Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/cr14VOiNI_AXTWdFK9Ny3Y9xkwQ.roa
File: cr14VOiNI_AXTWdFK9Ny3Y9xkwQ.roa (raw, json)
Hash identifier: fTKKi8aZWYrAWkYKlRzb8Jo7qs3pFOVStJGlmlRh7aE=
Subject key identifier: 72:BD:78:54:E8:8D:23:F0:17:4D:67:45:2B:D3:72:DD:8F:71:93:04
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 018456052C5DBFE97766AD18055C8EC7CF0E
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/cr14VOiNI_AXTWdFK9Ny3Y9xkwQ.roa
Signing time: Tue 08 Nov 2022 06:54:50 +0000
ROA not before: Tue 08 Nov 2022 06:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209938
IP address blocks: 93.189.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:05:2c:5d:bf:e9:77:66:ad:18:05:5c:8e:c7:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Nov 8 06:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72bd7854e88d23f0174d67452bd372dd8f719304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:4a:6b:af:1e:1e:ba:04:50:02:a3:3e:89:
c7:fe:81:4d:b6:d8:70:94:d9:8e:5c:71:31:c0:34:
16:bd:58:14:23:9b:77:8c:de:89:4c:30:f9:51:38:
44:b2:1c:4e:82:e1:b0:c9:2e:b3:30:69:c7:8d:5d:
0a:cd:da:56:3d:15:af:2b:09:63:12:1b:26:fc:2a:
77:fe:d6:4a:8a:af:4d:2b:2e:26:22:d5:00:02:e3:
56:e4:d5:31:fb:d6:e9:a7:6f:eb:95:ae:83:62:46:
71:82:62:f1:a8:a1:ae:bf:07:1e:b6:7a:e0:06:8d:
fd:0c:4b:e6:96:2b:c7:74:d6:f7:e9:bd:94:df:20:
6c:18:4c:a6:66:ba:b5:b1:fc:99:3c:a4:88:6d:b6:
99:51:a8:a9:3f:6b:45:67:e9:1b:e7:73:25:0b:5e:
c5:3e:62:4a:c9:f3:11:3c:c2:52:a7:06:c1:68:f4:
a8:02:c8:81:d7:45:50:3b:a7:e0:94:74:ce:3e:56:
58:db:77:8b:84:24:b6:8b:6c:45:2f:ce:e9:bb:ac:
18:87:ab:4d:bb:cb:89:8c:7a:4d:28:9c:47:76:0c:
3c:23:30:47:61:07:5a:bf:09:8d:ca:34:08:43:51:
8c:ba:b7:5c:f6:20:07:9e:8b:14:1d:75:06:e2:3e:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BD:78:54:E8:8D:23:F0:17:4D:67:45:2B:D3:72:DD:8F:71:93:04
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/cr14VOiNI_AXTWdFK9Ny3Y9xkwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.124.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:6c:58:30:47:57:84:f0:4e:dc:85:f0:81:ec:ab:31:ef:7b:
cf:8a:5e:df:be:8c:e6:a3:e5:e8:a4:15:0b:3a:6c:09:d1:63:
bc:a2:39:4c:85:92:c7:5e:86:79:f9:b5:3c:2f:80:8d:1f:84:
05:0e:0e:4a:51:c5:72:4c:de:79:45:4d:62:44:bf:02:24:e2:
2b:9c:b5:99:93:a9:a3:f5:03:c6:f0:5d:bd:e1:a0:67:89:e7:
fe:46:21:50:3d:94:80:68:e6:aa:55:78:ac:a1:75:53:68:3c:
28:92:c0:03:e5:b8:2b:a6:70:f0:4b:dd:70:10:97:15:92:65:
87:d1:8e:5d:03:80:4d:b6:0d:ed:9a:31:bd:2a:e2:11:36:95:
43:1b:12:4c:60:9b:40:85:ae:13:64:9a:f6:e8:c4:a0:54:8e:
f4:4a:b8:b1:66:cc:7c:1e:29:04:5a:28:b3:9c:36:2c:8a:6d:
e5:49:cf:32:2b:37:4d:b0:23:e4:ce:b5:0c:50:c8:45:30:d7:
76:5b:5d:86:11:3f:b7:9f:8b:52:ae:ff:61:5e:49:df:2b:83:
22:e0:cd:c0:0b:f5:44:64:44:15:fe:94:01:b3:b1:8e:83:c1:
82:36:9c:29:74:25:c4:50:e8:71:eb:fb:ba:d5:62:ab:65:fc:
4b:42:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:56 2024 by rpki-client on console-ams.rpki-client.org