Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/rf0m1Wly1tLnKG8l6QieR8vvrcA.roa
File: rf0m1Wly1tLnKG8l6QieR8vvrcA.roa (raw, json)
Hash identifier: nmMvgc+reUS4h/5K5mES+tDIKjVzdj3janQy/WX1u7I=
Subject key identifier: AD:FD:26:D5:69:72:D6:D2:E7:28:6F:25:E9:08:9E:47:CB:EF:AD:C0
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 34FDB0B0
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/rf0m1Wly1tLnKG8l6QieR8vvrcA.roa
Signing time: Sat 01 Jan 2022 05:57:46 +0000
ROA not before: Sat 01 Jan 2022 05:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197000
IP address blocks: 193.0.9.0/24 maxlen: 24
2001:67c:e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889041072 (0x34fdb0b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 05:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adfd26d56972d6d2e7286f25e9089e47cbefadc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:8d:69:d6:4a:a2:49:7b:e9:00:2e:3a:95:
d7:4d:3a:b2:f4:e7:28:a9:ec:c9:e7:ea:c4:36:0a:
ed:55:9a:65:25:cd:0e:7d:da:07:e9:87:44:80:78:
7e:85:17:3a:e0:e3:f0:77:37:1f:9e:70:2f:21:b2:
c5:ae:8f:f0:cf:fc:b2:ed:f1:ad:4e:da:d1:96:58:
93:8b:bd:36:e8:e8:49:79:e4:3e:4b:73:15:f2:ec:
bb:a5:1b:b0:2c:11:53:d0:05:81:00:46:5c:8b:70:
01:1c:73:be:5f:a9:3c:f2:e8:7e:ee:33:f4:b3:01:
8c:98:b7:82:0d:23:55:ae:f5:12:ca:68:af:9f:2c:
fd:ad:d2:b1:32:d3:ec:16:54:f1:24:fa:b1:58:f0:
8b:4f:14:52:54:bc:a6:30:f8:29:81:f2:34:63:17:
ea:3a:85:cd:8d:c0:af:d4:f4:6b:25:41:12:5a:d3:
9e:d8:45:8a:e2:36:16:8f:cc:f5:b2:0c:07:69:d7:
40:6e:82:5d:c3:96:50:5b:7d:cd:60:19:8e:33:f8:
6f:af:34:8d:56:4c:eb:cd:26:35:0e:5c:c5:89:2e:
00:d1:bc:2d:35:c8:52:ac:85:d0:4a:8d:a8:2c:a4:
ec:84:ac:d2:a3:00:8e:00:5e:8d:54:1d:e2:b9:c5:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FD:26:D5:69:72:D6:D2:E7:28:6F:25:E9:08:9E:47:CB:EF:AD:C0
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/rf0m1Wly1tLnKG8l6QieR8vvrcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.9.0/24
IPv6:
2001:67c:e0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:29:d7:00:06:e2:ae:5e:61:5c:4a:f2:d2:d1:cc:38:77:94:
4e:37:43:4c:30:50:d0:92:b7:09:23:73:9c:b8:73:ff:66:bf:
43:6b:d6:f2:a5:82:4b:e4:e4:59:aa:44:df:60:e8:7b:71:f7:
2a:00:69:f0:a7:7b:c6:4b:1d:e5:7f:67:52:b3:7b:fb:b9:3c:
9d:d9:79:bc:8e:d0:28:cd:28:fb:41:5f:25:0d:ad:1a:05:ac:
f0:b7:56:8d:d6:41:3b:09:02:9c:51:71:8f:e5:06:1e:f7:f0:
b5:1d:81:98:be:31:39:45:f3:c4:11:9b:43:68:1a:3f:83:f5:
57:5b:43:f3:ca:ad:41:2b:c3:be:6b:b9:c8:e8:c3:38:5f:d1:
f6:c3:84:69:ee:55:d5:a0:30:f3:a8:2d:79:bd:28:81:d3:14:
8a:8f:d5:31:6b:14:0e:98:46:37:d8:07:10:dc:46:00:01:fc:
8e:cf:fd:c3:b6:29:6b:2c:15:f6:cc:5c:9c:41:3c:21:05:52:
ae:e0:ff:cb:6b:62:0a:05:2a:18:da:b6:90:64:58:d5:82:cf:
7a:5b:ca:82:f2:a8:c1:46:4c:2f:30:ff:62:2f:08:55:e5:27:
26:ba:59:76:5a:f9:58:94:36:17:e4:3b:c0:94:74:a7:40:09:
f0:64:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:02 2024 by rpki-client on console-fra.rpki-client.org