Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/sLsCvLWVam73AaOipnXmu7k19KY.roa
File: sLsCvLWVam73AaOipnXmu7k19KY.roa (raw, json)
Hash identifier: Wf9zbqZl9BjEa4my0j8Mc/RbE+jvy8prKxZY4137zNc=
Subject key identifier: B0:BB:02:BC:B5:95:6A:6E:F7:01:A3:A2:A6:75:E6:BB:B9:35:F4:A6
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 046177B6
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/sLsCvLWVam73AaOipnXmu7k19KY.roa
Signing time: Mon 28 Feb 2022 12:45:36 +0000
ROA not before: Mon 28 Feb 2022 12:45:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8308
IP address blocks: 217.9.165.0/24 maxlen: 24
217.9.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73496502 (0x46177b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Feb 28 12:45:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0bb02bcb5956a6ef701a3a2a675e6bbb935f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:6f:79:e8:22:31:57:54:1b:29:16:68:80:
89:66:ab:27:33:66:06:df:7d:e0:18:f2:36:2a:0c:
c8:88:03:90:d6:e3:da:36:fe:47:31:33:a1:d1:92:
d7:d8:6e:03:f9:18:c0:0c:1a:41:a0:ac:7e:6d:ee:
ba:40:77:4a:1d:1f:a7:97:e7:21:4f:60:91:54:e1:
bb:d5:59:f0:a0:cb:90:f7:ca:91:ab:b3:0d:d0:a7:
50:6a:3a:9b:50:f6:f3:b6:37:a8:c4:02:1b:24:77:
2e:eb:27:63:cb:a3:e7:77:87:90:7d:d9:00:78:1a:
d4:f8:7c:f7:82:8f:1b:17:b6:20:b5:93:4a:3f:7e:
a6:f6:c3:2b:1b:2e:f0:ae:31:20:7f:fa:9e:b0:3a:
4a:32:db:8c:0c:cf:0b:f9:c7:41:5b:47:a7:c0:3f:
72:21:0d:28:3e:4a:09:9f:00:d1:63:73:60:e5:a6:
4d:e7:bf:cb:ad:b1:51:c7:a9:fc:61:fd:18:eb:40:
41:54:ea:5a:79:32:1a:21:8e:3b:9a:55:5d:fd:d6:
eb:a5:b7:37:41:66:8c:90:af:dc:ea:eb:2c:94:2b:
4f:3a:af:76:15:1d:54:d3:68:71:1d:9d:b3:89:b5:
32:6f:f9:f0:6e:bb:25:10:8f:cf:c3:f2:1c:ec:aa:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BB:02:BC:B5:95:6A:6E:F7:01:A3:A2:A6:75:E6:BB:B9:35:F4:A6
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/sLsCvLWVam73AaOipnXmu7k19KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.160.0/20
Signature Algorithm: sha256WithRSAEncryption
21:0f:1e:9e:9b:8d:0d:46:76:8f:b0:72:da:ac:b7:35:9f:8a:
f0:d4:9c:8a:72:bb:4f:88:63:2b:e6:50:2b:96:67:26:39:c1:
0d:ea:36:89:a8:dd:e4:7b:07:f6:57:fe:8e:c7:c3:51:2a:de:
98:24:68:9e:e3:35:6f:22:a6:ed:fe:1c:32:5e:0b:74:97:79:
c2:4d:31:6a:9a:a1:2c:77:ac:f8:00:8c:f7:4e:0b:5e:51:76:
18:3f:e7:f2:0a:85:59:9d:c2:73:f3:85:62:4f:32:97:ed:16:
9a:26:60:d3:12:54:c5:71:aa:20:63:c7:71:42:ab:cc:79:b7:
35:9d:2d:72:42:83:6f:b7:c5:a5:ee:51:d8:d6:4e:b9:52:60:
30:b5:e2:31:a4:56:02:ca:dc:2d:09:f1:70:67:c0:01:b8:7c:
c1:16:2f:3f:a9:52:56:2c:1f:3f:69:46:78:e7:20:9a:77:98:
eb:44:d8:57:ba:22:e4:90:05:e1:d3:d2:12:36:6e:0c:4e:be:
42:bf:40:f8:ee:f7:9d:1a:9c:95:3e:9d:1a:37:4b:26:a8:ac:
a2:67:f3:4c:d4:51:fc:f8:df:c0:11:66:42:65:5e:df:91:d2:
18:a1:44:9b:97:84:14:2a:24:bc:d2:09:8a:2d:79:0a:70:9a:
71:d2:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org