Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/dm3GUh67z7w_hXJFLRcswOuK6wM.roa
File: dm3GUh67z7w_hXJFLRcswOuK6wM.roa (raw, json)
Hash identifier: ranK4Qi4P7Bn/AOCwFQqEcgi6vz3z7Z0s/BBidtm4Ao=
Subject key identifier: 76:6D:C6:52:1E:BB:CF:BC:3F:85:72:45:2D:17:2C:C0:EB:8A:EB:03
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0182050294D3E78D1C42028FDB547ABA991A
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/dm3GUh67z7w_hXJFLRcswOuK6wM.roa
Signing time: Sat 16 Jul 2022 03:17:11 +0000
ROA not before: Sat 16 Jul 2022 03:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 193.160.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:02:94:d3:e7:8d:1c:42:02:8f:db:54:7a:ba:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jul 16 03:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=766dc6521ebbcfbc3f8572452d172cc0eb8aeb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1c:24:53:6a:c1:42:ae:0d:8d:29:04:9a:43:
76:90:41:12:51:a4:01:fe:55:bf:d3:9d:69:bc:6a:
0d:4e:09:9d:7f:c2:6d:bd:16:42:00:90:ef:0a:3f:
e6:7d:9a:4f:e5:61:9c:5a:18:f6:d1:90:54:d0:38:
c5:fe:b6:1d:b7:9a:1c:6d:bb:bc:c5:09:16:90:09:
88:b8:0a:5a:02:a6:7c:79:33:d5:fe:99:e0:09:5d:
ee:3c:6c:d3:e0:7d:74:4e:cb:58:89:55:1a:f9:c6:
75:37:9f:ea:00:9c:7a:0b:2a:4a:e2:dc:3c:30:eb:
fe:44:7a:fc:04:e4:8a:91:91:a0:9e:75:91:04:1c:
51:c6:d9:8d:d5:88:19:6d:5a:30:73:83:35:cd:a7:
a6:5e:b9:cc:c1:62:29:b8:95:06:91:cd:60:79:ae:
23:d1:4f:db:b2:46:d0:2c:15:46:f0:a6:dd:32:5a:
8d:6a:9a:03:0e:a6:35:1b:94:f3:2f:25:b5:5a:9b:
e6:22:dd:93:5e:4a:89:04:d8:cb:ba:05:98:5b:b6:
77:6e:5f:11:df:a1:bd:0e:18:98:1f:78:87:74:4e:
e9:fa:e0:ea:c6:96:1a:22:05:56:5e:8c:44:14:e9:
da:dd:fd:1f:37:f1:21:6d:ff:cf:dd:b0:a2:15:31:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:C6:52:1E:BB:CF:BC:3F:85:72:45:2D:17:2C:C0:EB:8A:EB:03
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/dm3GUh67z7w_hXJFLRcswOuK6wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:32:23:ed:7f:ec:dc:82:99:ab:01:65:e6:cd:af:14:8c:b3:
73:c9:e2:dd:5d:f8:3e:51:06:c7:a4:17:0a:51:92:05:82:76:
c9:1f:5b:9f:d6:d6:82:8e:54:87:8b:4a:7a:ea:be:e7:71:b8:
5e:ed:fc:aa:c1:1a:b5:0c:88:23:60:63:7c:ad:a1:e5:2a:df:
ca:5d:aa:b4:1c:e9:16:1c:c2:32:b4:2d:8a:cf:c6:0a:2c:7e:
4c:c6:b7:c2:41:5d:33:6e:58:20:26:cb:c4:f9:2e:6b:8e:63:
fd:af:22:d2:90:23:06:d0:a0:a5:43:67:68:7c:2b:3c:7e:7e:
76:d4:d5:b5:5b:0b:19:84:0f:3b:1c:49:13:61:11:30:eb:ae:
35:be:fc:30:17:8c:87:56:8e:ba:17:c4:79:78:84:50:54:1b:
d0:0a:50:0c:b9:3b:dd:ad:16:dc:19:f5:1a:51:ca:c8:6a:9d:
63:f1:fb:f7:80:1a:de:5e:31:08:a7:42:7f:de:02:8c:64:cd:
a4:23:04:7b:fa:c4:2b:3b:48:27:9f:5c:37:14:14:75:43:2f:
a5:1b:8c:c1:77:37:44:c5:67:77:f1:9f:d1:f4:69:95:19:6e:
91:fd:33:f6:30:6a:ab:f6:b4:cf:a7:5c:38:b6:17:39:73:df:
b4:35:e1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org