Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/CDm9SjTmPgtntOwNE0_eN9N0_Mc.roa
File: CDm9SjTmPgtntOwNE0_eN9N0_Mc.roa (raw, json)
Hash identifier: MXePNNatK7FjGxyTzvOqiYdL5Tqv04xD/QvS9S+RaIc=
Subject key identifier: 08:39:BD:4A:34:E6:3E:0B:67:B4:EC:0D:13:4F:DE:37:D3:74:FC:C7
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 8A6B76
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/CDm9SjTmPgtntOwNE0_eN9N0_Mc.roa
Signing time: Sat 01 Jan 2022 02:51:14 +0000
ROA not before: Sat 01 Jan 2022 02:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2830
IP address blocks: 194.33.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9071478 (0x8a6b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Jan 1 02:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0839bd4a34e63e0b67b4ec0d134fde37d374fcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:8b:aa:60:91:55:2f:35:86:a1:8a:c6:1f:
a4:0f:77:6e:14:9a:a0:64:f6:4b:f2:f6:d6:c9:e8:
84:bc:62:da:9c:70:84:ba:fc:3d:68:26:e8:9c:f9:
1b:e0:47:31:c7:54:5e:ce:53:b6:33:43:5b:06:61:
6a:e4:5d:fb:2a:79:17:23:b1:0e:52:31:24:14:2a:
97:10:a9:e4:a2:d2:ed:ef:bd:89:ac:99:3e:83:a8:
6a:6c:61:3b:31:1d:97:78:af:38:57:58:5c:0e:a2:
17:a2:7a:5c:f9:09:32:38:a1:2b:41:bd:86:ea:a7:
51:5c:a6:c5:92:29:42:a8:18:18:b3:9f:7d:0d:17:
7a:ed:d2:1e:3a:b6:2c:43:7a:f0:1f:f6:10:5a:ea:
48:fd:4a:81:7e:fa:10:d7:4d:58:f8:c8:58:88:cb:
f2:c1:bb:81:01:b5:43:2b:26:ed:39:2b:e2:d1:f2:
1c:34:5b:b1:28:d2:be:4e:27:89:4a:d1:4f:b1:b5:
5a:f6:3c:00:68:37:55:34:8d:3a:dd:65:df:9a:c0:
d7:dd:0a:87:c8:39:de:3d:d2:24:0d:fb:0c:b1:64:
44:ff:e5:fd:01:ed:d9:d4:ce:72:c5:81:c9:0d:d6:
0e:40:55:4c:3c:6b:8a:43:f5:af:e8:cd:e6:cd:f0:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:39:BD:4A:34:E6:3E:0B:67:B4:EC:0D:13:4F:DE:37:D3:74:FC:C7
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/CDm9SjTmPgtntOwNE0_eN9N0_Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ca:8a:36:ca:37:e1:73:d9:84:f5:29:ea:87:8a:8c:09:0a:
c5:95:49:ae:c9:80:c4:a4:f5:e4:35:ba:02:55:cb:61:8c:bd:
5a:03:c6:4b:87:49:fe:08:2f:c0:88:0f:94:ab:ff:17:18:df:
5a:e8:f2:b9:e8:a0:c1:53:56:b8:b7:5c:62:31:6c:31:b8:a7:
78:8b:13:20:ca:8f:53:ab:c3:9b:9c:9f:86:5f:34:7e:83:f8:
da:f2:93:ad:39:c5:f4:bb:22:2f:ef:d6:7a:a8:2e:56:93:e2:
b0:44:81:b3:8b:06:09:06:aa:67:21:12:1d:32:0a:14:65:70:
65:8b:73:6a:5c:09:b4:51:28:b7:7c:36:04:3c:d1:91:03:2d:
ab:ea:21:19:40:b9:f7:f4:5d:a1:73:bb:98:66:aa:6a:6b:5f:
3e:59:08:b8:8f:0f:85:7b:f5:aa:97:65:17:1a:de:7e:2e:2a:
7d:2b:09:aa:0e:db:d2:cf:34:49:c6:10:c8:35:b3:1f:6b:19:
fa:60:6a:37:4e:ea:09:02:6b:cd:1a:76:d7:47:2d:b6:76:45:
d0:49:65:b2:f8:ff:b8:de:55:94:0a:af:98:f9:bc:92:cd:c8:
40:e2:0e:b8:f4:2c:1f:d5:f5:92:53:41:e4:09:c1:3c:bd:78:
34:fe:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:42 2024 by rpki-client on console-ams.rpki-client.org