Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1-IvSfk6dZdvuwcyIKCSYKZZi2fk.roa
File: 1-IvSfk6dZdvuwcyIKCSYKZZi2fk.roa (raw, json)
Hash identifier: 1HnLhjm16D035/U+YQ6StkrB2Axt4WBSsmH8gj0jbBQ=
Subject key identifier: F8:8B:D2:7E:4E:9D:65:DB:EE:C1:CC:88:28:24:98:29:96:62:D9:F9
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 03AB92DC
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1-IvSfk6dZdvuwcyIKCSYKZZi2fk.roa
Signing time: Sat 01 Jan 2022 15:58:16 +0000
ROA not before: Sat 01 Jan 2022 15:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210721
IP address blocks: 194.183.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61575900 (0x3ab92dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 15:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f88bd27e4e9d65dbeec1cc88282498299662d9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:8b:00:48:c2:fa:0a:21:1e:5a:45:19:e4:
50:02:e7:43:fa:6e:a7:d4:64:40:1d:34:2e:84:e3:
42:a5:7e:5c:bf:8e:79:26:fd:ec:9e:5d:65:8d:b8:
39:63:5c:2e:da:63:3e:ea:14:9e:98:1a:f3:83:87:
fb:eb:f3:9b:61:95:ea:bc:34:2d:c1:13:0e:4a:6a:
4a:d2:47:27:d6:e7:2c:ba:8c:a0:3b:32:e7:5c:91:
c1:b7:23:9a:5b:1d:a9:8d:0d:a6:40:f1:2e:b8:9b:
f6:fc:a4:fb:59:c2:45:ca:c8:d4:d9:56:e3:a1:3c:
ef:11:da:23:a5:d8:e5:4a:a5:00:0d:96:d2:9c:fb:
bc:74:11:b6:56:0e:3b:14:23:17:fc:ee:dc:c3:70:
74:ef:d7:16:e4:c1:9f:6f:3f:56:8e:51:c8:53:17:
64:ad:5d:84:9b:12:5b:b3:25:41:6e:ba:28:4c:ca:
c2:6d:11:57:40:15:96:fa:66:96:91:96:d2:1d:e2:
1e:e9:07:c3:f7:67:e2:af:3a:e3:54:db:43:79:b0:
39:c7:e2:49:12:8e:af:47:2b:87:86:9e:c0:09:7d:
d1:9c:95:8d:53:f4:1f:a8:a8:28:0d:a9:23:57:e9:
ca:c4:de:8a:92:5e:74:00:04:2c:1f:bb:a3:45:28:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:D2:7E:4E:9D:65:DB:EE:C1:CC:88:28:24:98:29:96:62:D9:F9
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1-IvSfk6dZdvuwcyIKCSYKZZi2fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.161.0/24
Signature Algorithm: sha256WithRSAEncryption
81:67:9c:74:ac:1b:b8:0f:02:de:fe:af:31:cf:53:ec:95:31:
7f:7e:10:5c:4b:e9:49:0a:05:e8:47:e7:57:77:62:da:c7:1a:
3c:be:af:47:3a:a9:b1:47:86:84:28:f7:10:95:cc:92:74:9c:
bd:02:13:ba:ad:97:d9:7d:e8:53:be:0a:16:78:5e:56:a2:4b:
1f:e9:a4:5d:70:f2:6f:03:38:7b:82:9e:a4:4e:fa:d0:e4:1a:
9f:92:ad:17:54:32:4d:be:a6:8c:9d:18:64:9f:61:34:18:6e:
f8:5c:b0:0a:46:b3:29:02:5a:c7:93:46:25:23:94:db:26:52:
84:69:4d:07:a1:06:18:89:16:32:1e:6a:e3:92:0f:ce:3b:f8:
62:ca:da:54:78:12:21:89:c5:4f:4d:08:49:bb:98:6e:d9:82:
50:1e:b2:02:33:aa:56:f3:25:8e:de:f1:e9:09:23:de:52:e6:
fb:38:db:dd:2f:a7:15:05:9e:50:99:f0:fc:92:84:a0:c6:19:
09:b4:17:82:17:20:33:f2:47:8d:02:23:46:8e:aa:8b:f8:2f:
fc:b8:65:43:91:d9:62:fa:cd:09:31:39:c0:12:97:12:30:72:
83:4f:ac:e2:8e:9c:64:ba:3d:83:52:d5:09:10:11:e9:5d:05:
28:60:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org