Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rIf5TPN9B4GGNS6aesDSeXTsf_s.roa
File: rIf5TPN9B4GGNS6aesDSeXTsf_s.roa (raw, json)
Hash identifier: PmrTVnUs1aPlvH577fU6/U8cfKDw+MUdVwqRpgXuLmU=
Subject key identifier: AC:87:F9:4C:F3:7D:07:81:86:35:2E:9A:7A:C0:D2:79:74:EC:7F:FB
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0908C0F1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rIf5TPN9B4GGNS6aesDSeXTsf_s.roa
Signing time: Sat 01 Jan 2022 16:00:29 +0000
ROA not before: Sat 01 Jan 2022 16:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46664
IP address blocks: 194.31.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151568625 (0x908c0f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac87f94cf37d078186352e9a7ac0d27974ec7ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:a5:c4:4f:90:90:a1:46:c6:c6:c1:9c:61:
5a:a7:f8:dc:e7:17:f3:3b:8e:e4:c7:c1:86:47:98:
2d:39:86:ad:b9:85:80:69:d3:46:36:e1:14:68:7a:
5e:95:66:23:ea:3b:bd:75:35:e4:e4:82:e1:13:3d:
6d:37:16:33:fc:14:9f:e2:88:90:2f:20:cd:ee:40:
d5:f9:27:60:64:6c:de:99:0b:f2:46:c9:be:65:34:
0a:f4:da:0c:10:8c:9f:c8:24:db:62:79:7e:24:81:
a1:d2:fa:26:13:ac:31:83:68:e1:a2:26:92:2a:0c:
11:aa:a4:11:3d:38:55:f0:af:cd:9e:2b:2e:be:7c:
82:cc:96:9f:fd:95:55:32:f8:3c:09:cc:42:9a:23:
05:ed:b4:77:d4:f8:2f:86:b6:7b:db:19:d7:79:8f:
8f:75:95:cc:9d:0e:91:65:d0:2f:8e:11:59:25:f4:
51:2f:b3:29:1d:0d:32:7f:31:83:91:85:ae:ca:4e:
f2:16:bf:32:0e:b3:e1:1f:22:6e:6b:19:f9:8b:a6:
3a:47:23:c6:ff:c0:b1:02:d4:4f:51:56:27:c4:44:
66:6f:3a:cd:43:5f:7f:67:95:09:95:0b:f9:14:d6:
30:5a:63:a9:2a:4c:e2:81:b7:7c:f1:ac:3b:79:a0:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:F9:4C:F3:7D:07:81:86:35:2E:9A:7A:C0:D2:79:74:EC:7F:FB
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rIf5TPN9B4GGNS6aesDSeXTsf_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9c:1b:9e:eb:25:16:c7:12:c3:ec:8d:5c:22:14:64:40:97:
e6:bf:53:b6:c8:f1:b5:a6:2d:d9:32:66:77:63:82:21:af:0e:
fc:09:96:27:19:4c:60:0c:9f:14:d1:69:4c:fe:8d:e9:ea:ae:
43:1a:ae:10:db:3e:e4:1a:76:5b:aa:63:0d:d8:e0:31:66:f0:
0d:d4:f4:cf:b0:21:6a:50:ff:5c:34:ca:72:19:6d:95:4e:69:
03:25:40:5d:43:07:c2:57:d9:39:1d:c7:a4:ad:71:6f:5d:6d:
31:23:c9:b5:b9:d0:60:f1:03:63:6c:94:0b:6c:e5:4d:74:0f:
8f:3f:04:f7:17:4a:36:f5:c5:9f:14:98:70:3c:8b:8b:4f:26:
69:35:9f:76:0e:10:62:7e:14:df:11:db:1a:55:0c:16:7c:94:
8a:20:a3:b9:5e:48:ac:44:b5:2c:91:01:4b:1e:07:c2:04:b1:
fc:44:e7:93:28:25:25:c1:cb:19:fe:7b:4a:a8:2a:2a:6f:55:
1a:01:dc:cf:33:ea:6c:27:85:fc:2d:d2:55:c3:fe:4c:a3:17:
17:50:64:ba:e8:e9:15:f1:15:db:cf:71:5a:d7:8c:3a:92:2c:
26:d6:87:85:3a:7d:d8:f2:9d:44:f3:a9:5a:55:08:0b:97:25:
11:00:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org