Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/y9_btKJcpVrdM5NpyOeGTpsPmj8.roa
File: y9_btKJcpVrdM5NpyOeGTpsPmj8.roa (raw, json)
Hash identifier: XDrLBJ6nbhjbIWf0/yAHvV5fo8slnrYYo6iTDAG3K10=
Subject key identifier: CB:DF:DB:B4:A2:5C:A5:5A:DD:33:93:69:C8:E7:86:4E:9B:0F:9A:3F
Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial: 08F7C615
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/y9_btKJcpVrdM5NpyOeGTpsPmj8.roa
Signing time: Sat 01 Jan 2022 06:01:28 +0000
ROA not before: Sat 01 Jan 2022 06:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49821
IP address blocks: 194.1.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150455829 (0x8f7c615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Validity
Not Before: Jan 1 06:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbdfdbb4a25ca55add339369c8e7864e9b0f9a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:dd:7c:0a:5e:69:9c:15:b7:0e:dd:62:4d:
13:32:7e:41:eb:61:c3:2d:6d:a3:70:38:65:ad:4a:
98:ac:31:68:b9:3f:02:21:82:44:99:c8:08:7c:58:
ae:30:70:8c:8e:1b:61:2c:87:10:04:27:b5:2c:b7:
51:ad:9e:25:6e:18:64:de:8f:db:ad:99:19:27:32:
37:7e:ef:cf:e5:c3:4c:38:38:65:c6:ca:0a:cd:16:
3c:a7:a6:88:a9:ac:5c:c1:fb:80:37:db:ea:0e:ec:
70:d0:d4:75:40:0a:5f:a5:a3:52:67:17:08:19:63:
0a:d8:e1:c3:8a:12:7a:1c:db:05:0b:5c:db:bf:b5:
f2:42:d4:ba:4f:16:5e:62:f0:e8:72:02:db:c5:c9:
84:e3:73:34:00:21:fa:db:f8:48:dc:4d:2f:40:b4:
cc:94:38:b1:1c:24:a4:7e:54:3c:35:d3:38:16:7e:
2f:8b:39:cb:9c:0b:81:e1:f2:cb:55:de:77:7a:26:
ca:31:a5:e0:3d:5d:91:3e:d0:22:13:02:3a:27:bb:
f4:59:36:f7:6d:7e:4a:3b:8f:09:fc:7d:13:3f:ac:
0b:72:0e:f1:c8:95:c6:02:e5:02:fc:a4:d9:e0:74:
dc:64:c4:41:58:ee:77:49:78:72:5e:f7:4e:d9:4f:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:DB:B4:A2:5C:A5:5A:DD:33:93:69:C8:E7:86:4E:9B:0F:9A:3F
X509v3 Authority Key Identifier:
keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/y9_btKJcpVrdM5NpyOeGTpsPmj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.232.0/22
Signature Algorithm: sha256WithRSAEncryption
42:4d:30:d2:78:15:54:7c:b5:09:15:cd:e8:e6:9a:f6:e7:6f:
17:55:99:58:30:73:77:a1:63:1d:87:e8:a9:aa:23:bf:79:4b:
31:94:b6:91:27:c8:d5:28:54:23:8e:b6:7c:9f:46:1a:ae:37:
f5:af:d9:84:55:68:e2:60:95:96:d1:78:99:df:41:68:c1:e0:
ad:46:a9:ab:ae:85:17:72:35:ce:51:94:d5:89:97:61:e1:81:
26:80:a3:1f:04:ed:0b:cf:4f:66:5f:05:f5:39:2e:41:ed:1d:
bf:b1:d5:97:82:51:39:5b:8d:f3:c5:fb:77:6f:c0:4d:2d:92:
9c:69:e4:ce:cf:b2:e9:43:b1:63:26:d1:c5:78:7b:4d:a4:22:
1e:53:49:6c:2d:fc:0c:00:8f:e7:bb:2c:63:35:33:50:35:9d:
01:c9:0f:0e:27:ce:ec:8a:3d:48:b2:6a:0e:46:26:61:a7:a7:
23:39:39:d1:90:3b:dd:5e:9f:a3:f5:45:0c:b7:97:80:e7:8f:
cd:c7:e5:3f:2b:fe:a2:55:b5:a8:84:d5:50:3c:81:ae:76:1a:
48:14:1c:1b:6b:f3:58:3a:2b:d7:9c:05:01:67:e9:ff:11:a3:
4d:c5:64:ec:3f:4a:e0:7c:f3:bb:8d:b8:80:a1:c6:cf:23:99:
c5:c7:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:32 2024 by rpki-client on console-fra.rpki-client.org