Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4m9ghtCB7ec2eNDIF0770JSFNE0.roa
File: 4m9ghtCB7ec2eNDIF0770JSFNE0.roa (raw, json)
Hash identifier: kuuymKJFeasjcCoJ1gd7fkpYNXOV3OAJ7X5R1kdWut0=
Subject key identifier: E2:6F:60:86:D0:81:ED:E7:36:78:D0:C8:17:4E:FB:D0:94:85:34:4D
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 046782AC
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4m9ghtCB7ec2eNDIF0770JSFNE0.roa
Signing time: Tue 15 Mar 2022 20:31:32 +0000
ROA not before: Tue 15 Mar 2022 20:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39312
IP address blocks: 195.90.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73892524 (0x46782ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Mar 15 20:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e26f6086d081ede73678d0c8174efbd09485344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:9b:27:7b:bd:66:9a:09:05:84:12:82:06:
08:31:1c:8c:1b:d0:2a:21:71:ed:29:38:c0:07:3d:
b0:58:b8:df:13:f1:1c:df:a0:09:47:e6:66:0c:c0:
51:89:0b:64:53:1a:5c:94:4e:29:1c:9c:76:1a:80:
d8:ce:b6:02:d2:29:87:6a:1f:dc:5d:ae:3a:60:10:
c7:20:c1:ae:10:64:c0:40:bc:7d:02:25:69:d3:83:
bf:69:4a:e0:29:81:dc:0c:07:55:33:71:88:67:ca:
dd:ec:d1:92:60:88:83:92:c7:9f:9e:a0:00:2f:bf:
b5:89:ea:d2:cb:37:6e:06:8a:d3:5e:8e:7e:25:1f:
ac:a8:08:63:66:f0:fb:8d:9b:16:ad:27:71:fc:b5:
e6:e5:6c:4f:0f:cb:68:4e:79:1b:b9:b8:1c:46:c2:
39:64:f6:8f:c4:c5:11:75:ac:4a:85:77:7f:12:17:
44:9b:31:b6:14:61:9c:e1:f8:f4:dd:ea:2c:28:0f:
06:7c:82:ae:d1:04:eb:b9:a6:43:d1:fd:67:87:7d:
66:71:67:c1:53:8e:54:16:ac:f2:8c:cf:71:6e:71:
53:27:31:95:5c:88:ea:32:f4:12:bd:8f:78:31:c8:
70:63:f5:41:c8:bf:75:09:ad:3a:39:a4:c3:d1:87:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6F:60:86:D0:81:ED:E7:36:78:D0:C8:17:4E:FB:D0:94:85:34:4D
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4m9ghtCB7ec2eNDIF0770JSFNE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.110.0/23
Signature Algorithm: sha256WithRSAEncryption
59:3d:44:6b:c0:83:e0:11:81:d9:cf:e7:ac:39:d0:27:46:36:
ac:f0:1b:f6:ce:e3:92:a5:74:07:d2:a8:d5:c9:01:a7:34:43:
53:3b:13:e1:2a:a6:cd:2f:5b:d9:de:be:ba:44:ad:7e:4f:5a:
97:13:1f:62:37:38:72:13:05:e9:74:ac:19:11:ce:30:82:d4:
8b:90:34:cc:1b:4c:4b:74:6c:b6:2e:69:59:64:65:7c:2e:34:
8a:96:67:a7:93:18:c8:2f:34:b6:5c:3d:7b:d5:a7:61:c3:12:
bc:8c:49:ff:56:74:a4:bd:9c:04:fa:7c:03:d8:1a:0e:d2:a3:
38:6f:67:3b:2c:0e:07:e8:2d:c9:06:d7:0d:66:a0:d4:f6:5e:
1c:59:10:85:fa:5c:07:85:e2:e0:ef:66:52:cd:ea:d2:ca:78:
35:9b:19:63:55:01:65:1d:06:1b:cb:12:8f:08:93:57:64:5f:
93:65:ea:ed:cd:97:a9:3a:f4:d2:57:99:ed:9f:7b:6f:c8:fc:
bc:25:0f:4c:8b:ae:4d:13:2d:17:1f:82:e8:e3:de:3c:b3:f7:
a8:35:c5:6b:69:9f:bd:a7:6b:72:3d:3f:17:b1:48:fa:13:50:
5b:ec:6c:b7:b2:34:b2:9a:2e:56:2b:af:1c:23:c5:41:b8:c2:
85:f6:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:20 2024 by rpki-client on console-ams.rpki-client.org