Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/AAuSduQWFUBEO4oxintoAc3gO6Q.roa
File: AAuSduQWFUBEO4oxintoAc3gO6Q.roa (raw, json)
Hash identifier: pZFwIBWxcQV/Ti0JYLv0H2zC0yVfI+MeA8oh76AM8/Q=
Subject key identifier: 00:0B:92:76:E4:16:15:40:44:3B:8A:31:8A:7B:68:01:CD:E0:3B:A4
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 01849C3EDCEFA7CBC62D1424D12B77C41527
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/AAuSduQWFUBEO4oxintoAc3gO6Q.roa
Signing time: Mon 21 Nov 2022 22:11:16 +0000
ROA not before: Mon 21 Nov 2022 22:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210220
IP address blocks: 194.169.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:3e:dc:ef:a7:cb:c6:2d:14:24:d1:2b:77:c4:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Nov 21 22:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=000b9276e4161540443b8a318a7b6801cde03ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:6e:96:24:e4:24:6b:a7:54:02:79:c6:16:
e6:11:3a:b4:dc:d8:f4:2d:52:95:3d:77:f2:dd:f0:
09:6b:0a:1b:ec:24:e4:de:5b:50:72:e0:88:8d:26:
3f:ff:8b:9a:d0:61:e6:f7:e1:ec:48:e6:de:b0:68:
4d:c0:c2:71:cc:22:24:62:a5:34:b0:ea:72:00:e2:
bb:c5:8e:82:74:20:49:ca:6a:47:84:57:dd:06:58:
db:1b:57:4f:52:96:c6:76:94:6a:df:0d:c2:30:36:
b8:82:13:e0:6b:20:02:e7:df:a4:cc:b2:d8:9a:88:
97:b1:eb:a8:21:f7:9e:a8:9a:0e:1e:7e:75:49:9a:
be:ee:a2:5e:6c:27:dd:d2:99:7f:de:e7:80:e9:cc:
73:67:23:14:3b:5c:57:80:7f:1a:b9:b1:42:4a:ed:
e3:50:ca:d0:d8:72:ab:02:ad:13:bb:8f:4c:3c:f4:
52:5c:9c:11:17:e4:04:21:ed:d2:e4:fb:c8:a2:0c:
9e:1f:42:75:51:76:b3:a1:fd:b5:6e:9d:ea:6c:d0:
f0:35:de:c0:15:9f:5b:26:20:0b:99:a7:a4:c0:d3:
3c:05:cf:7c:92:d7:7d:1c:1e:4e:f1:e3:d4:50:28:
e9:d5:c5:0b:b1:d8:3b:94:8d:e5:04:8e:f6:07:5d:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:92:76:E4:16:15:40:44:3B:8A:31:8A:7B:68:01:CD:E0:3B:A4
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/AAuSduQWFUBEO4oxintoAc3gO6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.220.0/24
Signature Algorithm: sha256WithRSAEncryption
69:65:cf:0d:86:dc:7e:75:4e:f8:4f:5e:ee:a2:7f:19:1a:2d:
b8:f1:c8:f3:77:cd:f5:8a:f7:63:dc:05:5b:71:3f:26:45:76:
07:88:03:35:b9:fe:f1:69:b3:8f:92:48:32:1f:0a:18:77:26:
08:1b:d6:5f:fb:77:16:76:58:1e:71:b3:ee:83:06:93:df:42:
27:3b:5b:a4:50:5b:bb:ab:ff:72:e8:8a:b6:68:c0:47:24:f1:
a0:11:7a:8c:3a:59:17:a3:6c:b8:12:b5:ec:56:5b:85:e9:a2:
21:69:49:ea:99:3b:0f:be:de:81:8d:ea:4b:72:ed:86:9a:21:
a7:d5:14:13:2e:9c:e4:81:ca:56:31:31:3e:25:79:9f:45:96:
44:7e:1b:09:c0:ed:d3:b3:a6:06:59:1e:53:cf:2c:e8:f1:42:
60:ec:6c:df:ee:ef:58:07:25:10:e5:80:7a:f7:7a:bf:ee:b6:
9a:d7:bb:62:0a:82:bc:48:fd:e7:fe:72:ed:9f:9a:c8:53:68:
0a:52:35:0d:59:85:09:a0:f8:a6:ad:71:4c:26:e7:5f:ab:8b:
48:16:e2:91:24:cc:10:f5:fd:62:b0:9c:62:aa:d2:f4:eb:96:
6b:af:c0:c9:e1:26:2d:56:55:b4:30:26:a7:97:d4:eb:4d:a5:
55:e6:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org