Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/9_icOnebYOvy212_D6Uur-FfwzM.roa
File: 9_icOnebYOvy212_D6Uur-FfwzM.roa (raw, json)
Hash identifier: z7GbK1WR90O8fXmZ8GRo9nbRdsYsHssbTZdusWYcoLI=
Subject key identifier: F7:F8:9C:3A:77:9B:60:EB:F2:DB:5D:BF:0F:A5:2E:AF:E1:5F:C3:33
Certificate issuer: /CN=325aeffe20b6f9a464741be1f33daf1465c36fa1
Certificate serial: D3FFD3
Authority key identifier: 32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/9_icOnebYOvy212_D6Uur-FfwzM.roa
Signing time: Sat 01 Jan 2022 12:54:00 +0000
ROA not before: Sat 01 Jan 2022 12:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.104.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13893587 (0xd3ffd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325aeffe20b6f9a464741be1f33daf1465c36fa1
Validity
Not Before: Jan 1 12:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7f89c3a779b60ebf2db5dbf0fa52eafe15fc333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:c4:f8:07:cf:bb:c5:0c:1a:ab:d4:60:01:
f1:14:ac:e9:f1:a8:02:d3:ae:e7:15:f4:c5:09:46:
59:80:99:40:76:4f:3b:72:74:5e:21:1f:d8:90:6e:
0f:9f:a8:94:33:ce:60:b3:06:03:ae:3b:89:af:98:
83:b0:a7:54:2a:6c:1a:bb:52:59:e5:4e:bc:48:28:
19:bb:49:a5:ce:a1:09:76:e0:3a:63:92:10:a3:63:
af:75:c5:bf:f3:5b:da:51:da:bd:95:57:fa:6f:09:
ce:e8:7b:99:31:b4:f3:bc:ba:3d:51:6f:d3:ea:53:
69:82:0a:c7:3d:79:70:0d:ca:18:65:28:bc:6e:9e:
b3:03:90:57:9e:20:ac:08:f7:07:bc:29:33:46:aa:
84:98:a5:be:bc:67:6b:e6:78:68:00:e7:30:51:1e:
79:7f:6f:4f:18:79:50:a5:f2:67:67:b8:91:e6:9c:
be:94:b4:4c:c1:d3:4d:f7:a9:7c:15:23:07:39:d8:
65:08:b0:a6:80:53:8a:73:2f:03:eb:b8:55:63:eb:
1d:56:4c:65:e6:30:fc:b2:c5:20:d0:8b:06:23:83:
93:7a:25:be:43:ae:3f:1e:0b:dd:45:40:c7:9b:61:
85:e8:7e:c5:ae:54:f8:32:78:90:48:7a:88:a7:1c:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:9C:3A:77:9B:60:EB:F2:DB:5D:BF:0F:A5:2E:AF:E1:5F:C3:33
X509v3 Authority Key Identifier:
keyid:32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/9_icOnebYOvy212_D6Uur-FfwzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
52:65:d1:6d:a0:1a:3a:66:2b:ad:e1:db:c8:12:ce:3e:fa:34:
22:e0:0d:81:80:3e:16:7e:4e:27:62:2f:23:d7:f7:fb:01:a7:
9e:3f:bd:54:37:5a:f2:d9:ab:33:34:95:c1:5e:33:1c:ec:a7:
87:7a:fc:89:6d:f8:4c:8e:99:95:85:69:5f:7a:2e:1c:07:ab:
c5:7f:d4:be:8d:38:73:c6:31:2a:88:fd:4a:3c:eb:8f:64:4c:
12:98:be:a7:43:3c:58:8e:95:2c:7d:88:43:36:72:98:39:84:
fd:b1:68:f0:11:1f:d5:78:20:68:b9:a7:86:fb:cc:43:5e:4d:
50:fa:3a:9f:cd:21:5a:a3:3f:24:8f:76:38:78:6e:84:ba:d4:
cf:7b:d1:eb:cc:b2:9c:74:c5:00:08:7e:aa:31:65:5b:6f:7a:
35:78:08:dd:bd:60:cc:92:73:75:54:b9:e3:e7:c0:94:d7:8c:
25:42:10:31:b1:51:c5:c5:5b:ac:54:e7:6e:7e:6d:12:d2:c7:
58:7a:97:18:c8:8f:6e:2f:e5:de:60:13:4d:27:5f:04:f4:2f:
33:3f:b8:ae:13:69:2a:e8:6f:2e:2b:37:99:2a:07:23:03:05:
5e:40:44:e0:dc:eb:6f:45:f4:5f:05:80:c9:19:66:23:29:d5:
a2:24:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:50 2023 by rpki-client on console-ams.rpki-client.org