Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/RRYxg9_lHyJoarwc4W_U4bp-eXU.roa
File: RRYxg9_lHyJoarwc4W_U4bp-eXU.roa (raw, json)
Hash identifier: tPqSrTnF2TixF0LY8ihU68PLsO3vk/0cdNttx7tfc7U=
Subject key identifier: 45:16:31:83:DF:E5:1F:22:68:6A:BC:1C:E1:6F:D4:E1:BA:7E:79:75
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0184E1BE803829FD2F91146F9D189991D539
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/RRYxg9_lHyJoarwc4W_U4bp-eXU.roa
Signing time: Mon 05 Dec 2022 10:04:28 +0000
ROA not before: Mon 05 Dec 2022 10:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 194.187.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:be:80:38:29:fd:2f:91:14:6f:9d:18:99:91:d5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Dec 5 10:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45163183dfe51f22686abc1ce16fd4e1ba7e7975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:51:79:89:92:ea:8f:80:17:fc:d0:7e:38:
d4:a1:83:6b:f2:1d:eb:75:e9:14:34:9f:dd:10:56:
1e:5d:4d:f9:a4:f1:cd:8c:fe:ee:87:ff:2a:11:45:
8d:3e:8b:40:ef:3b:d2:34:04:f6:a8:fe:2d:b8:1a:
39:92:b2:9b:db:ea:dd:ad:2b:05:c4:63:ad:18:13:
e4:de:78:6a:84:9f:85:fa:76:b7:ee:e0:71:34:54:
5c:6d:8b:75:50:03:b3:be:b0:38:a7:46:f9:80:ab:
df:94:ac:c9:d6:da:0b:64:32:27:2a:44:d9:38:60:
de:39:e6:bb:12:ed:60:a7:15:8c:e3:a7:e3:aa:63:
ca:bd:07:bf:6c:d2:ce:c4:4e:48:30:a3:d1:82:d4:
e3:82:2d:76:a2:95:c3:c7:54:48:23:46:63:a0:7f:
91:07:6e:51:ee:73:c0:c2:2f:98:f9:52:52:e6:53:
d5:45:1a:d0:88:07:77:8e:3a:13:bf:d2:52:b1:51:
40:f9:bd:40:70:1a:1a:dd:ee:34:b7:79:59:51:20:
e9:99:be:0d:18:8c:93:d9:0e:22:95:25:e3:11:ad:
18:3c:5b:f0:40:a7:cd:ab:23:89:15:7a:e9:bd:ff:
5b:3b:d1:ef:53:f4:73:ca:6a:8a:f2:d8:16:8b:b1:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:31:83:DF:E5:1F:22:68:6A:BC:1C:E1:6F:D4:E1:BA:7E:79:75
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/RRYxg9_lHyJoarwc4W_U4bp-eXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.122.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5d:ec:82:1b:d3:4b:34:da:5a:2d:a3:26:57:f5:24:12:48:
89:ab:93:d6:2b:4b:99:70:b6:76:fa:e8:a6:55:7a:45:3b:79:
31:13:80:b0:d9:8d:bf:bd:2a:8d:d1:2a:b5:95:e9:9b:ec:9a:
2a:b2:01:22:3d:00:b2:89:64:8f:bf:ee:3c:85:10:c6:66:ad:
8a:9d:b1:74:21:7d:2c:9a:31:87:a5:66:d1:5b:bd:0a:0c:59:
c9:44:bc:7c:7f:49:08:d6:b5:cb:0f:aa:b3:1d:0b:41:fa:b6:
ac:80:0e:86:ab:b4:57:61:3b:26:ca:39:10:3c:a4:44:22:dc:
4c:73:e3:b8:a5:20:6a:9c:a4:56:2d:6f:5e:9b:73:ca:94:cb:
cc:f5:09:63:02:24:1f:4a:74:e9:9a:bd:f8:8f:9c:90:fe:11:
66:e2:21:86:39:80:f2:ea:03:1e:ee:9a:d3:06:3f:16:b8:9a:
b5:f8:54:98:5a:d2:e6:fc:d8:84:d2:0c:f2:7f:85:30:02:90:
b8:0b:13:80:b0:45:e6:41:2c:31:79:49:fd:b0:e3:fa:13:2f:
de:22:0e:cf:c1:58:8a:d7:58:98:2c:9c:7d:ec:dc:45:6c:f5:
77:dd:b4:07:aa:2c:37:aa:6f:af:d4:e2:65:77:17:c6:7c:5c:
95:f4:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org