Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/ISI3HJQdPmvbPCn-n6N4RYdL3Vs.roa
File: ISI3HJQdPmvbPCn-n6N4RYdL3Vs.roa (raw, json)
Hash identifier: QX4Nk11IXYb+FGGLqt6hz+LACtFvVmwEgX1F8NR3CAQ=
Subject key identifier: 21:22:37:1C:94:1D:3E:6B:DB:3C:29:FE:9F:A3:78:45:87:4B:DD:5B
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 09D8E870
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/ISI3HJQdPmvbPCn-n6N4RYdL3Vs.roa
Signing time: Sat 01 Jan 2022 10:57:49 +0000
ROA not before: Sat 01 Jan 2022 10:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39257
IP address blocks: 193.110.178.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165210224 (0x9d8e870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jan 1 10:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2122371c941d3e6bdb3c29fe9fa37845874bdd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:60:60:a1:65:7c:e7:43:7d:ba:f3:98:a8:
d5:c2:6f:66:c7:0a:58:63:bb:8c:03:ae:f3:73:01:
52:35:a2:76:a8:d4:aa:96:db:39:1d:39:03:3a:40:
6d:3e:b3:d2:43:ab:64:a0:7e:cb:24:69:da:8d:58:
bf:82:9b:08:5c:cd:6b:f3:e3:04:2c:7d:67:b1:11:
2e:a2:85:4c:4c:22:45:39:2f:e8:2d:26:cb:13:bb:
b8:ab:9d:a5:15:0a:01:1b:e9:a1:46:df:64:25:4c:
37:02:12:cc:d8:9d:35:33:11:a6:43:42:f4:eb:c9:
ba:22:5a:1a:e7:2b:7e:34:18:60:4d:61:04:bf:a8:
28:55:90:7f:ce:ff:c1:88:61:54:98:91:c8:12:74:
81:c7:b5:e9:3b:bc:7d:d4:f8:40:94:d8:a5:9a:75:
73:b1:3d:d9:3b:85:dc:1b:2f:f3:c3:b1:ce:95:91:
f8:f8:6e:8d:67:02:54:56:89:24:85:de:35:f2:a4:
8a:b8:60:e3:17:f7:2e:82:ec:ac:48:f5:d9:ed:b3:
ce:db:e2:a7:5a:c6:12:d7:66:b9:7d:82:8b:79:dd:
9c:cb:5e:10:99:66:af:7c:f5:83:2f:35:f6:f9:1f:
ac:66:ea:d6:c4:b8:24:65:06:80:3f:e0:ff:d0:0d:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:37:1C:94:1D:3E:6B:DB:3C:29:FE:9F:A3:78:45:87:4B:DD:5B
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/ISI3HJQdPmvbPCn-n6N4RYdL3Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
14:34:1c:d5:6d:e8:3b:6e:2c:42:98:75:a1:78:ea:67:52:90:
eb:e3:48:2c:60:9c:e0:89:a5:de:31:da:9a:d5:ce:b9:d4:39:
65:07:dc:ab:8c:bf:f0:86:e1:2b:9f:c9:e1:ac:3c:ea:ff:93:
db:d8:6a:97:53:77:f7:a3:9a:e2:39:4f:89:35:fe:c9:53:ca:
8c:15:1b:8c:5e:fd:f8:dd:82:9b:2e:5c:82:8b:a6:bf:29:ca:
0f:cd:2d:b3:20:76:f5:78:c9:02:8e:db:1c:78:00:f3:bf:6b:
75:06:9e:b7:cf:4d:68:b9:1b:94:9c:02:d7:7a:bd:c7:4b:91:
41:0a:9d:c6:fd:ea:e4:8d:9c:b8:2a:ff:f9:b5:17:93:37:bf:
9a:d8:b9:bb:13:98:1b:a7:07:89:98:cb:87:bf:ca:de:c9:3b:
51:98:e1:6a:71:4a:43:0a:e4:e0:b2:ff:4b:38:98:11:2c:61:
5e:19:11:44:96:f8:b8:0d:c5:24:f7:9d:a1:db:08:3a:f5:45:
3b:e1:7e:71:24:41:91:c5:83:bd:3d:02:2a:e0:4f:b5:e8:e7:
06:92:b6:b8:93:33:48:af:a6:25:95:20:93:b7:c1:ad:b2:1d:
31:e7:52:3a:e4:fb:d5:53:d9:c6:69:c0:e9:0a:6a:2a:75:c1:
3c:a8:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:28 2024 by rpki-client on console-ams.rpki-client.org