Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/X0VIv_x7h82W8onB_CGnBFIJvz8.roa
File: X0VIv_x7h82W8onB_CGnBFIJvz8.roa (raw, json)
Hash identifier: xByDod5Nwi3i5s0d0lcKfZn2daQ1S/52EPoDa5q2k5I=
Subject key identifier: 5F:45:48:BF:FC:7B:87:CD:96:F2:89:C1:FC:21:A7:04:52:09:BF:3F
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36B6531E
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/X0VIv_x7h82W8onB_CGnBFIJvz8.roa
Signing time: Mon 23 May 2022 07:55:30 +0000
ROA not before: Mon 23 May 2022 07:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205191
IP address blocks: 194.140.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917918494 (0x36b6531e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 07:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f4548bffc7b87cd96f289c1fc21a7045209bf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:fd:a1:29:fb:cf:cd:d5:f1:f5:32:2d:ca:
d7:52:19:73:73:e8:9e:c7:15:59:58:a2:96:18:18:
e6:f1:c6:88:4d:48:99:0d:b0:f4:2b:39:b2:41:87:
31:35:6f:90:c5:7f:41:6a:9f:39:d3:dd:db:7a:08:
5c:e2:32:e5:6d:20:55:66:5e:7e:cc:61:97:b2:64:
fc:1d:3b:67:59:1e:3d:9e:3d:1c:b9:48:9e:a6:71:
bf:2d:46:20:84:71:72:43:c8:fd:3c:45:cc:a9:55:
ae:69:a2:ce:f8:f2:90:cc:10:55:83:86:e5:95:f5:
bf:c8:3d:6e:1a:4e:ae:62:17:c9:9c:d9:e0:f5:7e:
d6:e2:6c:3f:04:dd:6a:69:8d:21:e2:f9:a9:a9:e9:
12:0c:6b:4d:90:e7:4f:90:f6:51:4e:eb:f0:a3:b3:
8b:ac:eb:64:95:2b:c5:12:17:7e:06:8c:f4:54:7c:
54:b6:ff:67:de:35:88:83:09:f3:fd:24:ef:10:e2:
51:82:28:f3:fc:47:8b:10:dd:f4:35:df:df:24:f1:
eb:9d:ce:99:d6:80:23:e5:b8:84:c4:ef:67:76:ba:
64:81:4c:c7:82:a4:8a:08:c0:e5:fa:77:f9:9d:6a:
2b:ae:8c:f1:75:fc:f1:65:81:8b:2e:00:1c:cd:6c:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:48:BF:FC:7B:87:CD:96:F2:89:C1:FC:21:A7:04:52:09:BF:3F
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/X0VIv_x7h82W8onB_CGnBFIJvz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:be:5f:06:91:a2:f5:f3:51:49:f4:0c:15:ec:49:87:9e:ce:
44:9f:62:f3:45:96:83:6c:07:06:b0:8e:0b:93:a8:89:9f:46:
18:ca:40:73:27:02:e9:82:d8:d6:7f:76:26:8e:0b:9f:26:56:
91:a5:b3:f7:82:81:8d:a6:ad:e0:4d:56:b5:aa:de:e1:92:d5:
5f:6c:2a:63:be:fe:e0:33:50:da:6a:d5:48:60:38:e7:9e:bc:
f8:8f:da:59:df:6a:b9:45:a2:35:12:31:4d:ff:6d:06:ea:56:
f0:42:82:a4:65:0b:ae:90:29:98:01:c2:85:9c:b1:f0:17:d9:
b2:53:35:e5:a1:4d:a9:47:89:34:ba:70:9d:ff:24:1a:4c:6a:
09:f7:4a:ad:b3:c0:7e:50:58:b4:57:d4:17:57:5e:ee:5f:03:
ab:c8:94:25:fd:93:59:4e:f5:91:91:cc:fd:3b:21:f8:45:c8:
94:28:46:fd:a9:12:da:ae:34:14:ce:fd:00:96:95:8d:fa:61:
01:45:1f:2a:f3:f3:2b:6e:3e:0e:a6:56:b9:3e:58:3b:04:db:
74:7d:9f:13:ea:5d:37:a9:6a:2a:12:5e:86:a0:ab:80:e1:c6:
b8:18:03:82:30:ac:06:8a:41:8c:9f:d0:41:2a:02:55:dd:40:
42:62:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net