Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/fH_DJJ9jWeQNTPDUCMOceJmbf-4.roa
File: fH_DJJ9jWeQNTPDUCMOceJmbf-4.roa (raw, json)
Hash identifier: 0P7kp2Kebxzidq1dEFDZZ3IVqubi7SlovJYihljnSTs=
Subject key identifier: 7C:7F:C3:24:9F:63:59:E4:0D:4C:F0:D4:08:C3:9C:78:99:9B:7F:EE
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 0182EE9B2A0E382DD127F866C7B9F81C01A5
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/fH_DJJ9jWeQNTPDUCMOceJmbf-4.roa
Signing time: Tue 30 Aug 2022 11:55:22 +0000
ROA not before: Tue 30 Aug 2022 11:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34489
IP address blocks: 193.0.226.0/24 maxlen: 24
195.250.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:9b:2a:0e:38:2d:d1:27:f8:66:c7:b9:f8:1c:01:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Aug 30 11:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c7fc3249f6359e40d4cf0d408c39c78999b7fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:93:91:74:31:f2:7e:dc:ce:49:a6:b3:53:
71:1e:c4:44:34:aa:72:d8:88:3a:49:b3:1e:96:9f:
0a:52:95:61:8a:a7:29:18:7c:d4:a7:9f:a5:69:8d:
5b:1c:46:3f:82:53:d5:11:6e:f6:b2:fa:a7:3b:fc:
6e:2a:7e:b5:69:3d:e2:e7:29:4f:6a:f8:f0:9a:6d:
87:94:ec:12:dc:3e:46:db:25:60:b9:8d:b4:b7:29:
b0:eb:f1:29:03:83:cc:8f:ee:bd:43:62:ad:39:b6:
d1:c3:34:96:f7:85:0e:5e:92:47:2c:1f:60:c4:39:
d4:1d:a7:f2:79:55:61:2e:4d:8f:be:06:c8:ca:20:
9d:bd:dc:54:cb:5b:71:44:7f:7d:e9:ff:df:08:6d:
e9:38:7d:34:81:a8:f6:50:bb:12:e5:f4:5a:9a:9b:
f4:4a:4f:bf:3c:52:41:e7:e6:49:9e:2d:a1:41:ac:
be:84:bc:e0:40:e0:6f:e6:5a:7c:1c:49:7c:f0:96:
67:d8:17:99:d4:37:69:26:b6:da:c5:53:16:a6:17:
3c:5c:15:89:4b:a2:3f:7d:da:b7:b4:42:3d:9f:55:
67:38:f0:ac:94:04:03:21:ba:61:88:d5:87:9c:68:
9f:23:91:d7:05:cf:7c:18:0f:93:87:4b:0c:bc:c2:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:C3:24:9F:63:59:E4:0D:4C:F0:D4:08:C3:9C:78:99:9B:7F:EE
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/fH_DJJ9jWeQNTPDUCMOceJmbf-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.226.0/24
195.250.39.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5c:b8:13:af:80:a5:4f:3c:5c:4b:47:89:12:27:9f:e4:9e:
04:7f:89:6b:b1:ec:03:95:12:e4:67:b8:83:66:93:0c:38:9a:
10:fd:c4:7b:28:e8:39:4f:18:7e:61:01:f7:9c:d1:18:cf:b0:
aa:46:64:ad:6c:b1:b0:dd:49:64:28:4d:bd:d5:9b:eb:28:af:
bb:c9:27:0b:22:53:47:19:77:e3:bf:a9:7b:04:bb:2d:43:fa:
e0:70:02:91:8e:c6:24:09:cb:db:80:f7:73:4f:6e:02:c4:f3:
f9:81:4e:fc:52:f5:d6:fc:2d:d5:c2:d4:cd:ab:d5:67:77:45:
1f:70:8e:26:9d:74:71:f7:6c:17:c1:d4:6a:fd:42:3b:2c:58:
39:f3:28:0d:b9:0a:6f:aa:37:a7:f6:88:8e:81:4b:fa:84:75:
17:e3:c2:6c:80:f5:25:19:d4:55:2c:65:f6:d1:c2:e0:a6:12:
7d:a9:0c:e5:88:27:9a:7b:d1:dd:f6:2b:06:5f:57:94:2b:86:
fa:61:87:a0:cf:8a:97:4e:40:ce:b5:c5:24:23:dc:8d:06:29:
a7:7e:40:b0:77:10:1b:9e:08:17:88:89:6f:c3:2c:d3:d0:61:
a4:b6:e6:67:2e:02:21:92:8f:8c:f0:1a:bf:ad:7e:c5:d8:6c:
53:87:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:46 2024 by rpki-client on console-ams.rpki-client.org