Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/Ng77QZVS-dIMBxXcU-mWnO5eH8A.roa
File: Ng77QZVS-dIMBxXcU-mWnO5eH8A.roa (raw, json)
Hash identifier: qCQaR2uBB9pUo4vPqnE2iZQipt0B1re9gppMdag6uQI=
Subject key identifier: 36:0E:FB:41:95:52:F9:D2:0C:07:15:DC:53:E9:96:9C:EE:5E:1F:C0
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 077E1560
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/Ng77QZVS-dIMBxXcU-mWnO5eH8A.roa
Signing time: Sat 01 Jan 2022 14:58:27 +0000
ROA not before: Sat 01 Jan 2022 14:58:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.9.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125703520 (0x77e1560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jan 1 14:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=360efb419552f9d20c0715dc53e9969cee5e1fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:35:55:27:4a:db:f1:00:7b:97:e6:4a:f2:
c0:33:78:41:ef:12:5e:51:0e:16:cd:d1:7a:33:e9:
c4:7b:cb:5d:4c:cb:5d:b7:f2:eb:ad:0d:72:90:51:
ae:03:79:02:e5:2a:0c:7a:16:f5:46:04:88:d1:2f:
58:a9:67:7d:3e:dd:7c:be:05:5f:17:9f:46:0a:0e:
16:97:36:2c:28:3f:3a:e8:58:21:53:c3:23:92:1b:
02:aa:4b:49:dd:57:3f:f5:e1:84:23:32:55:be:18:
9d:6b:3d:5a:97:93:83:60:a5:17:98:ea:0d:f5:4c:
6b:94:4f:14:03:7c:1c:0d:b1:57:2f:41:89:ec:d1:
9e:a8:26:87:e6:c1:db:f4:af:be:af:af:2c:56:81:
c7:38:2d:dc:df:d7:be:9a:24:cb:53:05:f0:e6:16:
58:ac:94:28:92:da:7c:1b:3f:87:cd:e0:3d:37:17:
79:f7:67:11:98:4b:d7:42:10:c0:e4:7f:b4:1e:fa:
f5:5a:22:14:db:be:9f:15:c5:fe:db:0d:68:77:d0:
b5:ee:da:c6:da:81:a7:9b:75:03:81:b3:17:00:22:
11:0c:9b:bc:af:fe:15:ad:07:e9:f7:04:ee:47:0c:
09:af:2f:ff:a7:c3:a6:f0:99:1b:bf:7c:c6:59:01:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:FB:41:95:52:F9:D2:0C:07:15:DC:53:E9:96:9C:EE:5E:1F:C0
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/Ng77QZVS-dIMBxXcU-mWnO5eH8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.122.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9c:b8:28:6a:a6:f9:c2:8a:69:8f:a2:ed:e7:c1:9a:a8:4b:
83:16:9b:ab:9e:64:64:2e:c2:c7:af:b5:47:87:79:a6:c9:e8:
4d:35:76:d9:26:c6:cb:0a:59:4c:8d:69:30:2c:e5:5d:b3:bd:
6b:c8:21:73:8b:22:9c:93:05:10:75:f5:1c:a0:72:f5:ec:be:
ac:75:12:c4:3c:f9:45:d6:4b:77:46:e5:ff:59:06:de:6b:b2:
a3:2a:16:0f:3c:f4:d3:c3:ed:7c:f9:77:04:c8:17:28:0f:ec:
78:59:5a:96:3e:5a:cb:1f:60:e5:76:8e:c5:c7:f8:d7:e3:b9:
23:17:98:cb:20:39:cd:11:ea:1b:71:2f:7a:61:f8:83:7a:60:
d5:c3:cf:d0:7f:f4:44:b6:c1:7b:f7:c2:16:4b:da:6d:59:2c:
f0:03:bd:20:8e:53:b9:3e:cf:57:1b:6a:c4:b4:04:c9:0c:1d:
08:54:6c:b5:87:d5:4c:9e:cc:74:db:02:73:86:a9:8b:8f:2e:
a5:db:de:00:4f:e2:2c:36:69:9d:22:6c:d0:1c:90:65:2a:ba:
ea:26:ad:49:d1:e9:c3:d8:c3:a7:fe:9a:36:11:57:f1:9b:24:
9a:26:24:67:91:3c:9f:84:a6:88:35:ce:65:8f:a7:b3:e0:c2:
56:8f:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:37 2024 by rpki-client on console-fra.rpki-client.org