Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/rsDgN9pU9WTO_W-CWg5JRQwDMXY.roa
File: rsDgN9pU9WTO_W-CWg5JRQwDMXY.roa (raw, json)
Hash identifier: Mppr6YuaHFIiuGsEO7E3vHJIMXDpIkPs4j2T2vRx0S0=
Subject key identifier: AE:C0:E0:37:DA:54:F5:64:CE:FD:6F:82:5A:0E:49:45:0C:03:31:76
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 1A8CEF60
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/rsDgN9pU9WTO_W-CWg5JRQwDMXY.roa
Signing time: Sat 01 Jan 2022 11:03:43 +0000
ROA not before: Sat 01 Jan 2022 11:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 188.241.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445443936 (0x1a8cef60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 1 11:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aec0e037da54f564cefd6f825a0e49450c033176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:a2:d0:18:e6:b3:9f:7e:03:15:f5:dc:20:
47:76:f3:5b:ee:00:51:29:61:5f:6f:7f:91:fd:e5:
3b:95:03:b9:99:6c:14:78:08:0a:97:6a:36:79:fc:
ff:60:a9:ec:df:41:db:3e:64:c3:f4:a4:84:95:56:
7a:be:90:2c:e6:9c:53:89:77:a0:ee:09:fc:e9:f2:
25:da:2a:cf:cf:af:90:0e:dd:5c:80:28:2c:a5:12:
cf:04:6f:df:1d:47:93:51:05:7b:f4:dd:f6:8b:23:
b5:4b:b5:63:67:2d:b7:89:a4:b9:19:5f:38:9d:32:
5f:3d:77:28:69:fc:ae:3f:71:f5:60:26:b7:85:99:
e7:90:17:6b:cc:32:dc:92:a9:65:cf:77:30:46:03:
80:db:1c:ec:0f:9e:ae:8e:b4:6c:43:d8:04:23:08:
a2:bb:d1:a9:aa:72:6c:d0:5e:24:48:fb:05:8e:0d:
57:9c:08:73:25:29:3b:fe:bb:07:51:8b:d6:d1:08:
4f:3b:89:0b:f4:e6:b8:a6:03:63:3d:ee:ec:b7:66:
6b:a4:72:7d:c9:a5:50:45:45:46:28:37:3a:be:39:
e5:72:f2:bc:38:5a:f5:a5:b0:e0:d9:83:e8:90:a4:
a6:62:ac:dc:5e:36:81:98:4e:f5:06:02:cb:02:ea:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:E0:37:DA:54:F5:64:CE:FD:6F:82:5A:0E:49:45:0C:03:31:76
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/rsDgN9pU9WTO_W-CWg5JRQwDMXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:22:bb:c9:76:0a:86:c2:9d:87:5e:0e:a6:d2:b9:54:81:07:
c9:28:34:0f:c4:ad:00:06:91:14:e1:50:d9:b6:04:30:8e:3b:
16:6c:fd:5d:34:24:b2:12:51:db:e4:5a:32:30:e2:bb:53:16:
97:f8:d3:60:53:a6:03:a7:57:84:cc:6d:36:03:b9:a5:e6:9a:
03:b1:68:dc:11:3b:df:60:19:4c:e9:a4:6b:1c:1d:3a:b3:32:
70:d4:93:72:d5:6c:bb:0d:b8:bb:02:12:93:b9:36:00:2f:e2:
6c:ba:6e:fa:97:35:25:fe:26:23:04:f3:41:f8:0d:58:40:a0:
72:8f:8e:00:1e:87:07:d4:8e:6b:11:74:2a:4d:d4:36:3b:b0:
6f:8a:ca:4f:66:2b:b4:66:1e:fb:9b:ef:97:d4:57:e0:b6:5b:
4a:d3:93:59:3a:8a:40:4f:7d:40:5b:56:6b:ed:ef:9c:76:95:
e2:98:a2:7b:78:27:52:ad:cc:84:9e:77:ed:28:ca:01:8d:6e:
bc:bc:d7:8e:4f:30:29:35:a8:69:e6:e5:95:62:55:c1:c1:a1:
a7:b8:1f:9a:85:70:44:13:a5:fa:e5:45:21:4e:1a:47:88:41:
34:d2:09:3f:2f:78:35:a5:9a:59:36:24:69:61:48:47:54:4a:
df:f6:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org