Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/b9ZXbLCY_A5CVnX4K8mTtYzL56c.roa
File: b9ZXbLCY_A5CVnX4K8mTtYzL56c.roa (raw, json)
Hash identifier: 7o0ULeETf6rMdIWntidSOJJJHBiG5VaETC992Eyd4IA=
Subject key identifier: 6F:D6:57:6C:B0:98:FC:0E:42:56:75:F8:2B:C9:93:B5:8C:CB:E7:A7
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 10BBB7EA
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/b9ZXbLCY_A5CVnX4K8mTtYzL56c.roa
Signing time: Sat 01 Jan 2022 15:06:14 +0000
ROA not before: Sat 01 Jan 2022 15:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41778
IP address blocks: 194.50.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280737770 (0x10bbb7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Jan 1 15:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fd6576cb098fc0e425675f82bc993b58ccbe7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b8:aa:ff:98:e9:9c:7a:59:ae:10:b5:37:0c:
ed:8a:d2:d0:68:1c:27:d7:24:bc:32:01:a0:8e:8f:
49:1f:cb:f0:27:20:5d:31:06:8d:3e:29:43:de:41:
34:fe:07:77:7b:29:72:a9:2c:02:8e:2a:44:38:5f:
08:ff:5f:06:25:56:1e:7b:2f:7c:7a:66:88:fa:ea:
a9:7e:69:a9:86:48:6b:cb:45:5c:9f:4f:01:a1:31:
cf:79:0f:66:2c:77:02:f7:fe:7e:86:9c:38:bb:48:
ea:3d:3c:73:65:ba:eb:bb:3b:1a:26:9c:cd:d7:e7:
a9:eb:eb:88:8d:89:8e:0b:70:bc:1c:b8:ea:d3:8c:
ac:6c:98:ab:10:70:5e:b9:83:4e:6b:96:a4:a7:9f:
64:7a:19:3e:99:89:25:9b:09:69:53:c2:14:44:85:
05:e3:89:86:fb:d0:03:b0:0b:18:42:47:cc:1b:a0:
86:25:5c:6d:9c:80:16:f4:89:57:a8:f5:80:d8:2b:
5c:dc:e2:b1:8a:df:c6:9a:fc:79:19:32:3b:6a:b8:
10:e0:20:4b:59:2a:8a:56:77:41:d7:3b:1a:16:16:
2e:d8:87:6a:72:bb:bf:f7:91:d7:37:2b:0d:26:c0:
61:55:fd:d5:09:35:2d:4f:d1:ce:db:f3:12:47:53:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D6:57:6C:B0:98:FC:0E:42:56:75:F8:2B:C9:93:B5:8C:CB:E7:A7
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/b9ZXbLCY_A5CVnX4K8mTtYzL56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:86:d5:9f:22:e9:5f:94:f1:5e:3f:cc:69:9c:c0:67:06:b8:
58:46:41:e6:13:e0:94:2e:64:a2:89:a2:a5:ed:b7:77:67:9b:
6a:a6:b6:83:00:7e:53:95:52:4c:50:fc:e8:0d:bf:d3:3f:02:
88:5b:3e:7a:05:de:30:80:32:cb:dd:3b:9c:1c:30:86:b4:b7:
ca:74:e7:9d:b0:bf:29:aa:a5:84:94:56:1a:2a:16:b3:91:44:
03:87:7b:83:51:c3:d6:f2:8c:b9:e0:85:23:53:cf:4e:19:27:
ac:87:33:1f:6a:52:1c:f4:d5:b0:0a:5e:fb:c2:e9:54:32:1b:
bc:58:ab:dc:f1:f4:d3:94:76:a2:fe:84:c6:64:82:ff:cb:49:
76:02:fd:14:4c:ec:11:3d:75:92:b0:e8:61:f6:fb:0a:91:46:
44:9e:9c:10:e4:92:ff:aa:9d:d5:39:ab:22:d3:c9:01:16:fc:
57:2f:d7:e8:21:cf:b2:7a:ca:9b:19:92:5a:8d:64:a0:bd:b2:
0a:92:a7:49:dc:3d:b1:73:c0:f2:75:b1:c2:08:e6:ac:65:02:
62:02:27:7d:a8:f4:76:fc:a0:82:81:ca:c1:6e:e2:9c:d4:1e:
66:c5:a3:d1:fa:cc:90:bc:bf:11:7e:ef:f7:23:fb:7b:58:f0:
91:22:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:27 2024 by rpki-client on console-ams.rpki-client.org