Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/IhKOvrCgQmWoN0wK18n0zlG1YO4.roa
File: IhKOvrCgQmWoN0wK18n0zlG1YO4.roa (raw, json)
Hash identifier: x4KJYIpgL5rsDIYAmU9zi6bZAuRBK3dhqB05ZVl32uI=
Subject key identifier: 22:12:8E:BE:B0:A0:42:65:A8:37:4C:0A:D7:C9:F4:CE:51:B5:60:EE
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018312C1A33AFBBC36BA2719BE08AD32BE5E
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/IhKOvrCgQmWoN0wK18n0zlG1YO4.roa
Signing time: Tue 06 Sep 2022 12:23:43 +0000
ROA not before: Tue 06 Sep 2022 12:23:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12826
IP address blocks: 194.250.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:c1:a3:3a:fb:bc:36:ba:27:19:be:08:ad:32:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Sep 6 12:23:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22128ebeb0a04265a8374c0ad7c9f4ce51b560ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:84:26:1e:fb:c9:34:76:24:fe:fb:c7:34:
f2:65:f1:e4:88:aa:6e:c1:da:63:df:c2:a2:7c:8f:
e8:90:bc:51:55:82:d0:54:1c:99:c2:89:d7:3b:e3:
16:f9:14:de:8d:61:b7:11:6a:3d:df:fe:ad:7f:c6:
a2:de:70:c6:78:4e:19:0d:4f:6d:8f:3a:af:49:fd:
b3:6f:47:20:ae:c7:ea:95:4d:40:a4:a8:90:b0:4f:
4d:14:6e:23:c1:ad:a4:a2:6a:f7:ba:2e:e6:93:bb:
16:f6:1a:88:46:10:aa:6b:4e:f9:64:8e:b9:6c:38:
37:ee:65:17:35:69:e9:54:4b:f0:b1:95:36:9e:0e:
55:b8:d6:02:54:a5:e5:87:8c:de:52:ca:0d:b6:25:
46:c4:3b:db:d6:80:5f:34:ac:95:2a:af:f9:b4:4b:
e7:da:ea:ad:fa:12:ee:48:b8:b1:df:58:4a:3f:6a:
39:3e:f1:23:ac:ff:24:d0:8f:5e:f3:31:09:f5:5d:
00:ce:cc:b8:35:c1:45:ec:26:0c:7a:d4:9e:e3:ba:
82:8a:8f:86:1e:88:cc:81:57:89:ed:98:3a:84:97:
59:0e:48:b1:f5:e3:ba:bb:c8:7e:3a:b3:bd:4c:56:
a1:89:1d:80:4b:00:72:07:b0:2c:90:da:36:4f:d2:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:8E:BE:B0:A0:42:65:A8:37:4C:0A:D7:C9:F4:CE:51:B5:60:EE
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/IhKOvrCgQmWoN0wK18n0zlG1YO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.250.211.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fb:10:c5:e9:c5:86:14:f9:44:6f:50:14:58:19:06:80:b8:
86:ee:38:f0:1b:fd:c9:f9:2d:36:54:74:01:65:bc:95:92:43:
21:15:9b:9a:28:c0:c8:ab:12:74:2e:0e:64:18:b2:43:78:d8:
67:3a:0a:37:78:f1:6f:15:a8:61:cb:54:00:a0:55:76:00:dd:
f2:50:80:b4:89:c8:c2:6a:aa:0f:0c:c5:d5:fa:ad:65:b4:8f:
87:10:67:fa:ca:86:e7:d3:7f:92:54:3f:fe:67:15:9a:8d:dd:
27:ed:97:3e:0d:a0:e0:a7:cc:c8:55:21:da:6b:80:be:1d:99:
9d:a6:f3:69:f9:4a:7a:c0:88:38:10:41:6b:98:57:2d:14:14:
e7:de:f6:c2:83:c9:3e:78:04:b6:85:23:57:92:39:c3:ac:39:
69:b2:8e:64:61:05:0f:1f:11:ca:30:7e:9c:5d:82:19:03:52:
62:f5:fd:ee:69:c5:5c:18:86:15:cb:c9:96:81:45:f3:6e:47:
13:80:a1:6e:ab:0a:5a:20:f8:b3:95:f5:a8:b8:3b:20:06:bb:
ca:e9:0b:65:cb:b3:16:4c:f6:13:35:1c:84:4f:bd:3a:5b:1d:
86:1a:ec:e3:8d:7a:5d:2e:22:1f:9a:ad:a9:32:3a:61:3f:90:
e3:57:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org