Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/aQn-K4tW4bq9wN7P_iD2vFVP6NA.roa
File: aQn-K4tW4bq9wN7P_iD2vFVP6NA.roa (raw, json)
Hash identifier: nyirgYtwKWZqNv/Sm1MDC36dSBH1xhpZ0eMvnb/9Jag=
Subject key identifier: 69:09:FE:2B:8B:56:E1:BA:BD:C0:DE:CF:FE:20:F6:BC:55:4F:E8:D0
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0855FD09
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/aQn-K4tW4bq9wN7P_iD2vFVP6NA.roa
Signing time: Sat 01 Jan 2022 09:00:31 +0000
ROA not before: Sat 01 Jan 2022 09:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 185.97.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139853065 (0x855fd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 1 09:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6909fe2b8b56e1babdc0decffe20f6bc554fe8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:02:58:fe:1d:89:65:75:84:c7:d7:95:73:
88:0f:93:cd:7a:a5:0f:56:c7:32:37:f9:a5:43:79:
60:7e:55:1e:29:33:67:ef:6d:e0:28:75:db:a2:26:
d7:fa:0d:93:9b:3f:15:9d:da:8d:18:1a:86:f0:a1:
71:da:0a:c7:04:bf:9d:fa:47:43:c3:6d:27:24:95:
28:74:8f:83:eb:07:41:e6:20:85:dd:f0:10:76:94:
45:e3:eb:6f:c0:8b:f3:75:e4:ec:df:0a:38:33:85:
6c:78:0a:fc:c8:fe:75:4f:d4:2c:05:b0:66:86:09:
9f:8c:18:8c:59:af:e5:1a:8b:91:ac:12:f2:74:80:
1a:02:a4:b9:c5:2c:3c:70:2f:5f:97:3c:64:ce:d5:
8e:12:cc:b9:d8:03:2b:cb:8a:1e:e7:b9:9f:e2:7f:
31:a9:ad:03:6f:dd:c3:29:bc:05:c0:03:cc:2c:ba:
38:34:46:9c:17:9b:c9:3b:82:79:0b:03:07:b0:f0:
65:12:e9:ec:95:91:98:ca:1e:02:e2:da:38:5e:cb:
69:be:c0:cc:b1:9d:2c:c0:76:f2:41:9a:75:3a:6b:
93:f1:45:df:e2:82:cf:2d:2f:3e:75:af:0d:f6:47:
1a:0b:37:fb:00:fa:d6:0e:04:54:13:77:82:7a:85:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:FE:2B:8B:56:E1:BA:BD:C0:DE:CF:FE:20:F6:BC:55:4F:E8:D0
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/aQn-K4tW4bq9wN7P_iD2vFVP6NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ae:5e:03:b5:a8:95:2b:a3:0f:2f:ed:37:4c:72:bb:f2:08:
c5:3b:6d:22:92:2c:6e:a6:28:44:da:85:79:86:6a:ac:9e:f1:
99:b6:4b:38:9a:b9:80:83:2f:25:55:e4:43:1f:4a:4d:b2:d5:
18:30:4a:95:bb:57:50:0c:07:b5:0b:47:e4:33:11:3e:d6:78:
be:e2:b1:12:40:6f:ac:0c:da:ff:ff:7b:26:a0:f4:44:bf:77:
5f:e8:c1:14:8f:b9:1c:86:5b:e0:7f:42:e2:a8:d0:66:6a:e5:
fa:23:c4:f5:c4:53:19:25:0f:d6:64:0b:5c:a8:f2:23:e0:fb:
cb:15:a8:da:63:a0:f3:35:ea:d1:45:31:d8:5a:14:73:9a:b1:
97:83:bd:6d:bb:78:68:8d:b4:45:f9:01:c7:95:e5:07:e9:6f:
e4:b7:14:e1:a4:e3:58:37:76:d4:81:f0:9b:63:ad:f1:29:bf:
aa:b7:5b:d3:37:f4:75:1d:be:21:07:5d:ce:45:66:dd:4e:f1:
9f:d7:0a:3e:84:78:d3:66:18:f4:42:aa:5e:35:a1:d5:ee:4a:
3c:83:20:ae:63:fa:f4:f4:77:99:eb:0a:f0:f0:2a:5c:57:fd:
71:4f:14:99:d2:4d:dc:e6:36:03:7d:a3:2f:b6:14:00:04:18:
e3:5c:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org