Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/sjG9BUDcd1oMO1RkU0vqebvhwoc.roa
File: sjG9BUDcd1oMO1RkU0vqebvhwoc.roa (raw, json)
Hash identifier: yZvGgv8eS4ly5NcOrEvyP0KmdDxHqS37u4eSCfGWhVw=
Subject key identifier: B2:31:BD:05:40:DC:77:5A:0C:3B:54:64:53:4B:EA:79:BB:E1:C2:87
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 098F28B3
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/sjG9BUDcd1oMO1RkU0vqebvhwoc.roa
Signing time: Sat 01 Jan 2022 03:59:17 +0000
ROA not before: Sat 01 Jan 2022 03:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 195.177.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160377011 (0x98f28b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Jan 1 03:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b231bd0540dc775a0c3b5464534bea79bbe1c287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:65:c1:69:c5:d9:af:7d:21:e7:b9:2f:d7:73:
2f:a8:1e:18:11:53:e6:be:33:22:bc:13:c5:7e:15:
f3:88:2b:a8:c1:4c:71:bb:8f:ba:c3:dc:13:fe:ed:
97:3a:28:bf:0f:df:cf:63:d9:93:39:9e:cd:4f:3a:
80:74:4a:3d:34:d0:92:d0:32:96:63:c9:b4:93:a5:
d5:b2:15:42:f3:96:67:61:22:cb:e5:e3:36:c2:e6:
5c:04:8c:08:7a:a4:0a:3b:8e:32:b4:4b:d3:82:51:
a8:36:c4:f0:f7:8b:fe:4a:48:ae:bb:98:84:35:ef:
48:83:18:55:00:93:72:12:29:8f:62:9b:08:5a:d8:
7a:63:79:6c:1b:27:32:fb:76:78:e3:99:fd:55:e4:
47:fa:08:4d:5e:22:a7:2b:9c:83:a1:ee:46:3f:ce:
10:06:d3:db:8c:91:c0:c0:cb:1e:15:97:20:0d:fe:
cb:74:16:1d:f2:3a:fd:ca:be:7d:b2:f9:f1:31:ba:
c5:e2:e4:e1:64:16:88:47:e8:02:14:35:5d:fe:f6:
12:34:9a:5b:13:09:e6:b4:2f:a3:bb:50:7c:74:c5:
08:8a:59:48:b7:7b:b4:12:cd:bc:44:4f:49:80:a9:
77:db:90:8f:e6:54:f4:2e:d7:7c:e0:5f:6d:91:8e:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:BD:05:40:DC:77:5A:0C:3B:54:64:53:4B:EA:79:BB:E1:C2:87
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/sjG9BUDcd1oMO1RkU0vqebvhwoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.98.0/24
Signature Algorithm: sha256WithRSAEncryption
21:eb:25:50:11:16:98:6d:fb:b9:fa:aa:cd:e0:db:5b:48:74:
86:8f:20:1d:df:cb:45:b2:18:ef:ae:e6:b6:1c:a9:f3:b2:f3:
b6:79:be:44:75:2d:da:ce:7b:23:f7:c0:ab:72:4c:ce:ba:ab:
a5:e4:1a:a6:03:48:f2:fa:35:fd:c9:02:7d:fe:f5:66:c6:13:
4f:40:52:e1:f6:87:36:79:f1:91:65:6c:d5:70:76:d8:c9:f2:
2c:78:33:36:9b:ee:8c:27:97:d3:d6:6a:03:ab:39:a5:d1:ec:
5a:05:5b:fa:e4:5c:a3:4a:78:ca:81:ca:c4:58:a7:35:e6:b0:
74:62:87:53:73:a1:ac:54:80:3f:5e:b1:a7:7a:c8:1f:99:59:
9a:f4:15:aa:8f:6b:a8:4b:9c:0a:5a:02:5e:73:00:33:93:99:
25:8a:e7:4a:9b:ec:bb:c3:41:d2:19:38:8e:a9:1f:d7:ba:86:
78:73:25:d6:95:54:0e:66:fc:73:2b:60:0c:77:b7:fd:40:e2:
c5:87:e2:ea:d5:12:4a:43:37:5b:03:4c:f9:70:3e:dc:b8:6c:
19:07:ff:d7:ae:48:f8:58:f8:9e:b7:a5:e9:97:27:76:70:8d:
72:2f:1f:24:1b:d3:16:9a:c2:77:76:3a:b0:1f:39:e6:7a:78:
0b:24:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:46 2024 by rpki-client on console-ams.rpki-client.org