Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7xfwtgeFeJpxwOjFwohirhbn5BA.roa
File: 7xfwtgeFeJpxwOjFwohirhbn5BA.roa (raw, json)
Hash identifier: OQYHXxvjrgJlF15eI5AWgbUB1tfSVPpf2BTcb2vXRbk=
Subject key identifier: EF:17:F0:B6:07:85:78:9A:71:C0:E8:C5:C2:88:62:AE:16:E7:E4:10
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 070454AF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7xfwtgeFeJpxwOjFwohirhbn5BA.roa
Signing time: Sat 01 Jan 2022 03:54:11 +0000
ROA not before: Sat 01 Jan 2022 03:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203430
IP address blocks: 194.242.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117724335 (0x70454af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 03:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef17f0b60785789a71c0e8c5c28862ae16e7e410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:27:2d:9e:c3:ee:70:bc:47:05:15:0f:a8:c4:
e5:ad:c5:8c:88:75:b2:52:d3:62:c2:2e:26:78:16:
ab:fb:b0:91:39:88:f7:a2:c0:73:ec:42:43:d5:73:
f0:c6:f3:83:c9:e8:cb:9f:b5:f6:8b:a4:c1:96:c3:
76:70:85:0e:35:68:f8:a5:85:c5:58:5d:e1:5d:80:
bb:ad:ec:92:18:d9:fd:15:7f:ad:75:2d:52:56:fc:
25:7d:a0:3c:c2:db:dd:03:61:87:c9:20:bc:6d:e0:
1d:dd:d4:c9:a7:af:32:0c:d5:37:75:b6:fb:82:bd:
b5:ac:45:f4:b1:1b:63:7c:f1:10:05:d1:7b:d3:1e:
b9:00:45:42:e1:37:80:43:58:86:44:e3:6e:ba:32:
4d:59:84:9a:0d:ce:77:06:65:b2:c6:2b:09:59:f4:
5a:f9:d9:ed:22:15:c2:82:19:b8:0b:8a:02:18:ad:
c6:ff:28:df:49:c0:3f:ec:ee:50:b3:f5:f7:c2:1e:
e2:8a:68:39:5c:9b:f7:eb:04:da:96:da:7c:d5:66:
ca:a8:12:9f:98:ec:6e:b0:8d:61:31:0e:38:7f:d7:
06:85:19:5a:f7:b0:65:3b:80:16:a0:ea:80:7f:b6:
26:e2:dc:2c:2d:2c:1c:df:93:96:16:24:72:2d:13:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:17:F0:B6:07:85:78:9A:71:C0:E8:C5:C2:88:62:AE:16:E7:E4:10
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7xfwtgeFeJpxwOjFwohirhbn5BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.97.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b6:fe:7a:62:95:75:d2:00:16:ab:a9:ec:91:5e:3b:a1:86:
f0:07:eb:63:f9:ef:4f:cf:f8:45:4c:06:8a:2a:d9:bc:1a:56:
26:cd:41:0a:af:82:b1:65:e7:72:54:63:a6:16:10:3d:99:31:
eb:7e:58:e5:13:f2:30:11:b0:c4:8c:b3:1a:56:ad:7b:94:6d:
e2:48:24:d0:98:d9:1b:6f:4e:f0:6b:1e:65:3c:d4:41:59:49:
73:d0:e9:d7:46:dc:99:84:1a:25:5e:a1:2f:7c:a7:1b:52:a2:
e5:6a:48:e8:84:51:2e:fb:55:55:95:58:6d:bd:f3:bf:86:6f:
bb:6f:09:c3:d8:f6:87:5f:69:3f:42:e1:7c:04:7b:48:c9:f5:
11:44:7f:4e:da:22:0d:49:39:87:51:9d:f4:9a:bf:ee:b1:4f:
07:38:82:a1:55:e8:6a:cd:89:48:da:cd:9f:14:12:a1:f4:e6:
0e:95:84:86:c4:f4:86:35:f3:2a:13:41:2c:0a:1e:0f:ad:50:
5d:d1:96:be:1d:97:ee:fc:bd:ec:8a:b3:85:b1:46:e0:b2:27:
9d:d2:00:ec:50:a5:84:87:1b:cc:82:8e:8f:09:b0:42:55:fe:
23:2d:ec:ef:4e:3f:d8:8c:1f:43:0b:f6:6b:15:f9:17:81:d1:
b4:b4:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org