Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/C9K-cx6r2lAhDCP5g0OWe0HaOXA.roa
File: C9K-cx6r2lAhDCP5g0OWe0HaOXA.roa (raw, json)
Hash identifier: MtJpJU95AU94yHx65ea/d13yJY7QA/ZU1js6xurNG6E=
Subject key identifier: 0B:D2:BE:73:1E:AB:DA:50:21:0C:23:F9:83:43:96:7B:41:DA:39:70
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 0A0FD3D8
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/C9K-cx6r2lAhDCP5g0OWe0HaOXA.roa
Signing time: Sat 01 Jan 2022 10:56:09 +0000
ROA not before: Sat 01 Jan 2022 10:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198063
IP address blocks: 194.116.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168809432 (0xa0fd3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Jan 1 10:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bd2be731eabda50210c23f98343967b41da3970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:17:72:38:e0:82:fd:b8:99:a3:e3:f0:44:
6a:dd:17:34:1c:8c:33:d6:3c:6e:e4:21:81:85:1e:
98:63:7f:cf:68:74:fd:3d:60:57:b6:89:d4:1c:05:
4e:8d:84:65:05:dd:1c:59:59:a8:d0:c2:e8:8a:83:
c3:90:ce:72:99:b7:d0:7b:ff:dd:5d:c2:e5:75:79:
f2:58:71:b2:fd:aa:59:80:53:d8:15:c9:d9:f5:2b:
c6:34:79:ae:91:cb:27:c7:80:cd:4f:57:95:a4:48:
22:9d:9b:30:11:6f:93:fe:6b:6d:7c:e7:91:0b:48:
c7:0b:0a:c3:9d:2b:a6:c3:3e:cc:b2:51:f1:c4:ec:
75:4c:48:a5:0c:ee:50:34:27:c3:0b:0b:0a:4b:cd:
5a:54:4d:a8:c5:de:0e:1d:fc:8e:5b:95:53:52:98:
1b:a6:58:53:33:35:7e:15:39:9c:1d:5a:9a:50:75:
7f:b8:d3:95:8a:85:90:25:c0:f4:82:cf:0f:81:af:
e0:d0:26:d7:4a:05:4f:55:a8:d8:83:c6:09:d4:1e:
4a:0e:44:ce:1f:9b:da:23:55:f3:c3:db:21:74:a4:
71:fc:d4:e0:8b:91:24:8c:43:fd:b4:5e:2e:0d:64:
bb:38:64:d4:0f:11:ce:49:60:b0:c3:50:83:c1:ad:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:BE:73:1E:AB:DA:50:21:0C:23:F9:83:43:96:7B:41:DA:39:70
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/C9K-cx6r2lAhDCP5g0OWe0HaOXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.167.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6a:ff:ca:28:62:17:51:13:cf:44:20:2b:a5:0b:31:1e:a4:
ff:be:2a:1f:8f:6e:0e:66:88:f0:6a:80:ab:ff:e2:67:80:ca:
fb:59:eb:be:af:3a:ae:c5:06:e8:af:96:35:d7:47:2a:12:f1:
69:d2:a8:12:91:7c:61:56:0c:27:71:57:b5:cf:a0:96:70:c1:
3e:a6:2a:9a:64:22:1c:63:f6:82:10:88:c6:a7:2d:98:e3:e9:
1e:83:57:9d:d6:c0:19:e1:a2:d3:77:f5:03:d5:02:22:ac:7f:
33:b0:c0:b9:fa:15:70:0e:fa:1c:a4:19:35:6c:96:37:14:e9:
0f:12:94:66:ab:3b:92:f9:31:28:5c:cd:18:18:9c:dc:4e:1d:
e2:62:5a:03:5b:04:ae:92:14:0b:60:be:d4:36:5a:e7:71:8b:
bb:cc:38:ce:68:f5:8e:8d:ff:11:cd:0f:c1:ab:11:21:68:b1:
d2:2c:0a:4b:64:96:5f:9a:38:af:44:1f:1a:c1:97:63:99:36:
4e:05:55:d5:11:ff:1d:30:c7:ed:b8:36:10:42:0f:fa:1b:25:
82:b5:bd:41:e0:55:4e:b6:ed:bb:b9:cc:bb:80:a9:ce:e8:b1:
fc:ee:77:ae:a4:ee:ec:f6:82:31:9f:52:2e:86:e2:43:8f:c2:
b2:c2:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org