Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BLk66pKOFecXUWOey-zBcZoGd9Y.roa
File: BLk66pKOFecXUWOey-zBcZoGd9Y.roa (raw, json)
Hash identifier: o98vgJ8siFYq0sdnpZPymdpCyYsqrrRkowr8wzdB5MI=
Subject key identifier: 04:B9:3A:EA:92:8E:15:E7:17:51:63:9E:CB:EC:C1:71:9A:06:77:D6
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 4378338E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BLk66pKOFecXUWOey-zBcZoGd9Y.roa
Signing time: Thu 31 Mar 2022 11:33:19 +0000
ROA not before: Thu 31 Mar 2022 11:33:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48421
IP address blocks: 2.63.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131950990 (0x4378338e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 31 11:33:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04b93aea928e15e71751639ecbecc1719a0677d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:9a:9a:68:9f:c1:6f:37:69:e2:c1:c8:a7:
87:3e:d0:d0:18:57:3b:0a:14:b5:70:2d:49:69:29:
7a:a1:a2:ad:c9:95:7d:b9:44:0f:ea:30:5f:b9:46:
27:a4:41:e5:c3:74:05:18:36:cd:6b:58:47:bb:9d:
85:f1:8d:f8:79:e7:ce:a8:41:3a:ed:e3:89:d5:ff:
33:1d:83:78:5b:46:a1:51:f2:9f:f9:43:51:77:17:
8f:29:1e:c2:d9:83:c8:06:d4:d4:1c:4e:a8:3d:22:
eb:ca:34:0b:ca:1e:a4:7e:1b:fe:08:5e:b1:66:f0:
91:8b:d6:07:ac:ab:25:e9:ec:0a:a9:ae:9e:18:3b:
b5:de:04:aa:23:a5:96:66:fc:71:f4:3d:30:d0:b8:
b0:d9:91:f1:9e:e7:82:42:b6:fe:c5:dd:ac:14:78:
d7:19:f5:cb:89:6a:c2:41:64:25:03:12:48:e3:7b:
4f:da:5b:69:90:81:16:02:42:3b:99:7e:25:4b:e1:
63:f5:3d:79:9b:a7:ae:12:b1:e5:8d:07:3e:5e:d7:
4f:2d:cb:68:84:89:32:4e:0e:a8:ff:dc:20:77:68:
50:5a:63:5f:26:fe:2c:ff:55:1d:a6:0b:80:92:f5:
8c:66:fb:22:9d:95:44:a6:de:0f:50:d7:53:e4:2a:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:3A:EA:92:8E:15:E7:17:51:63:9E:CB:EC:C1:71:9A:06:77:D6
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BLk66pKOFecXUWOey-zBcZoGd9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.63.192.0/24
Signature Algorithm: sha256WithRSAEncryption
96:24:86:52:8b:45:e6:11:24:97:f1:f7:71:5b:0f:dd:03:72:
46:8a:ba:f2:c5:d8:c8:50:df:d8:9b:89:29:a3:78:33:c9:c3:
a2:55:9f:c8:59:4e:a5:67:93:3c:4f:cf:3b:7c:69:12:8c:84:
57:32:26:33:57:03:44:6c:6e:21:bf:c9:d5:a7:8c:67:5c:25:
b3:b0:c5:34:10:7a:c6:f7:42:19:b0:0a:5f:08:4c:e8:95:db:
1c:9a:c1:eb:b7:7f:49:77:7e:21:9a:43:ed:bc:30:11:31:81:
3f:8b:a3:ff:65:9f:d6:1d:4f:7e:8e:8c:97:0c:68:07:49:d0:
67:45:b4:a9:d0:b9:4a:bd:cf:63:12:54:6f:4d:9f:9f:8f:45:
04:92:ac:6b:3d:41:db:81:11:38:a1:d9:0b:ea:de:32:5e:41:
40:61:12:ca:f6:b4:b0:5d:0f:cf:a4:31:c6:85:8f:2c:cc:6f:
7b:5b:a2:98:4d:cb:3b:ce:b7:d8:1f:fb:21:f1:df:52:d2:dd:
0a:0a:5f:f2:08:8a:2e:a1:03:43:e3:aa:0d:22:18:0a:f5:e5:
dc:b6:55:39:cd:3a:eb:e1:9b:d0:af:a9:4a:3b:a7:83:3e:df:
ad:c7:1d:51:e6:7d:29:39:48:fb:58:ac:e9:11:2e:92:13:a8:
6f:86:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org