Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/SPs1nv0Z7WDK0XQbmk6PDUqd854.roa
File: SPs1nv0Z7WDK0XQbmk6PDUqd854.roa (raw, json)
Hash identifier: e57Vtbd27xui+sAPAa8Zhf4dHegyi4LCX7rMEop1RLk=
Subject key identifier: 48:FB:35:9E:FD:19:ED:60:CA:D1:74:1B:9A:4E:8F:0D:4A:9D:F3:9E
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 0359D7B7
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/SPs1nv0Z7WDK0XQbmk6PDUqd854.roa
Signing time: Sat 01 Jan 2022 10:58:21 +0000
ROA not before: Sat 01 Jan 2022 10:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 194.127.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56219575 (0x359d7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Jan 1 10:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48fb359efd19ed60cad1741b9a4e8f0d4a9df39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:ea:6f:5c:cc:f2:5d:ab:ee:1b:96:a9:3b:
3c:88:64:6d:51:75:f8:f1:ae:96:74:7b:e0:a5:08:
57:bb:d9:38:5a:26:ef:2a:dc:2e:3e:11:52:b8:7e:
17:85:7d:9c:66:7d:8e:4b:5e:42:67:54:c7:91:9f:
f1:35:55:84:16:3f:64:ef:79:06:5b:05:bb:07:0f:
a8:b2:37:c1:8b:dd:13:56:c7:84:66:c1:6b:e4:a5:
72:bc:12:da:7f:a7:f7:8c:b1:09:4c:e9:34:6c:09:
b5:83:b0:20:59:0e:14:b7:aa:ad:7f:2d:fc:96:a7:
08:bf:f2:ad:79:83:8b:d7:5c:76:f9:8e:75:ed:7a:
d5:8a:7a:7c:72:3c:db:f7:3d:36:9b:40:e8:3b:26:
61:af:30:70:ac:c8:3c:b3:10:f4:0f:81:77:c0:66:
af:a7:0c:14:56:cf:1b:5e:1d:f1:2f:bf:09:6e:be:
f8:2e:0b:e9:f9:ea:43:39:f0:67:24:3c:6b:9f:b2:
9f:fd:59:70:b7:04:5d:5d:a7:96:da:e1:c0:d3:78:
44:99:ae:4b:d7:f0:18:78:30:fd:5a:17:e0:47:ec:
ce:80:c9:72:e9:a4:ff:ef:1f:d9:75:55:29:03:4b:
b4:e3:cd:3d:05:2a:b7:3d:0a:e9:a0:1b:97:b9:97:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FB:35:9E:FD:19:ED:60:CA:D1:74:1B:9A:4E:8F:0D:4A:9D:F3:9E
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/SPs1nv0Z7WDK0XQbmk6PDUqd854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.228.0/24
Signature Algorithm: sha256WithRSAEncryption
62:95:9c:27:a4:c6:dc:6d:e5:a5:07:5c:b5:9e:5f:03:f7:94:
68:31:fb:bf:c0:19:bd:1f:a0:92:7e:72:71:4a:2a:35:2a:39:
1b:b5:8f:11:84:90:22:48:58:62:18:85:52:cf:b3:17:da:40:
ac:3c:8a:7b:2a:8b:f8:99:5d:9e:f8:c4:54:7c:14:bc:76:d5:
86:b4:60:3b:c7:11:51:1d:85:67:93:6a:4a:7f:bd:fc:95:bc:
47:fd:1d:75:f1:04:b6:89:64:7f:2e:6b:34:b0:32:df:15:a6:
69:d3:16:2d:ca:a4:3a:59:c9:cb:c1:a5:3b:b3:50:bd:0d:a0:
aa:cc:da:ef:66:c8:b7:a8:97:26:1e:39:f6:aa:e1:13:3a:51:
ea:60:85:c0:bf:9f:31:9f:af:34:0d:49:8c:bd:2e:b1:6b:3e:
e3:be:42:4a:79:d6:e8:bd:21:41:52:f5:c3:39:53:0e:59:52:
0c:ad:42:19:cb:3c:6c:f1:b6:bd:b5:bd:b3:3f:98:db:e8:a1:
03:4a:36:39:25:e7:1a:c9:9f:84:b2:5b:7e:1c:02:ff:fa:9c:
cb:0d:31:7f:39:da:59:ef:b2:c1:30:41:83:c1:48:bd:80:e1:
90:08:eb:8d:35:7a:73:a7:80:70:59:90:e9:5c:42:30:49:3d:
84:7e:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:15 2024 by rpki-client on console-fra.rpki-client.org