Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RNU39kPWk7XEZPr82qfSIPFmUjc.roa
File: RNU39kPWk7XEZPr82qfSIPFmUjc.roa (raw, json)
Hash identifier: iyIsVzG36t8Gyjc7ksaIVLUuUV56pHLJJTxsJw8jb3k=
Subject key identifier: 44:D5:37:F6:43:D6:93:B5:C4:64:FA:FC:DA:A7:D2:20:F1:66:52:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1D924639
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RNU39kPWk7XEZPr82qfSIPFmUjc.roa
Signing time: Tue 22 Mar 2022 07:54:38 +0000
ROA not before: Tue 22 Mar 2022 07:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 194.55.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496125497 (0x1d924639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 22 07:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44d537f643d693b5c464fafcdaa7d220f1665237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:8d:11:be:d7:63:c7:3e:1e:f2:d9:7b:56:
90:b0:af:88:bb:a1:27:07:8a:1a:91:04:c3:f1:23:
c8:a6:ca:c0:bd:86:43:ed:3f:cb:0b:39:d6:70:93:
fc:48:ec:44:f8:5a:b7:2b:64:e1:29:3a:4e:a4:74:
db:0a:7b:11:73:d4:7c:a6:55:f6:c1:c0:fa:7e:c7:
e4:ed:7f:96:a3:75:9b:10:89:c8:be:94:04:a0:63:
17:a4:25:aa:90:e4:79:90:f5:8e:36:ce:6b:62:92:
1e:fb:10:1a:12:8a:de:9f:a4:a2:f2:f9:81:23:6e:
80:5c:10:73:6f:07:a3:17:5e:8f:9c:75:62:69:10:
1a:94:79:24:17:40:ef:41:fe:eb:6b:16:46:c5:03:
e8:b5:e5:f4:65:f4:a9:c3:9c:d5:a8:87:79:b4:2c:
f0:29:6e:c3:e9:9e:b1:95:78:7b:d6:32:f7:80:2e:
d9:d2:fe:b4:45:8a:22:c8:7e:40:2d:29:35:2f:ed:
c7:0f:d4:c9:ce:f3:20:a5:ac:52:19:6e:3c:bf:43:
63:3e:72:c4:98:0a:fe:96:6a:7f:76:16:55:e1:65:
b5:59:09:cc:88:0d:e6:cd:6b:de:c8:a9:ff:f9:08:
d5:45:3d:d2:73:cc:2c:b9:8c:45:51:60:20:94:7e:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:37:F6:43:D6:93:B5:C4:64:FA:FC:DA:A7:D2:20:F1:66:52:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RNU39kPWk7XEZPr82qfSIPFmUjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:bf:12:2e:5d:b3:80:29:5a:20:2b:1f:9d:fe:cc:ee:e1:d6:
2d:45:aa:8d:1a:9d:06:8a:bf:d9:c0:07:9b:24:5f:35:55:d1:
83:2a:58:c9:bd:8f:7e:e0:26:e6:43:fa:f0:d5:b3:9b:74:a1:
a7:47:dd:4b:ed:c5:4c:1a:de:dd:34:87:15:73:72:fe:7d:e4:
78:a4:9c:2d:23:8b:7c:89:cc:6b:47:cc:de:0f:13:8c:70:13:
49:36:c0:51:6f:da:e5:cb:3e:03:74:39:f2:d3:9e:4f:08:35:
69:3a:99:58:86:45:89:e0:91:84:09:2e:14:f7:72:f5:ce:95:
db:6a:60:8b:f8:20:06:a2:ba:03:92:54:35:8c:6b:bc:91:47:
73:fa:a7:df:7e:75:c6:a7:50:41:1c:8d:f4:c7:24:5d:64:db:
56:c6:4f:5f:09:77:4f:da:ae:3e:eb:f7:88:70:fa:91:19:10:
9c:13:1c:19:1f:23:4e:d1:68:8f:2d:a3:cf:e7:c3:e5:20:30:
06:11:08:02:b1:df:c8:4a:01:48:17:a6:72:2a:82:5c:cd:c3:
fa:57:fa:40:c0:0a:05:a4:c8:a8:eb:99:e5:8a:69:ef:28:e9:
1f:6a:47:6d:58:74:c1:fd:ff:d8:f3:0e:49:9f:36:df:a4:43:
bb:fa:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org