:f9:a7:68:2f:3c:f7:c3:75:33:
fd:1c:91:24:7e:d6:d2:93:4c:ab:e7:45:b2:ac:af:62:a7:ec:
ac:c0:96:96:eb:2a:c8:2e:eb:59:ec:e5:09:56:95:e2:1f:54:
c5:6b:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:49 2024 by rpki-client on console-fra.rpki-client.org