Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uMS9sdk_-e2xFCg7Y06mS6nVj5o.roa
File: uMS9sdk_-e2xFCg7Y06mS6nVj5o.roa (raw, json)
Hash identifier: 8XJPgRjnIr65VnsYRnYhq0HeguS1L+hXb6Gnho+AJgc=
Subject key identifier: B8:C4:BD:B1:D9:3F:F9:ED:B1:14:28:3B:63:4E:A6:4B:A9:D5:8F:9A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08D655EF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uMS9sdk_-e2xFCg7Y06mS6nVj5o.roa
Signing time: Fri 08 Apr 2022 17:43:45 +0000
ROA not before: Fri 08 Apr 2022 17:43:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 188.255.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148264431 (0x8d655ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 8 17:43:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8c4bdb1d93ff9edb114283b634ea64ba9d58f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:de:c6:99:15:ad:55:07:a5:14:74:99:cd:
9c:d2:80:72:4f:64:be:2b:ea:d4:d3:f7:94:17:fa:
3f:f0:5f:25:fb:74:28:08:dd:93:6f:6e:8e:02:1e:
27:09:ab:e6:59:49:89:c2:16:bd:75:f6:da:68:5e:
f8:8f:ec:b6:ad:72:ab:02:d1:32:b4:45:9f:bd:42:
dd:32:55:82:9b:db:09:99:f4:33:8d:89:7f:f8:88:
34:78:70:27:a1:44:80:9a:a7:5c:e3:88:78:10:c9:
fe:96:7a:30:ff:b6:26:5b:3c:88:ee:44:8b:54:d3:
eb:17:96:18:b4:43:73:d0:93:36:be:72:27:1b:f5:
c7:3a:55:9f:05:ae:4e:88:b6:e2:10:cb:77:7e:c7:
43:75:d8:76:4f:4a:cc:8d:68:8b:b8:d1:4e:e6:a1:
37:2b:65:0d:16:02:42:45:5c:9c:42:89:b1:9a:2f:
64:87:8e:5e:7e:eb:7f:4e:bc:6c:9e:f0:76:f2:f2:
6b:79:19:2e:4e:d4:53:c9:72:bc:ea:5b:d4:c5:80:
3d:d1:4f:08:c6:08:04:e0:88:37:a8:95:21:19:a4:
8f:22:6c:a5:36:4b:0f:f8:05:ae:90:c2:5e:79:33:
0a:e6:7b:2f:bc:6b:75:9c:f7:f1:b4:cb:04:71:a6:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:BD:B1:D9:3F:F9:ED:B1:14:28:3B:63:4E:A6:4B:A9:D5:8F:9A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uMS9sdk_-e2xFCg7Y06mS6nVj5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fa:52:a7:b4:a7:95:2e:73:84:a5:00:bf:0e:ad:4f:32:f9:
ec:a8:86:25:2b:17:92:32:fc:89:5b:16:02:b9:6d:77:51:c0:
69:62:2d:5c:3c:0b:96:3e:88:f9:b9:d2:92:64:6e:22:c2:2c:
19:33:99:56:ae:11:4d:c8:94:5f:c7:d3:85:61:ae:2e:98:69:
f5:ad:be:4f:da:8d:54:bd:99:4c:0e:f8:bd:9b:f4:98:4c:1f:
8e:17:10:39:02:ae:79:5a:37:0c:0e:84:02:20:14:c3:eb:c9:
43:7d:a5:03:e4:10:d1:43:d1:83:5b:f2:f8:f1:ac:75:d2:16:
8e:b6:b4:8f:80:ba:3e:68:7e:5e:75:c4:25:99:b0:a2:ef:ee:
b1:e6:d6:c0:7e:bb:fe:21:a0:f1:e7:11:87:d6:0a:c1:20:2d:
f4:f7:94:6c:ed:95:28:dc:ec:aa:15:e7:44:9e:ee:5e:3d:ae:
92:b5:24:ea:4f:fb:3c:e9:bc:6e:c6:c9:40:6a:03:b6:52:db:
c2:03:46:4f:2d:dd:ed:1e:a9:4e:91:dd:aa:27:9e:d4:fa:6a:
9c:c7:b8:5b:48:be:41:7e:16:8e:4b:5d:cf:d3:f8:68:c6:9b:
ad:29:ae:1e:1a:f8:27:bf:e9:01:16:4f:71:a8:4c:9b:c8:cf:
30:aa:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org