Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ihWF8YEFqYAYgao-VUMoZjGzAXQ.roa
File: ihWF8YEFqYAYgao-VUMoZjGzAXQ.roa (raw, json)
Hash identifier: bYpiBqCBqkAg/z0e7fhVVHEpMU8bTM8DcdfmiwCcl+k=
Subject key identifier: 8A:15:85:F1:81:05:A9:80:18:81:AA:3E:55:43:28:66:31:B3:01:74
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 0153ED
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ihWF8YEFqYAYgao-VUMoZjGzAXQ.roa
Signing time: Wed 09 Feb 2022 12:27:56 +0000
ROA not before: Wed 09 Feb 2022 12:27:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51964
IP address blocks: 193.96.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87021 (0x153ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Feb 9 12:27:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a1585f18105a9801881aa3e5543286631b30174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:fc:79:e6:2f:a3:79:51:cf:b4:3d:75:92:
7e:a4:f1:25:29:ae:92:7a:ff:1a:ec:4f:c4:6d:38:
d9:92:f2:ec:59:99:70:df:71:f9:d4:2b:5e:d9:a0:
a4:4c:9c:6f:56:20:15:1d:f0:73:84:45:2c:ef:7b:
21:8c:f9:c8:c1:b7:d3:b2:b5:8d:5b:51:e5:8b:f0:
be:27:32:a8:4b:9d:b0:95:b3:66:48:f5:7f:9c:f2:
2a:40:81:9f:23:da:ff:f9:b9:9e:d4:5c:59:f5:59:
06:c7:85:03:ef:09:f9:a3:85:d9:aa:eb:37:40:25:
99:0b:e7:bb:7a:ad:e8:84:24:11:56:08:fa:53:17:
01:60:b6:48:1c:eb:16:63:86:2d:35:d2:b2:0e:55:
c5:c6:d1:f4:45:bd:99:61:94:de:c7:29:84:46:03:
4a:fe:4d:e7:c2:e0:35:69:61:a9:9c:8a:62:35:fd:
79:a2:56:52:97:3b:2a:2a:d0:de:d4:7b:71:37:af:
e5:07:5f:5c:d5:e1:72:cf:54:bc:84:19:ff:6f:c3:
e4:09:b1:41:24:af:f0:62:50:d2:1d:bd:5a:2e:a0:
56:1b:30:38:6e:a7:60:bf:41:3f:5c:0f:e1:fe:eb:
8e:68:e7:4c:6a:80:fb:6a:5a:c8:48:33:93:dc:c3:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:15:85:F1:81:05:A9:80:18:81:AA:3E:55:43:28:66:31:B3:01:74
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ihWF8YEFqYAYgao-VUMoZjGzAXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.96.0/21
Signature Algorithm: sha256WithRSAEncryption
79:02:4a:90:12:7c:73:55:51:a3:34:20:c5:33:4b:61:48:f8:
d9:8d:a6:a7:d8:41:44:17:27:15:27:01:cc:a2:5f:1b:15:04:
82:d9:0d:1c:c1:6f:d7:cd:9e:40:1c:20:2d:ba:25:e9:71:37:
79:0c:33:e1:ef:ce:6d:5d:a8:d4:53:be:3a:06:65:a4:7e:b7:
4a:2d:a6:1c:44:9a:7c:4c:87:f1:ee:84:42:73:f6:04:77:b3:
3e:62:be:ad:26:a9:ff:c1:85:0b:9e:ac:8b:21:6a:88:fe:6a:
7f:23:8b:1f:b9:21:6c:90:b1:da:bd:f2:20:69:8c:77:a7:1d:
34:c1:f9:50:df:f0:dc:e3:0b:e9:07:89:7c:2c:ab:e2:09:c0:
44:e2:2b:7e:17:1d:d4:f3:61:91:8c:85:a2:6c:6a:e8:14:ea:
86:dc:b9:0e:f6:2c:ce:ae:c5:af:b6:b3:4e:94:cd:dd:a3:d8:
80:19:b0:75:02:bf:25:d8:e0:75:d2:a8:5a:7e:7f:c7:9e:e6:
fb:df:e3:fb:60:c0:d6:17:6a:f0:c6:d2:1a:4a:b3:89:99:7b:
19:93:79:7a:62:ab:6c:a1:f2:21:33:37:07:3d:bf:0e:ec:dc:
cf:9c:0f:c7:5d:ff:39:b8:bf:1e:23:6e:c3:c4:22:85:c0:7c:
5c:b9:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:56 2024 by rpki-client on console-ams.rpki-client.org