Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/vxZiAyRA9Xbsswuznrga0C-RUKA.roa
File: vxZiAyRA9Xbsswuznrga0C-RUKA.roa (raw, json)
Hash identifier: qk72xNnzLDcUH3Hiaff9DDXpZKW2iYiCV3mFvAEJhf0=
Subject key identifier: BF:16:62:03:24:40:F5:76:EC:B3:0B:B3:9E:B8:1A:D0:2F:91:50:A0
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 01418FC8
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/vxZiAyRA9Xbsswuznrga0C-RUKA.roa
Signing time: Sat 01 Jan 2022 00:56:38 +0000
ROA not before: Sat 01 Jan 2022 00:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 147.189.19.0/24 maxlen: 24
147.189.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21073864 (0x1418fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Jan 1 00:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf1662032440f576ecb30bb39eb81ad02f9150a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:9c:2f:c0:a1:43:39:0f:56:e2:1b:eb:ff:
f5:25:af:bb:46:a3:63:bd:e4:2a:34:5b:d2:30:b3:
18:ff:41:48:46:ad:94:62:57:d2:08:a4:3c:bf:19:
ca:e9:d6:57:6a:e0:c6:e9:a8:6a:26:ec:f0:a5:47:
67:05:61:56:b3:ca:9b:07:07:38:27:7e:25:06:54:
13:76:7a:82:ca:e9:c4:89:1d:1c:3c:dd:82:6b:93:
38:81:2a:1d:e9:dc:51:3a:fc:bb:45:80:4e:22:a1:
ce:4b:18:df:05:5d:39:0f:48:7a:cd:35:6f:7f:db:
79:69:96:b5:00:60:e8:aa:b0:ba:49:0a:e1:59:15:
70:3e:0a:82:88:db:d7:9e:5c:09:80:fa:4c:23:8d:
63:a5:bd:a3:01:bd:78:97:2f:0f:0a:93:82:88:03:
81:45:3b:4f:39:96:06:b1:99:70:d1:65:64:55:69:
3d:03:b8:30:75:55:2c:a8:4b:46:09:b3:8b:e4:ec:
d7:cd:72:23:b4:5c:1b:74:6d:6e:ab:1b:22:85:54:
25:51:c8:c4:85:87:3c:cc:c5:bf:88:a2:52:14:9b:
e9:d6:e0:6a:d2:2c:d6:14:55:2e:d6:43:80:c6:a3:
8b:01:4b:5a:ba:54:e6:5d:2b:ed:16:96:96:88:ec:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:16:62:03:24:40:F5:76:EC:B3:0B:B3:9E:B8:1A:D0:2F:91:50:A0
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/vxZiAyRA9Xbsswuznrga0C-RUKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.18.0/23
Signature Algorithm: sha256WithRSAEncryption
24:e2:a6:19:f2:eb:97:ac:56:82:89:04:f4:cf:be:74:a5:79:
65:0b:75:95:cd:9c:8f:a0:d7:84:cf:61:06:47:af:dd:d3:8a:
4f:8a:13:ec:f9:13:64:d0:b5:f1:7f:41:b9:ec:93:c4:b3:e8:
4c:9c:cb:fd:e2:5d:08:8f:dd:d3:a1:2f:94:c6:2a:f8:d9:60:
33:8a:18:c5:cf:e5:5a:c2:21:12:e5:0e:cd:be:e9:d0:e3:4f:
40:93:ae:14:23:4b:b4:ba:30:b0:8f:93:de:58:be:42:b0:8b:
92:8e:25:6a:f0:38:d1:c1:8d:21:05:54:4d:5c:b6:b7:96:6d:
58:2a:e1:67:4c:ef:ff:9d:22:15:b8:51:76:01:12:1d:fb:1f:
e1:f2:53:55:62:dd:59:0c:3e:2b:ef:c3:18:93:fc:97:a4:d6:
b7:de:ff:a1:58:dd:0a:fc:75:2a:01:a0:87:f2:b1:de:44:c1:
1d:42:99:aa:48:f3:da:d4:e7:d4:ef:f2:8e:e5:ff:ce:1a:e9:
a3:60:46:6f:e8:ba:9b:ba:b3:5f:7a:8a:9f:ce:9e:e3:5f:13:
e5:e8:aa:bc:45:4c:12:9a:9f:e4:d6:d3:d9:8e:1c:14:6f:11:
7c:4b:75:2e:c6:73:19:ea:d6:51:18:0c:ba:bd:14:b1:b5:75:
47:8f:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org