Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/8Qzc7-Y5inJ2_UN7x0kDED0K-1Q.roa
File: 8Qzc7-Y5inJ2_UN7x0kDED0K-1Q.roa (raw, json)
Hash identifier: GDKFRFGf8O4gNNmaw7hSY9DK7SiUW8mQo/4xiVtnbfk=
Subject key identifier: F1:0C:DC:EF:E6:39:8A:72:76:FD:43:7B:C7:49:03:10:3D:0A:FB:54
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 01834AB78EF024A2DCD407B6472A1C56EBA2
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/8Qzc7-Y5inJ2_UN7x0kDED0K-1Q.roa
Signing time: Sat 17 Sep 2022 09:11:27 +0000
ROA not before: Sat 17 Sep 2022 09:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 188.172.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4a:b7:8e:f0:24:a2:dc:d4:07:b6:47:2a:1c:56:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Sep 17 09:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10cdcefe6398a7276fd437bc74903103d0afb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:13:98:c3:fc:a4:68:15:a8:02:ac:92:92:
b7:58:54:c4:93:a9:2d:e7:df:fd:d6:8d:08:a9:4d:
96:22:15:78:2f:f7:81:59:a1:27:7f:dc:67:97:58:
d2:84:3f:32:e1:2a:c0:0d:64:9b:42:82:ae:0b:33:
c9:73:80:bf:fe:ff:35:99:d9:68:9e:91:fa:b8:1f:
4b:a5:d1:c9:aa:57:96:95:41:f2:ad:6c:58:3b:20:
00:00:67:af:13:70:77:f8:2b:ea:07:4f:3e:14:d1:
9d:be:1b:ea:97:a1:0c:d2:de:40:56:7b:6b:4d:8d:
cb:d8:d5:ff:78:49:c9:b3:4c:fe:40:f0:27:18:cc:
1d:75:b8:d1:54:34:02:44:a4:59:3f:84:37:e5:80:
5e:1c:60:2d:8e:f0:d8:10:3d:89:1c:75:3d:58:52:
25:47:85:dc:a8:89:30:d2:3d:86:92:b5:70:7f:50:
6e:96:46:54:bf:14:a6:ff:7f:10:be:ad:f7:ba:68:
2a:26:12:c5:f1:0b:8a:50:6b:6d:4b:92:bf:19:df:
3b:10:64:0f:da:f0:bc:1e:3a:11:d1:89:3d:ea:89:
90:4a:44:c3:b6:c1:49:8a:ab:ba:5c:ee:f7:48:de:
63:ca:f2:8e:38:64:0b:41:b1:f7:40:32:f7:3c:2f:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:DC:EF:E6:39:8A:72:76:FD:43:7B:C7:49:03:10:3D:0A:FB:54
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/8Qzc7-Y5inJ2_UN7x0kDED0K-1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a9:b4:e8:f7:5f:00:07:dc:21:89:ce:71:b3:5f:b9:d3:94:
e8:3a:f2:3d:46:29:5c:c5:48:1e:5e:51:3e:2d:6f:36:fa:00:
d4:f1:ba:5b:67:d3:38:6a:5a:d2:0f:91:6b:45:16:45:23:0b:
3e:7a:b4:30:ac:a5:70:5a:a6:37:b4:f1:cf:0a:ea:ad:fe:b7:
a1:e8:97:fa:1d:70:42:0e:d7:3a:a8:10:66:06:cc:08:9f:ac:
4b:e5:fe:d2:41:f0:68:93:5e:9a:b8:6a:5b:c5:b3:e7:95:b3:
87:85:c2:57:6c:96:52:da:e9:f6:0c:1a:1c:8d:86:41:d8:d2:
64:4f:e1:be:d8:76:54:c9:69:2d:0f:11:7e:d4:0e:27:9e:6a:
5e:bc:b3:02:6c:d8:3c:22:23:8d:6e:22:56:d6:61:c5:f2:26:
6f:d6:e8:3a:c8:00:8f:67:e4:e3:09:8b:39:a6:5e:84:19:b2:
9a:3b:08:67:e7:f0:91:52:64:8a:cd:b0:08:12:c8:05:46:1c:
50:a8:96:8b:ad:dc:50:91:45:d5:53:3c:b1:9b:4d:8a:08:9f:
a1:46:b1:7a:a9:25:c0:2c:2d:4b:bc:b5:ff:ba:59:d4:43:93:
e4:85:53:91:1a:a3:de:c8:2e:19:0a:5b:d3:63:e4:d7:26:b4:
50:ee:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org