Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/9Cccs6uI77smCnlcVrCGOUp5mfo.roa
File: 9Cccs6uI77smCnlcVrCGOUp5mfo.roa (raw, json)
Hash identifier: VwDY7pPk7N/+tprky/ElchqjPTaT+Z73g/ueaTzVMaE=
Subject key identifier: F4:27:1C:B3:AB:88:EF:BB:26:0A:79:5C:56:B0:86:39:4A:79:99:FA
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 06DF8FDB
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/9Cccs6uI77smCnlcVrCGOUp5mfo.roa
Signing time: Sat 01 Jan 2022 09:06:33 +0000
ROA not before: Sat 01 Jan 2022 09:06:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210107
IP address blocks: 194.1.184.0/24 maxlen: 24
194.1.192.0/24 maxlen: 24
2a0f:c943::/32 maxlen: 32
2a0f:c941::/32 maxlen: 32
2a0f:c945::/32 maxlen: 32
2a0f:c947::/32 maxlen: 32
2a0f:c944::/32 maxlen: 32
2a0f:c942::/32 maxlen: 32
2a0f:c940::/32 maxlen: 32
2a0f:c946::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115314651 (0x6df8fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jan 1 09:06:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4271cb3ab88efbb260a795c56b086394a7999fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:b1:82:9f:83:ca:d4:41:d5:f0:5e:07:d3:
f6:ff:61:da:17:4d:27:33:47:4e:4c:37:fd:8c:60:
5f:5a:0c:d3:aa:ac:66:d4:14:99:6b:84:8c:bc:b5:
83:92:a6:38:e1:23:7e:d0:ca:ca:09:2a:e7:4e:e4:
4f:a9:4e:cc:cf:7b:c6:a5:55:05:60:1d:0a:18:d8:
fe:57:0a:c3:78:bc:24:ed:f1:22:4f:a2:77:1d:d1:
f8:01:07:55:c9:64:1e:ab:b0:d7:98:75:84:6f:ef:
d3:b1:63:f8:d9:11:17:08:74:36:eb:5e:be:6e:f5:
8e:4e:dc:87:88:51:c4:e4:f2:3b:87:ca:4e:95:cd:
4a:d3:5c:72:13:d2:4c:a6:29:d5:cc:4a:0b:78:05:
93:be:c3:e9:3d:0b:8d:5b:3d:5b:08:8f:50:7d:b5:
60:60:5e:f3:8d:68:a2:dc:6c:59:7e:49:bb:ad:85:
7d:f2:92:12:e5:99:80:fe:15:7d:5b:38:57:bb:05:
dd:51:3c:e2:c1:0d:38:61:9f:47:cc:a3:ae:59:43:
3e:46:84:a3:98:00:67:8d:06:ed:b7:57:0f:1d:8e:
4e:77:1b:a2:e6:fb:d6:ff:c7:0f:ef:83:70:4d:43:
53:0f:32:00:56:61:66:ec:c1:91:ad:93:fa:d3:41:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:1C:B3:AB:88:EF:BB:26:0A:79:5C:56:B0:86:39:4A:79:99:FA
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/9Cccs6uI77smCnlcVrCGOUp5mfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.184.0/24
194.1.192.0/24
IPv6:
2a0f:c940::/29
Signature Algorithm: sha256WithRSAEncryption
b9:a6:8b:9e:aa:f7:ee:fa:29:24:19:b0:41:d1:7f:f5:ee:bb:
65:f5:06:47:07:0c:7f:ac:6f:c9:95:5a:9f:df:58:65:22:5d:
56:f8:8d:3c:b0:1c:20:f6:22:51:88:b1:4d:98:f0:5d:0e:03:
4e:c3:f7:a4:3e:b5:df:03:a8:0c:c1:95:e1:47:51:62:da:13:
a9:a4:d1:24:34:83:0e:9a:4a:33:78:4a:bf:74:1d:0a:88:53:
4f:c8:14:de:6f:03:c8:b8:5f:3d:66:ba:45:4e:11:55:3a:e2:
34:57:01:63:df:c9:5c:a0:6b:9e:27:b4:ab:01:63:b5:ed:a1:
67:22:b4:b2:26:1a:db:8c:86:12:bd:f3:1b:e1:7b:cb:2f:c6:
d5:01:90:85:9e:31:db:e3:6c:25:51:70:09:27:24:63:fc:b6:
51:4d:0c:5a:6b:77:6f:b6:2f:7b:6e:54:3b:0a:dd:2c:2f:13:
04:c6:c0:9d:24:93:49:63:40:e2:48:1e:f1:7d:e7:ff:dc:a1:
cb:b8:6b:e4:18:a3:7c:95:90:27:09:64:bc:ba:25:88:9e:c2:
4b:e9:03:ae:69:3e:86:6d:68:7d:58:93:b6:91:6e:c4:81:bc:
a3:ec:7b:7d:9f:ec:b8:d5:55:2a:92:20:53:68:7d:c2:b3:a3:
8e:ff:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:06 2024 by rpki-client on console-fra.rpki-client.org