Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Cg_Jut01bigrP3m9J4Ns-QVPEQs.roa
File: Cg_Jut01bigrP3m9J4Ns-QVPEQs.roa (raw, json)
Hash identifier: 30ZIqnXh89klX9bvvi3C/cV1jWF6Ss50I1AfKJ+3zHk=
Subject key identifier: 0A:0F:C9:BA:DD:35:6E:28:2B:3F:79:BD:27:83:6C:F9:05:4F:11:0B
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01830A0772B4A44A3520337D010FD9C9E15F
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Cg_Jut01bigrP3m9J4Ns-QVPEQs.roa
Signing time: Sun 04 Sep 2022 19:43:23 +0000
ROA not before: Sun 04 Sep 2022 19:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 194.110.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0a:07:72:b4:a4:4a:35:20:33:7d:01:0f:d9:c9:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 4 19:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a0fc9badd356e282b3f79bd27836cf9054f110b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:93:eb:85:39:8f:e3:cc:37:40:ec:9a:63:
f9:11:25:2f:ca:c4:4d:06:2b:d7:69:ca:4c:f7:81:
65:84:dc:d7:df:10:1d:80:dd:75:b8:d1:17:fb:76:
96:e1:ef:19:24:fd:da:52:91:18:ee:c6:e3:75:15:
7e:18:7d:fb:a6:e3:08:c7:e1:fa:fb:30:95:07:91:
9e:f0:02:9b:c1:4b:ca:dc:9f:d3:fd:c2:a4:40:b7:
80:f5:b7:21:33:53:3d:53:27:71:f6:1e:0a:c9:af:
bb:75:44:32:e3:53:15:ad:96:a1:99:f3:f0:2b:77:
4c:cf:ff:2c:33:98:8a:b9:b3:3f:b1:f9:9f:e2:1a:
2d:cb:49:35:8e:e1:b8:28:33:75:a7:77:37:14:2a:
d8:4a:67:2b:24:e7:de:62:fe:47:2b:de:85:1b:28:
fc:55:e3:dc:76:0b:83:38:b0:3c:81:df:0d:12:db:
21:20:41:bf:c2:37:b5:6a:aa:ea:94:a0:ea:58:74:
18:14:34:d9:f1:ce:28:2e:c8:8b:42:d4:bd:e0:cb:
e2:24:7f:e3:2a:3e:87:73:e6:1f:2b:7b:c0:6f:6c:
aa:97:86:00:31:87:a8:34:2c:28:02:52:5e:57:2b:
a4:ad:c8:49:6b:6f:0e:3f:de:9a:03:13:c1:85:3c:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0F:C9:BA:DD:35:6E:28:2B:3F:79:BD:27:83:6C:F9:05:4F:11:0B
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Cg_Jut01bigrP3m9J4Ns-QVPEQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:bc:c9:d6:8a:fc:db:ac:a6:21:0a:c8:9f:b3:53:3d:52:b2:
95:d9:42:04:f1:0d:cd:09:af:84:ad:4c:5f:97:6f:e0:f6:43:
eb:a4:6e:72:1e:ea:43:8a:23:d0:c3:d6:e1:4e:4c:d7:71:a7:
31:0e:e2:bd:62:89:16:38:11:50:bb:f5:87:f4:9f:c3:89:15:
6d:7e:1c:1a:89:c3:a8:eb:37:e2:7a:d6:63:e2:e4:7b:4d:e9:
46:5a:9a:db:cd:dc:c9:2b:55:b3:a6:21:97:5e:87:5a:8e:a0:
81:1d:14:c2:b8:c3:87:93:47:05:97:98:c3:d8:a1:ee:ac:9f:
c8:40:ef:b2:e9:02:0d:f3:4b:c3:f2:06:c9:30:84:3a:e0:18:
65:46:ae:d3:b2:8c:63:2d:19:fe:65:12:2e:49:41:93:da:da:
f0:a8:58:55:05:2a:50:b6:06:71:69:8d:96:69:61:97:52:aa:
0b:2a:d7:9c:45:9f:75:35:e9:c4:7e:9d:e5:d0:67:b8:48:59:
79:d4:1a:bb:99:b9:ae:4f:61:fe:38:48:8c:67:3e:81:57:1d:
03:fb:9f:bc:6d:d9:b9:e4:37:e0:7f:d3:96:1f:b0:df:20:12:
03:64:59:aa:ae:9f:ba:d9:58:3b:8c:c0:9e:16:a7:73:42:15:
23:5c:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org