Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/syr_2J9vTMndDQ0f9YBOLiNePis.roa
File: syr_2J9vTMndDQ0f9YBOLiNePis.roa (raw, json)
Hash identifier: ICiX1UuAB1Bvgn+g7bqgbRGdlwIbNGzI75oiGXD6TNQ=
Subject key identifier: B3:2A:FF:D8:9F:6F:4C:C9:DD:0D:0D:1F:F5:80:4E:2E:23:5E:3E:2B
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 0728B0FD
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/syr_2J9vTMndDQ0f9YBOLiNePis.roa
Signing time: Sat 01 Jan 2022 07:59:37 +0000
ROA not before: Sat 01 Jan 2022 07:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48504
IP address blocks: 194.32.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120107261 (0x728b0fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Jan 1 07:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b32affd89f6f4cc9dd0d0d1ff5804e2e235e3e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:88:21:51:ce:35:df:0f:fe:fe:20:af:18:
b9:0f:e5:9e:24:4e:54:68:2b:8e:82:9e:c2:94:32:
7f:dd:fb:47:ec:a5:36:ee:10:27:b1:96:66:bf:f7:
af:ad:aa:a5:d8:f4:50:b9:06:00:24:6e:47:c8:9d:
67:f6:db:d2:6e:fa:33:87:da:c4:88:78:1c:16:b7:
6b:49:ab:e2:ad:c8:54:5c:57:46:21:a8:eb:ef:df:
0f:96:64:ff:dc:a7:76:b0:0b:d8:a4:2f:7a:83:fd:
88:54:62:f6:1c:1f:84:aa:11:94:f9:14:61:31:92:
57:aa:7d:09:3f:d1:59:56:a3:e8:78:2a:cd:b5:23:
f9:12:bb:43:c8:7e:90:7e:15:66:f5:ae:70:b8:08:
11:84:1e:ec:3d:0b:b1:86:68:70:41:a5:1c:db:e8:
4b:7d:fe:a3:86:ce:f9:cf:0f:f6:d5:aa:23:a0:d5:
e4:d2:e2:e4:85:e6:1e:1c:36:17:c5:e3:b7:23:54:
5a:1a:86:04:e3:3c:f5:0f:44:1b:d7:de:81:26:b3:
5b:ae:27:87:e1:05:14:fa:04:56:4e:29:39:7c:1f:
0c:e1:68:83:31:83:cd:f9:0d:79:27:23:f9:65:e7:
c1:a3:0d:be:ea:7d:24:0b:2f:25:c1:26:40:75:68:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:FF:D8:9F:6F:4C:C9:DD:0D:0D:1F:F5:80:4E:2E:23:5E:3E:2B
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/syr_2J9vTMndDQ0f9YBOLiNePis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.168.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ab:ba:83:19:c5:9c:d4:6b:a1:a5:a1:56:c9:e6:dd:5c:be:
cb:de:3d:98:85:32:2a:ab:55:09:7c:f7:c1:31:a6:4e:a0:11:
35:37:7f:33:71:65:93:5c:6e:76:17:64:ca:20:99:9e:e7:73:
ca:46:64:c6:b9:48:69:98:76:6b:d6:ff:5b:5e:0b:79:ea:45:
82:1c:d1:30:a3:0a:4e:6d:19:45:7d:30:4b:1d:d4:cf:83:25:
11:d4:e2:e2:e5:7e:31:c4:dd:30:8a:9b:ef:82:c4:46:a5:c5:
fd:7e:a7:6e:f0:88:83:3b:92:6f:a5:de:98:d7:22:f3:0b:cb:
d8:b3:9f:36:6a:a9:8d:fa:fa:4b:f7:66:f2:bf:24:3c:1e:cd:
cc:12:20:70:1d:e5:91:3c:73:37:99:1f:08:07:8e:e9:5e:c0:
ea:9d:0f:3e:42:f2:47:23:94:ff:b3:cc:67:91:2c:0e:45:c3:
41:65:b5:9d:47:5b:2e:f8:50:ca:61:4c:e0:c2:15:3e:97:22:
c8:09:d7:e9:ca:37:24:3d:1c:ad:b4:36:25:da:8c:3a:28:4d:
af:35:13:c2:34:4e:96:49:8e:90:23:b9:5a:5b:80:c5:c3:01:
79:ca:0d:f1:65:6e:8f:b9:e9:f4:40:7c:c7:93:01:4c:7b:77:
b5:ab:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:37 2023 by rpki-client on console-ams.rpki-client.org