Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/hmMkGXVCDlFlZs6LJ_KrQpa2iKQ.roa
File: hmMkGXVCDlFlZs6LJ_KrQpa2iKQ.roa (raw, json)
Hash identifier: 0zNdQkdHPY+IsDFXlJk18/bS1tBRVIAfpFVbL0jSFOc=
Subject key identifier: 86:63:24:19:75:42:0E:51:65:66:CE:8B:27:F2:AB:42:96:B6:88:A4
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 8B9607
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/hmMkGXVCDlFlZs6LJ_KrQpa2iKQ.roa
Signing time: Sat 01 Jan 2022 02:51:14 +0000
ROA not before: Sat 01 Jan 2022 02:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.33.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9147911 (0x8b9607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Jan 1 02:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8663241975420e516566ce8b27f2ab4296b688a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:c2:4b:e3:23:c1:16:53:c1:64:86:01:a4:
f3:2d:36:50:f8:86:bd:c0:67:fb:c5:f2:e9:1b:48:
72:97:a2:e1:60:46:38:93:5a:6b:55:0a:4b:f8:03:
7c:34:95:aa:e6:e6:b1:be:ab:b8:14:32:52:45:36:
ab:47:d5:33:5c:9b:d0:c1:eb:61:06:7b:91:8d:e0:
b7:d3:28:b1:38:59:d5:f1:c4:e6:83:99:42:c2:87:
8f:f8:fc:94:c3:83:ad:70:77:64:f9:bf:c9:de:2d:
14:e0:c4:42:17:39:f3:4d:d4:ef:b2:e3:c4:65:5b:
a0:61:54:d8:3e:62:d0:04:e9:3e:e6:db:f1:a4:b2:
cc:e3:f0:e6:75:87:d0:63:03:e3:66:20:8d:5f:8e:
f8:f4:71:48:76:d2:23:54:4d:ea:0e:e9:cd:1c:39:
72:e7:6d:01:84:7d:8a:26:22:77:44:8e:33:37:ff:
e8:86:c9:27:cc:09:43:b7:8f:f5:63:2f:3c:99:5c:
aa:25:8f:55:9f:2b:4b:ee:39:e5:d3:df:9e:80:cc:
7d:ce:19:2c:41:44:e4:87:a0:87:05:75:ad:b0:2d:
f3:c8:8b:3f:b0:79:f9:8d:6b:22:e5:76:39:46:15:
fc:3c:00:7b:44:5a:82:64:b6:d7:5a:43:89:e0:c4:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:24:19:75:42:0E:51:65:66:CE:8B:27:F2:AB:42:96:B6:88:A4
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/hmMkGXVCDlFlZs6LJ_KrQpa2iKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.183.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cb:a4:fa:d7:52:19:19:9a:76:a4:bd:10:6c:2e:11:cd:91:
eb:f5:d1:67:5b:65:8e:ec:f8:77:bd:81:b4:72:bf:d0:02:ad:
21:10:ee:fa:48:32:cc:29:31:cf:15:f8:3c:0a:4e:76:ae:b1:
11:a4:e4:b6:07:ec:ff:c2:80:29:c5:3c:b2:c1:fc:c5:b0:56:
76:99:1a:9d:70:0f:54:ca:e3:76:77:e2:13:42:b0:34:38:76:
13:04:f3:c1:c9:95:af:c4:4d:55:37:d9:c4:9b:26:b8:7a:c8:
59:e0:37:81:72:1e:74:a7:e8:63:1b:c9:fa:e1:cb:03:ae:95:
ad:9c:89:59:80:87:ec:c7:ef:99:b0:4b:c8:9d:3f:82:a9:bb:
77:cd:fc:b1:32:1e:37:ff:a9:58:7f:8a:cc:b3:24:27:90:10:
4f:8c:9a:ff:c4:a0:a2:96:b5:95:2d:6a:39:24:52:3e:2c:c1:
db:79:33:c5:fb:c3:5c:86:20:b5:d2:cd:5e:42:35:4a:fc:3e:
8b:d5:74:67:3a:ac:22:c0:31:78:8e:c8:69:28:60:6a:1a:84:
30:20:52:5e:e1:c1:4c:04:1b:63:e1:f0:e4:09:da:53:77:46:
9a:5e:ab:79:8f:53:37:87:1a:f7:12:a6:19:30:15:21:55:05:
f5:13:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:43 2024 by rpki-client on console-ams.rpki-client.org