Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-Ju4B3w24P0hfHpd9OM7VTtJ6uo.roa
File: 1-Ju4B3w24P0hfHpd9OM7VTtJ6uo.roa (raw, json)
Hash identifier: OABF9UH0bhLBWegZHyltRG5r6KL+tZiidz1cvOYW5S8=
Subject key identifier: F8:9B:B8:07:7C:36:E0:FD:21:7C:7A:5D:F4:E3:3B:55:3B:49:EA:EA
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0876080C
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-Ju4B3w24P0hfHpd9OM7VTtJ6uo.roa
Signing time: Sat 16 Apr 2022 17:20:32 +0000
ROA not before: Sat 16 Apr 2022 17:20:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.37.196.0/22 maxlen: 24
45.67.202.0/23 maxlen: 24
45.67.200.0/23 maxlen: 24
45.67.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141953036 (0x876080c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Apr 16 17:20:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f89bb8077c36e0fd217c7a5df4e33b553b49eaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:b0:f8:3e:18:f7:dc:d7:6c:f0:ed:09:6f:
16:2b:ab:b1:86:93:a6:b7:9b:1a:19:5a:3c:1b:56:
04:c8:5b:e1:fd:c1:0f:d9:36:cd:d9:e8:73:af:92:
e8:bb:35:ab:1c:89:16:48:ea:51:3c:84:2a:7e:69:
dc:78:6b:d1:88:19:a1:e4:ec:b5:76:71:3d:d7:87:
38:b8:f1:96:43:cb:d6:ce:46:b9:8f:67:a4:0f:2e:
2a:28:80:eb:11:7a:76:42:36:a2:7c:30:9d:10:93:
13:d8:ec:aa:89:74:65:64:b9:97:58:a3:ad:51:ac:
32:1a:58:9c:5f:7d:75:01:6f:9a:62:a6:4e:b0:a4:
ec:8b:51:1c:4f:79:f1:f6:39:83:47:78:fc:87:7e:
80:d2:52:f1:77:62:21:2e:c0:85:f0:f6:f0:38:99:
4f:f2:1a:3c:49:ef:bf:7d:3c:6b:e8:ea:d4:c5:ac:
d7:f4:01:74:06:ba:d0:c7:9d:50:fe:ec:51:60:38:
f2:d5:fc:57:b0:7c:65:5d:ca:de:af:46:dd:42:81:
d3:47:b4:c3:f0:d7:49:63:b8:c9:85:5a:67:14:ef:
33:eb:4c:58:21:bd:39:00:bf:8f:53:e3:15:2b:a0:
3b:b7:d8:65:75:f4:19:bf:45:a2:03:cb:a2:cf:f2:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9B:B8:07:7C:36:E0:FD:21:7C:7A:5D:F4:E3:3B:55:3B:49:EA:EA
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-Ju4B3w24P0hfHpd9OM7VTtJ6uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.200.0/22
193.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:92:5e:eb:c2:1b:57:b4:b2:09:7c:9d:3a:09:2b:9d:e4:c1:
68:25:54:06:2d:6d:cf:fe:69:04:c6:d7:7e:ea:f2:4e:4f:ac:
70:97:da:01:4a:e3:9a:82:a3:30:9c:3b:ce:54:6b:4d:3f:6e:
94:5b:c2:5b:75:35:5a:33:19:6d:8a:0b:97:e2:41:90:85:21:
70:1f:35:6c:9f:3f:19:00:0f:60:a2:c2:ed:d8:f2:06:77:37:
57:60:cd:d1:ed:cc:26:a8:7b:ca:9e:7f:ff:6c:14:bc:da:80:
c4:7e:f4:0b:f2:67:34:70:f3:96:dc:06:fb:d9:5c:79:bf:bb:
e5:5f:ee:4c:da:ba:ef:45:5b:b8:31:0b:21:84:4d:7b:4b:5b:
98:97:fb:e7:a1:12:6e:52:f2:59:ac:b6:70:c9:c3:76:95:14:
0b:31:8b:f3:7d:4e:e3:9c:11:bf:7c:a8:10:69:7f:fd:7d:9e:
85:37:14:a2:29:3f:8e:65:90:4f:4b:ea:5e:40:58:65:40:55:
4d:23:7e:d0:1f:78:a8:d3:29:0d:f8:59:e7:8f:36:17:17:c0:
bf:ef:4f:c3:77:73:de:d4:2e:ad:5d:77:25:e4:39:24:e4:a4:
a3:1e:ea:20:46:d7:6a:73:b1:8a:62:a1:81:7d:fd:8e:24:26:
c1:bd:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org