Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C9sjE7hBdvNCK4ZVkx7iQT_j3VY.roa
File: C9sjE7hBdvNCK4ZVkx7iQT_j3VY.roa (raw, json)
Hash identifier: 1rMOsu2tJB4V9Z2Z7IiVKUPAzgmouas2nB40cBhiuns=
Subject key identifier: 0B:DB:23:13:B8:41:76:F3:42:2B:86:55:93:1E:E2:41:3F:E3:DD:56
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182CA5AE96E2C72E91721225374A4889EB6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C9sjE7hBdvNCK4ZVkx7iQT_j3VY.roa
Signing time: Tue 23 Aug 2022 10:58:51 +0000
ROA not before: Tue 23 Aug 2022 10:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213370
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:5a:e9:6e:2c:72:e9:17:21:22:53:74:a4:88:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 10:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bdb2313b84176f3422b8655931ee2413fe3dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:23:5e:19:49:6a:d5:5d:93:fc:ed:b2:ce:27:
5e:c2:d8:8f:22:79:45:0a:da:79:49:98:36:c6:ac:
1c:57:4c:1a:71:16:53:b9:c2:11:81:86:3a:54:e4:
a3:d8:ff:37:c9:a4:39:4a:e0:f2:31:29:ce:70:98:
67:75:dc:06:09:70:04:17:f9:c2:15:db:8a:66:57:
ef:61:78:56:54:a7:da:43:41:3e:85:e0:0c:7d:0c:
3d:8c:c6:ec:f3:d4:de:64:58:82:b2:10:f0:37:41:
20:45:f5:1b:dc:cb:55:df:5c:7f:86:1b:6e:5d:f1:
92:67:27:03:94:32:ac:38:cb:1a:bd:73:47:04:98:
de:1c:0b:79:67:15:ef:12:f4:59:6f:d7:ed:2a:f5:
84:61:8d:6c:c4:eb:9f:78:56:38:91:33:4c:0c:16:
8b:e1:d9:df:c8:c2:eb:16:74:50:57:66:b5:14:30:
23:a0:f5:5c:4a:dd:cd:a7:b1:cd:7d:71:28:a1:86:
df:96:29:23:e6:da:a5:1d:1f:c5:3a:fb:75:2c:a9:
0f:cd:d3:6c:71:cc:00:09:fa:fb:c1:b3:7f:ee:6a:
33:ac:2a:85:1f:96:e2:77:ab:83:4c:73:ae:38:f2:
74:95:83:10:b7:71:06:d5:42:19:9c:67:03:bf:6a:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:23:13:B8:41:76:F3:42:2B:86:55:93:1E:E2:41:3F:E3:DD:56
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C9sjE7hBdvNCK4ZVkx7iQT_j3VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ac:8a:64:a8:11:aa:d3:58:c1:e1:85:28:f9:5c:9e:14:2e:
f2:99:d6:f7:b0:df:ce:8b:cb:88:c3:9c:4a:60:0d:fa:91:07:
36:96:59:90:5d:77:9b:06:af:d1:34:d6:05:b7:fe:0e:f5:b4:
c6:56:24:30:82:99:06:69:53:67:12:1b:f8:3b:93:ac:77:f4:
13:34:fe:d7:ce:84:64:12:28:88:a3:7d:dc:b2:41:54:3c:db:
2e:65:f4:75:1e:25:39:8e:0d:71:30:54:53:1e:30:5f:28:74:
ba:c6:18:57:a4:a6:92:d7:3a:ff:97:61:4b:ed:48:f6:38:ef:
a4:7f:d7:78:93:e0:c5:c5:93:c1:37:94:ad:5a:bb:c7:ee:e9:
62:4d:24:57:23:50:64:89:ff:a7:9b:b0:21:89:08:00:5d:1b:
f0:99:82:ed:8e:cb:c8:ba:5e:ae:96:4b:66:a8:49:b4:1f:d6:
fb:6a:d7:5f:0c:1c:c5:f5:4d:0f:03:6f:4c:37:a0:ff:5f:5d:
55:41:62:45:82:01:8c:3a:72:ba:ca:1d:3b:85:94:68:1d:ee:
2a:59:64:2c:0f:d1:03:e1:7e:f5:b3:85:af:12:41:73:6d:1d:
41:11:9e:39:f8:86:af:2d:d9:16:4c:11:3a:c0:c5:81:b1:7d:
c3:8a:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org