Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/I80HhAbqKDFitWxfPkqEUNFC_F4.roa
File: I80HhAbqKDFitWxfPkqEUNFC_F4.roa (raw, json)
Hash identifier: kFavVdufEzowno+1RR+COstkGO8jaOEhhVmw3cVKlH4=
Subject key identifier: 23:CD:07:84:06:EA:28:31:62:B5:6C:5F:3E:4A:84:50:D1:42:FC:5E
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 05710EAF
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/I80HhAbqKDFitWxfPkqEUNFC_F4.roa
Signing time: Sat 01 Jan 2022 05:53:05 +0000
ROA not before: Sat 01 Jan 2022 05:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213144
IP address blocks: 194.76.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91295407 (0x5710eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jan 1 05:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23cd078406ea283162b56c5f3e4a8450d142fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:6f:33:93:e5:ae:16:61:2e:46:e0:22:d8:
73:0a:58:d1:8c:a9:25:43:bd:b4:dd:fa:f1:35:5e:
a4:62:4e:6f:d5:b0:af:ac:4d:88:34:10:cb:54:50:
aa:6d:74:e0:05:40:87:8e:a8:d1:62:04:72:53:68:
39:0f:ca:88:5f:c5:0b:75:76:1c:2b:42:41:2b:e1:
06:d3:dd:ea:70:4b:94:33:52:82:b8:55:b0:0d:f8:
7f:d1:5d:17:af:3c:dc:df:c6:ac:22:9d:ed:84:b7:
3a:47:73:21:f7:23:a8:f4:f8:6a:dd:32:0f:a4:d6:
53:96:bf:0a:c8:5c:31:2c:34:af:70:c2:29:2c:c2:
9b:93:8f:37:bd:db:11:92:3d:a8:08:34:d4:39:88:
b9:e8:ae:e4:d3:02:8c:76:7e:67:42:c1:0b:44:9d:
ca:74:20:ef:0c:51:db:86:46:d8:86:37:ac:5d:af:
4c:04:d3:82:0b:aa:92:4f:33:13:84:b6:bf:ca:9f:
c2:5d:09:a7:7e:43:d3:a5:b5:4a:5e:ea:8f:8f:f4:
ca:b5:5d:ea:88:da:fd:1d:23:36:8c:e6:51:5d:8a:
8f:f8:2e:0f:c8:65:85:2d:72:13:11:4b:9c:58:9d:
bc:c2:25:e9:72:18:07:50:42:29:23:53:40:9c:cd:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:07:84:06:EA:28:31:62:B5:6C:5F:3E:4A:84:50:D1:42:FC:5E
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/I80HhAbqKDFitWxfPkqEUNFC_F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7c:67:e8:e3:39:4b:5e:0e:4b:cd:32:fa:7e:b3:4b:0f:01:
f0:34:c2:55:5c:4f:e5:19:75:09:ec:41:9a:b3:48:4b:20:7e:
9a:1e:cb:85:2b:bd:e1:57:9f:e9:02:a5:3b:24:3e:9c:9e:da:
2e:bc:00:0f:70:87:ef:33:43:e4:06:30:80:16:a4:ad:5d:51:
5f:6f:d9:0f:e1:6d:23:12:d8:56:a8:1c:e4:c1:9a:de:fd:fa:
36:12:28:23:88:60:b3:43:04:8e:f4:ab:75:ed:b1:24:9e:a5:
f2:ae:dc:df:7c:0a:1d:dc:d3:1f:65:f1:08:87:a1:3a:b9:fd:
a7:fa:8c:21:7f:7c:4b:eb:85:f1:3a:03:5c:8e:68:99:55:d7:
d7:fb:6c:9d:81:28:cb:9f:90:b1:53:2c:86:1d:df:fd:fd:8c:
85:fe:78:ab:23:1c:14:c6:38:87:3a:32:f3:25:89:ac:b1:a1:
82:ed:70:0e:5e:ae:da:6a:99:25:b8:14:e5:87:a4:5d:2c:a1:
80:67:5b:ea:ca:84:06:2e:3b:85:26:24:d5:0e:0e:9e:63:af:
dd:a3:0c:4f:f6:ae:1c:a7:3d:c6:2e:95:2c:59:d4:55:2a:9b:
1f:5b:ed:ce:ed:4b:64:b6:ad:96:35:2c:ff:87:0d:c4:0d:a1:
46:d5:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:09 2024 by rpki-client on console-ams.rpki-client.org