Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/r53rBrjHA1N_SZcbGnVPioCohrs.roa
File: r53rBrjHA1N_SZcbGnVPioCohrs.roa (raw, json)
Hash identifier: awDig/BNRwXpP2lsrrgLTv2DLTHsRu7K5E0aEQZq55I=
Subject key identifier: AF:9D:EB:06:B8:C7:03:53:7F:49:97:1B:1A:75:4F:8A:80:A8:86:BB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183D0D145B70CB3D2A9BE1F7EA10D4EE46A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/r53rBrjHA1N_SZcbGnVPioCohrs.roa
Signing time: Thu 13 Oct 2022 10:08:39 +0000
ROA not before: Thu 13 Oct 2022 10:08:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141172
IP address blocks: 212.193.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:d1:45:b7:0c:b3:d2:a9:be:1f:7e:a1:0d:4e:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 13 10:08:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af9deb06b8c703537f49971b1a754f8a80a886bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:3c:6b:87:a6:8a:08:10:5f:43:fd:06:6f:
40:1d:3f:83:27:60:30:45:81:64:ff:f7:00:53:48:
e7:21:a8:70:2f:6c:b8:ed:5b:90:39:a0:28:1c:e5:
96:a0:c9:5c:b2:56:d0:35:59:84:79:f0:a4:7b:ea:
99:57:88:ec:c6:29:a9:0b:ea:02:65:d1:cf:51:94:
3b:b1:01:1e:97:bc:e1:1d:e4:81:17:73:79:1d:7f:
4f:97:82:1f:02:79:d5:df:08:0d:ed:ee:63:62:a5:
88:ba:38:62:f9:93:8a:30:7e:8b:95:b6:19:0c:7a:
bc:0f:ca:11:bc:5c:bb:b9:6c:b9:d9:1a:06:2f:91:
99:9e:72:11:3c:ec:60:25:48:92:cd:e2:c9:d6:e0:
31:8a:21:76:6b:33:e3:89:66:d4:e0:12:fe:7e:36:
93:2e:de:d5:c0:85:90:fa:66:79:ad:18:fb:c9:18:
be:f9:52:cb:cd:a0:33:9c:07:1d:67:63:81:84:f9:
d2:88:a2:4d:74:37:34:ab:fe:97:6d:55:28:13:a3:
e5:1f:2d:60:d5:fe:22:24:ef:9b:2c:f5:ad:e0:fc:
d6:18:a6:2c:2c:18:7b:f5:35:f8:dc:1a:4c:3c:c6:
5e:b7:f0:bb:23:ae:f7:3f:4f:ef:d0:d3:f5:49:08:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:EB:06:B8:C7:03:53:7F:49:97:1B:1A:75:4F:8A:80:A8:86:BB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/r53rBrjHA1N_SZcbGnVPioCohrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:bf:bd:40:0e:b3:cb:15:4a:26:c5:65:f7:a6:60:f5:9f:69:
65:13:73:29:12:3b:10:5a:41:25:0d:82:83:62:df:72:24:8d:
ad:48:dd:c7:91:d1:b6:c3:5b:ea:56:75:a1:4f:ce:80:d7:88:
fc:2e:70:82:1e:b4:6f:b2:1e:10:14:c6:29:9b:8a:90:6b:d8:
36:29:a6:a9:cf:dc:54:7c:d9:89:a7:e9:ad:c1:99:3c:34:3b:
79:73:8d:60:96:42:7a:aa:8c:32:10:a8:c5:5b:50:e9:7b:48:
0e:16:86:83:f4:6e:d8:7f:32:b8:9c:b6:52:bc:56:4b:a5:38:
e9:00:ed:73:51:f1:a0:25:cd:08:34:cc:87:40:f0:95:1d:20:
36:29:52:5c:64:9f:87:e3:24:28:ef:50:3d:e9:2e:1f:a9:18:
29:88:44:b3:3f:04:56:73:8c:08:07:2b:79:52:cf:00:7f:9b:
c5:86:08:44:31:8f:82:7e:1c:8e:c0:92:58:f2:44:5f:c6:a3:
01:bd:b8:44:1c:e0:f1:95:c8:28:72:d5:5e:1e:e5:0e:2c:38:
0a:5e:fc:62:0e:b7:10:da:ba:4d:15:ce:38:6a:95:39:3b:00:
8f:37:50:ae:b3:ab:ce:15:c1:1a:0a:38:29:b9:4c:43:3d:06:
15:ab:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org