Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/44tMQ_chj6ynHaTMo3J_6L2vHjg.roa
File: 44tMQ_chj6ynHaTMo3J_6L2vHjg.roa (raw, json)
Hash identifier: wvXJQGc0qkdVnqoUMo7BtOXbclpuweL9u7jLFEXFvBI=
Subject key identifier: E3:8B:4C:43:F7:21:8F:AC:A7:1D:A4:CC:A3:72:7F:E8:BD:AF:1E:38
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 0182EEC9DBAD46E1507D874D697B3D572407
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/44tMQ_chj6ynHaTMo3J_6L2vHjg.roa
Signing time: Tue 30 Aug 2022 12:46:22 +0000
ROA not before: Tue 30 Aug 2022 12:46:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210755
IP address blocks: 193.200.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:c9:db:ad:46:e1:50:7d:87:4d:69:7b:3d:57:24:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Aug 30 12:46:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e38b4c43f7218faca71da4cca3727fe8bdaf1e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:2c:d7:87:0f:91:9a:7a:1d:b7:bf:11:0e:
f8:18:77:61:63:9b:59:d9:26:39:ed:10:af:0e:9d:
c7:80:7c:94:54:9b:50:5b:f6:f5:f9:5e:78:94:e8:
1f:2b:62:47:26:96:df:4d:54:46:9c:4a:54:ca:db:
89:02:a7:ea:be:d2:f1:10:82:30:7c:81:c4:17:48:
bc:50:45:24:7c:62:03:d2:c5:1d:62:82:ae:07:4a:
ca:d4:8a:9e:9e:b7:f1:db:d5:74:23:68:91:13:10:
2d:31:83:2e:af:0c:0b:de:7f:d7:82:e1:13:d9:79:
c4:f1:93:9e:39:ed:d8:90:87:b5:39:e3:4a:6a:27:
75:92:7f:11:a5:93:a8:cf:e2:3d:61:d9:00:ce:3d:
40:e9:8d:4b:d2:d1:8b:86:c1:58:8e:83:6e:8d:a1:
c3:0d:59:a3:93:ef:2a:02:92:ed:6c:d3:80:dc:2a:
92:b4:70:58:99:6e:a0:1f:5d:af:d9:d3:6e:e4:1d:
a8:9f:22:e0:b5:0e:93:7e:7f:78:a8:7a:2b:b9:9c:
37:f8:10:bd:ee:66:3c:d9:7f:80:a0:1f:2c:c7:20:
07:69:94:6b:5d:a8:a7:30:9e:01:63:11:65:4c:c1:
fd:3e:62:8d:3d:0d:f6:74:fe:ce:ed:d7:ab:89:85:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:4C:43:F7:21:8F:AC:A7:1D:A4:CC:A3:72:7F:E8:BD:AF:1E:38
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/44tMQ_chj6ynHaTMo3J_6L2vHjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7a:5f:dd:57:b7:e6:3d:a1:12:d7:a1:ad:d5:3e:d8:f7:fb:
22:61:88:63:9a:bd:1d:c9:c0:0b:95:2c:2f:a5:89:fb:8a:e1:
69:b2:5f:f7:4f:9e:b3:fc:e1:5e:55:a5:ee:93:a3:92:ea:29:
74:d4:2f:3e:6c:89:ad:a0:47:eb:03:32:ad:30:19:6e:1f:79:
65:76:86:4a:9a:49:6c:0f:0b:dc:0b:c5:0c:f1:a4:71:80:09:
3e:40:5d:be:a7:10:64:d4:69:98:10:d5:6a:32:bc:fc:3e:a8:
6f:26:fd:59:41:95:00:9f:d4:62:19:e2:fc:82:29:4d:eb:d5:
77:8d:a6:df:1d:e9:e3:19:7e:6a:ec:f9:fe:84:02:3b:36:6a:
de:41:d1:a7:e1:6a:f8:e7:f4:0f:9f:c9:ef:01:34:56:bd:a0:
49:79:7a:d0:3a:3a:c1:ec:cb:ed:8d:dd:94:cb:93:f2:52:26:
71:08:ba:3f:13:fc:a5:b4:aa:04:a6:ac:4b:b1:08:0f:f5:da:
f4:dc:3e:a8:63:1a:25:a4:1e:db:36:45:fc:57:3d:f6:c4:1f:
83:45:95:7f:52:63:d7:33:87:d5:86:74:a3:74:d8:60:bb:55:
ef:27:00:f2:61:70:37:84:dd:3b:fd:71:87:9d:32:bd:9d:61:
22:a0:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:19 2024 by rpki-client on console-ams.rpki-client.org