Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/url9ES2dn-2GXqH0zRMvagg_USk.roa
File: url9ES2dn-2GXqH0zRMvagg_USk.roa (raw, json)
Hash identifier: nfksb6/Nw8FLS3JZpfN5ONHy1EogqGfC9qGrIHiuxKY=
Subject key identifier: BA:B9:7D:11:2D:9D:9F:ED:86:5E:A1:F4:CD:13:2F:6A:08:3F:51:29
Certificate issuer: /CN=178e2fe21da20235e99ec43c19381c7c6d63a3ad
Certificate serial: 013652
Authority key identifier: 17:8E:2F:E2:1D:A2:02:35:E9:9E:C4:3C:19:38:1C:7C:6D:63:A3:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F44v4h2iAjXpnsQ8GTgcfG1jo60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/url9ES2dn-2GXqH0zRMvagg_USk.roa
Signing time: Sat 30 Apr 2022 18:14:10 +0000
ROA not before: Sat 30 Apr 2022 18:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8849
IP address blocks: 5.42.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79442 (0x13652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178e2fe21da20235e99ec43c19381c7c6d63a3ad
Validity
Not Before: Apr 30 18:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bab97d112d9d9fed865ea1f4cd132f6a083f5129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:09:99:91:20:f7:10:f5:40:2a:33:53:b9:
b7:92:d3:17:c5:09:e6:2c:cc:6d:22:7c:14:ef:4f:
70:1d:ba:54:59:6b:e3:ca:3b:84:c7:5c:07:85:94:
fc:ee:c3:0a:9b:6d:cf:ba:25:e1:74:50:57:89:ed:
38:5b:bc:b4:73:1e:13:ec:4b:34:8e:9f:2d:08:d2:
81:69:01:b2:00:1f:00:6c:a7:54:d5:81:cd:3b:8e:
2f:78:04:e6:9b:b6:e9:1b:2e:46:da:af:e9:a1:0f:
4e:5a:bc:e8:43:cc:5e:f3:e9:1c:32:77:a4:18:2b:
86:c6:dc:67:94:ed:77:ab:c0:45:f3:a1:ff:9c:25:
e1:55:97:c4:79:04:e9:e7:d3:b4:a7:5e:0b:83:0c:
0b:90:94:5d:76:24:47:3f:12:2e:e3:b9:f2:c5:86:
2c:08:65:c1:1d:f9:9b:94:65:f8:55:dd:dc:da:c0:
91:95:bc:e1:b4:b3:f7:59:3d:92:5e:fb:d5:d3:37:
29:89:52:b6:fe:78:00:db:ec:4c:6a:cc:94:49:0b:
cf:51:b4:12:ae:78:13:e6:b8:a3:50:b3:b7:08:5b:
b3:36:a2:d7:82:ba:01:d2:60:44:c8:10:b1:06:d3:
80:e6:16:be:a2:8c:b2:60:e1:5c:36:ca:6d:52:41:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B9:7D:11:2D:9D:9F:ED:86:5E:A1:F4:CD:13:2F:6A:08:3F:51:29
X509v3 Authority Key Identifier:
keyid:17:8E:2F:E2:1D:A2:02:35:E9:9E:C4:3C:19:38:1C:7C:6D:63:A3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F44v4h2iAjXpnsQ8GTgcfG1jo60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/url9ES2dn-2GXqH0zRMvagg_USk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/F44v4h2iAjXpnsQ8GTgcfG1jo60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1a:72:eb:f6:af:ff:e6:c0:76:66:5f:c0:fc:89:b1:e8:22:
cc:54:0e:02:83:1a:6b:bf:8f:9f:43:e7:74:48:95:57:a5:fe:
e7:55:60:d7:ef:10:5d:a3:40:9c:ca:03:9e:94:3f:85:7f:6b:
41:fa:4f:dc:8f:1a:da:be:f4:e2:46:27:86:d4:e8:d2:9b:f7:
5e:21:5e:a4:8e:74:bb:72:14:aa:8c:ae:8a:dc:2f:bb:89:b9:
d0:01:26:f1:57:b1:27:6e:0a:00:bf:1c:0a:bc:eb:8d:61:80:
28:7e:7e:84:88:78:8b:1f:89:e1:bb:72:7e:95:73:9f:07:c8:
89:c1:4a:45:e9:d2:49:d1:ec:ea:73:1c:e4:37:9d:77:08:c8:
5a:c6:41:70:9d:0c:c2:5e:e3:cf:07:de:34:31:f3:4f:1a:08:
30:59:db:46:7e:ca:dd:97:34:77:10:f3:3c:d2:88:fb:49:c7:
d0:bb:db:71:de:13:fa:7c:6b:e5:e5:49:cb:87:f6:fe:41:46:
a6:21:0f:1a:fa:a1:3a:e2:7e:cb:da:19:7a:6e:5b:ed:86:ef:
36:f1:f2:ec:13:88:5a:9b:e9:95:56:11:77:0d:2b:55:9c:34:
33:b1:fa:b5:7f:45:75:92:6a:80:b0:7e:56:64:26:75:c2:0a:
eb:99:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:23 2024 by rpki-client on console-ams.rpki-client.org