Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/AgaSAKREyh0BWSSljFc0gEWtC_c.roa
File: AgaSAKREyh0BWSSljFc0gEWtC_c.roa (raw, json)
Hash identifier: Azq4TIZlguPXwbfE0N0ToNdaXql/29dGgtKg6pC3Xgs=
Subject key identifier: 02:06:92:00:A4:44:CA:1D:01:59:24:A5:8C:57:34:80:45:AD:0B:F7
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 01838279DF5C85FCF5229C11C711DF9F4028
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/AgaSAKREyh0BWSSljFc0gEWtC_c.roa
Signing time: Wed 28 Sep 2022 05:02:48 +0000
ROA not before: Wed 28 Sep 2022 05:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 194.145.240.0/24 maxlen: 24
194.145.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:82:79:df:5c:85:fc:f5:22:9c:11:c7:11:df:9f:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Sep 28 05:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02069200a444ca1d015924a58c57348045ad0bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:17:94:f0:56:bb:8f:05:b2:96:88:e6:23:
da:ab:5e:b0:1d:6e:a1:94:e1:5a:bd:9e:d5:48:40:
9f:bf:99:f6:04:3e:14:fe:c1:37:d1:74:36:39:58:
69:a9:c1:10:3f:a2:d9:bd:9b:57:23:ea:d6:12:b3:
e4:02:91:e9:b5:95:f3:b9:4a:b4:81:48:6e:68:54:
71:8a:fd:3e:f6:a8:08:b9:f8:c3:4d:f9:50:87:e1:
34:93:c5:02:e3:2a:7f:5e:97:a7:83:09:8f:3b:cb:
95:c0:30:06:f1:15:c2:d3:ae:10:ae:ba:20:a7:66:
85:bc:10:0f:f1:74:5e:96:91:05:46:82:e2:c3:fa:
30:20:0c:ef:6b:08:ad:ad:dd:d9:23:16:5b:24:bb:
1e:99:69:64:08:e7:f3:9a:20:6b:fd:05:32:a1:e9:
f0:0b:ab:e6:24:18:5d:51:b2:cc:11:eb:06:55:66:
5d:7d:25:4e:42:3e:da:d3:7b:0a:07:f2:c8:f8:49:
68:23:22:57:f0:d3:b0:33:33:a0:9f:6b:75:25:62:
88:4d:28:29:e8:f3:3a:e7:51:21:1f:5c:c5:b7:bd:
22:32:eb:52:03:1e:33:49:a4:8d:c1:f7:3d:9a:25:
27:db:da:bb:02:9f:f0:e8:c4:89:46:92:2f:1a:17:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:92:00:A4:44:CA:1D:01:59:24:A5:8C:57:34:80:45:AD:0B:F7
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/AgaSAKREyh0BWSSljFc0gEWtC_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.240.0/23
Signature Algorithm: sha256WithRSAEncryption
82:8b:6a:23:01:d2:0e:aa:8e:24:ba:c6:7b:51:7f:8e:c2:5b:
90:00:f7:2c:c3:8d:41:5e:de:06:58:48:e3:55:c5:49:f0:d2:
5d:b6:51:03:01:7d:5c:6e:39:a2:fb:7b:98:bf:87:f4:58:76:
4a:12:74:23:97:fb:b2:bb:a9:65:11:51:19:ad:b2:f3:ac:fe:
04:69:8a:4f:f0:da:ba:08:dd:48:58:3e:51:62:3c:93:72:2d:
94:7c:7c:85:11:a4:e0:de:1f:f0:e9:66:22:8e:56:70:33:29:
90:1d:f5:21:ad:5c:b4:9f:4f:fd:f7:13:a5:5e:44:1e:e3:87:
20:65:00:b1:f4:89:99:f5:fc:f2:f3:ed:c6:bc:f3:32:5a:90:
ce:32:97:1b:fb:c0:e1:14:73:44:76:0a:a9:2e:6a:b8:68:d0:
8b:87:72:8b:9b:f0:5f:f0:09:42:e0:56:4d:77:d1:a4:ce:a4:
30:1e:9c:a7:39:92:32:74:5c:18:0a:71:0a:22:28:c4:9a:a7:
16:44:5a:7b:bb:41:9e:8a:30:e5:a4:ac:de:3d:51:05:d6:7d:
6c:2f:7c:d1:1a:48:99:ee:c4:73:0f:96:a7:73:9e:15:e2:c1:
ab:1e:90:a7:c1:6f:50:2d:90:23:a1:2b:40:fb:7a:c8:09:c4:
ef:3c:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:14 2024 by rpki-client on console-fra.rpki-client.org