Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/y9ttZn-xC27o_SnaiMy67wX9cpo.roa
File: y9ttZn-xC27o_SnaiMy67wX9cpo.roa (raw, json)
Hash identifier: oTSgO10QTe86YDo7hcD+a2LYfEcU/yAhHeZgC6Q7D8o=
Subject key identifier: CB:DB:6D:66:7F:B1:0B:6E:E8:FD:29:DA:88:CC:BA:EF:05:FD:72:9A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B1FA4D8
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/y9ttZn-xC27o_SnaiMy67wX9cpo.roa
Signing time: Sat 01 Jan 2022 13:58:16 +0000
ROA not before: Sat 01 Jan 2022 13:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209168
IP address blocks: 178.16.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723494104 (0x2b1fa4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbdb6d667fb10b6ee8fd29da88ccbaef05fd729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:3e:d6:c1:a8:74:b2:96:d9:b7:b0:a7:9e:
07:bf:7f:44:13:ba:28:e9:d1:1f:e2:64:36:a3:2e:
b9:27:0c:68:53:14:dd:b7:c2:ee:2c:fb:87:d9:e2:
b5:04:d3:dd:36:ee:56:31:77:e8:97:93:4e:5f:30:
83:b4:e9:92:bf:bb:69:19:11:30:d0:7a:d1:c2:f0:
b9:c6:78:0d:eb:42:ed:25:0b:e8:79:1e:74:77:3a:
16:b4:67:e5:6b:c6:c2:9a:86:ad:79:63:89:5d:cb:
a8:bf:04:fc:37:8f:0b:c7:aa:af:c6:75:67:77:2c:
28:23:b5:f2:0a:2b:96:ae:ec:65:b8:bc:f7:e5:8c:
6d:86:cf:cb:66:a4:5a:f7:92:99:98:06:55:b8:91:
4e:34:84:b3:e4:30:c9:69:73:cc:fc:66:28:e6:56:
14:d0:10:32:bc:8a:5f:3e:29:d1:33:64:51:47:2d:
4a:e0:8d:cb:7e:84:ba:04:5f:92:82:3e:7c:16:64:
f4:b3:bc:dd:27:81:a6:c3:d3:56:c6:64:ad:da:66:
c3:4c:53:38:d1:a7:9b:05:c7:74:cd:06:41:69:02:
7f:c0:b3:f4:be:a8:9a:12:c5:ab:09:7c:8e:d2:98:
f7:d1:df:73:b0:bd:be:ef:77:8b:89:6a:fa:17:22:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DB:6D:66:7F:B1:0B:6E:E8:FD:29:DA:88:CC:BA:EF:05:FD:72:9A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/y9ttZn-xC27o_SnaiMy67wX9cpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c7:e9:e2:65:26:ca:4c:dc:4e:a1:1d:1f:69:a4:05:3c:14:
08:60:03:ce:bf:80:c3:1f:08:5d:c0:9b:20:58:11:36:84:57:
93:84:63:3f:ab:0e:2d:b4:2c:a4:db:03:50:94:48:f0:26:5e:
db:11:30:41:6c:aa:3f:8f:45:9c:89:ee:f2:50:d5:67:c6:81:
87:0c:6e:df:26:f4:a1:22:1b:e2:eb:c0:86:78:c6:5b:dc:f6:
50:08:d5:a6:ce:be:e8:d5:e0:17:10:1f:ef:88:2f:69:a9:e4:
4f:a7:f6:0a:1d:af:17:49:7d:f2:b8:87:9b:7c:6f:39:e9:83:
6d:ed:5d:50:f9:06:db:ee:c8:a5:1c:e7:ea:20:ee:33:17:df:
ad:a4:26:f8:20:df:60:52:ce:bc:a0:f6:e7:4f:cc:16:71:d3:
f8:19:6c:e8:1a:72:b5:35:55:c7:46:c9:90:68:1a:ec:3e:89:
49:65:25:95:02:44:0c:9e:6d:a5:17:e1:78:ea:dc:58:c9:bc:
aa:33:5c:cb:97:90:fb:3e:b5:e7:06:81:e8:ae:f7:13:f9:f2:
1f:a8:ee:25:b4:d7:14:c4:a7:23:94:32:fc:50:f1:d7:72:3d:
89:69:b8:40:6b:f0:98:35:6a:64:36:fd:37:6f:9d:b5:71:6b:
38:e4:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org