Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/cC9N-kjn-gmL6nZhsM-gMu5WDHg.roa
File: cC9N-kjn-gmL6nZhsM-gMu5WDHg.roa (raw, json)
Hash identifier: tthNMcbgOF0LK8qNZqFw7V6hSUdgcobT+Os4Cbl17BY=
Subject key identifier: 70:2F:4D:FA:48:E7:FA:09:8B:EA:76:61:B0:CF:A0:32:EE:56:0C:78
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 052FCF01
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/cC9N-kjn-gmL6nZhsM-gMu5WDHg.roa
Signing time: Sat 01 Jan 2022 04:51:45 +0000
ROA not before: Sat 01 Jan 2022 04:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197742
IP address blocks: 193.105.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87019265 (0x52fcf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Jan 1 04:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=702f4dfa48e7fa098bea7661b0cfa032ee560c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:db:07:1a:d6:76:cb:90:ac:71:7d:44:7b:
3c:90:5c:a6:5b:68:80:ef:02:e1:b2:eb:b4:95:e8:
00:dd:6d:67:da:7e:c1:96:9a:ad:60:ec:13:af:f3:
0e:a5:44:24:3d:cc:48:bc:d3:a6:6b:4c:e2:c1:4a:
d1:dd:e4:dd:1b:36:f1:38:d0:28:47:8e:01:af:43:
e4:4c:56:4d:cc:4f:90:48:af:e9:d7:6c:2c:67:ce:
86:46:93:3f:3d:c0:66:07:3d:be:06:4b:b8:10:5b:
81:f3:c5:9e:53:9e:d9:a5:12:a1:46:e7:ef:ca:50:
18:02:a2:2b:4e:16:8c:ac:16:5e:dc:92:7b:d6:17:
79:8a:e0:a8:70:f6:f0:76:d1:45:4d:61:48:3c:c4:
ea:f4:39:5f:71:76:c6:e6:f3:52:29:3c:0f:7a:45:
8e:87:33:47:2c:65:9c:8a:0c:2f:1e:1f:da:99:a6:
d3:05:2c:4e:3a:34:7f:b4:4c:63:24:c7:40:c9:9b:
05:78:89:43:57:3a:cd:0c:a9:3d:52:33:78:4c:ed:
71:5e:42:70:71:8f:d5:9c:1d:d2:6f:e6:4c:8c:16:
27:ce:09:d1:c1:55:8c:5a:1a:29:db:77:09:22:3c:
dc:4e:13:19:d1:d3:a5:65:45:c7:e3:0d:e8:bd:d6:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:4D:FA:48:E7:FA:09:8B:EA:76:61:B0:CF:A0:32:EE:56:0C:78
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/cC9N-kjn-gmL6nZhsM-gMu5WDHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
09:77:b5:f7:af:36:d9:af:ec:50:8d:09:17:3d:65:28:51:2a:
2f:e3:99:bf:b1:1a:1a:c9:28:7e:38:46:03:dd:6b:5e:19:70:
87:81:2a:26:51:61:30:6d:f8:e9:0f:ed:87:5a:a5:d7:42:b8:
36:e3:2c:18:66:7c:81:b0:d1:35:b3:55:6e:77:2c:ba:86:8a:
9b:24:b1:81:df:54:b9:51:4e:e4:d0:b8:83:87:64:0d:4a:55:
03:bb:d3:00:35:e5:53:21:3f:cd:d6:08:65:1f:ff:25:7a:0d:
a7:43:03:1f:8b:31:45:b7:fd:e6:8b:25:4d:7a:0b:02:16:8e:
4d:73:b5:19:97:33:41:4b:e7:a2:54:6e:0d:95:ff:53:85:02:
0d:9a:08:a6:0b:29:b0:e7:68:45:8d:48:c3:8b:8e:d5:ca:21:
a3:ee:bd:97:71:20:ba:4c:9d:9a:16:8c:81:f4:02:4c:30:41:
03:f5:74:a0:b3:25:b5:7b:df:fa:fa:a5:a0:41:9f:05:24:8d:
b1:e7:2e:dd:40:8c:46:f8:64:f5:8e:b1:47:4c:b9:11:92:da:
c4:8d:b2:85:90:96:93:e2:fe:cd:cf:48:62:c8:1a:ad:52:22:
fb:48:f0:b7:15:5c:4a:57:10:27:be:94:e6:c3:96:d4:9d:f6:
51:02:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:19 2024 by rpki-client on console-ams.rpki-client.org