Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/l0qn80_KZmXy4bN_SBwTjf3mulA.roa
File: l0qn80_KZmXy4bN_SBwTjf3mulA.roa (raw, json)
Hash identifier: TxWxnfza8dQYRSKZk3oozg6g6Lgc5dJxyArND5+OF6w=
Subject key identifier: 97:4A:A7:F3:4F:CA:66:65:F2:E1:B3:7F:48:1C:13:8D:FD:E6:BA:50
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 6BEC23
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/l0qn80_KZmXy4bN_SBwTjf3mulA.roa
Signing time: Wed 23 Mar 2022 16:05:45 +0000
ROA not before: Wed 23 Mar 2022 16:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196705
IP address blocks: 188.191.28.0/24 maxlen: 24
188.191.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7072803 (0x6bec23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 23 16:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=974aa7f34fca6665f2e1b37f481c138dfde6ba50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:20:c6:04:5f:7a:4c:c5:0f:5d:b3:af:60:
d8:4c:fd:e0:bd:08:4d:8b:dd:41:28:38:af:4f:78:
6f:74:33:9a:27:ab:15:0a:c3:26:ce:3c:ec:0f:6c:
1d:0e:fa:6d:6a:07:67:7b:5b:fc:2b:14:85:b6:7a:
49:45:8a:3e:b2:9f:24:d6:32:1a:8f:b7:00:ef:90:
f5:3e:6a:37:66:53:a3:4f:13:81:84:c3:82:96:5b:
cb:f0:0b:7e:e3:9c:c8:15:98:ab:56:d1:38:63:4f:
c2:e9:60:86:f5:4e:90:ae:32:66:1d:7b:e5:0e:5b:
48:3f:85:96:55:43:38:90:14:b9:60:38:b4:35:2d:
a7:d0:8e:54:ff:21:0f:25:6b:b7:9d:e6:71:e8:4b:
7b:42:e4:3e:83:8d:69:38:a5:18:12:5b:a4:33:0c:
6e:c3:5f:5e:cf:b4:c7:f8:27:d3:59:ae:19:88:ef:
47:02:33:71:58:60:a3:c5:81:dd:b2:ff:c7:66:67:
0a:ed:11:4e:f9:c3:e2:bc:9c:2c:f5:fd:18:d4:21:
45:f1:02:34:4a:7e:21:6e:40:13:1d:43:92:06:ec:
20:81:87:4f:ee:e1:c7:27:5c:55:37:46:c9:93:b4:
64:83:a8:9c:f4:9d:97:c1:0c:58:2e:62:01:40:e5:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:A7:F3:4F:CA:66:65:F2:E1:B3:7F:48:1C:13:8D:FD:E6:BA:50
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/l0qn80_KZmXy4bN_SBwTjf3mulA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.28.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c1:1b:9e:84:38:a7:98:c1:b8:ed:27:44:46:db:19:b2:94:
09:93:ed:5d:2a:35:f6:87:8c:09:c2:98:14:4a:86:a8:dc:4b:
13:3e:4f:a3:32:5b:45:74:b7:60:d0:aa:21:05:69:91:99:b5:
78:f6:94:8b:14:bd:83:54:93:a6:67:9e:3f:e5:1d:e3:74:12:
1f:22:09:e8:61:f5:0e:c4:e8:89:57:92:7b:7e:60:03:e1:ee:
42:1d:f3:48:d1:78:88:a5:06:32:66:2b:93:a0:27:19:5b:1e:
21:e4:39:6d:65:76:96:97:51:29:ac:35:f0:0e:ad:4e:57:b1:
97:78:1d:b0:26:ad:8b:a1:be:1d:b3:ce:c5:1f:1c:79:f1:49:
18:b1:e8:62:21:f4:4f:1c:5b:12:ef:83:1f:13:58:7f:c5:79:
70:88:c1:b5:bc:90:ef:af:13:ce:95:0c:1a:35:d2:d6:ef:fa:
3b:18:19:3d:27:fe:18:56:f8:87:1f:3f:79:52:e4:80:1f:67:
de:a9:12:36:a0:d5:a3:32:57:6f:e5:51:ca:97:08:ec:0a:26:
62:af:e7:dd:f8:c5:86:04:09:23:3d:55:61:0a:37:f9:d9:02:
c1:0b:c2:15:89:71:e2:f2:09:62:a8:fa:81:ad:93:c0:32:99:
24:73:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:53 2024 by rpki-client on console-ams.rpki-client.org