Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/KrjCkhgvGim4DHNJC99OIRhUu1A.roa
File: KrjCkhgvGim4DHNJC99OIRhUu1A.roa (raw, json)
Hash identifier: 7Yhq7i7pMOurrZ2PR+s0rlX4yu9kWpBBMtSP6/cR9y4=
Subject key identifier: 2A:B8:C2:92:18:2F:1A:29:B8:0C:73:49:0B:DF:4E:21:18:54:BB:50
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 03FAF9
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/KrjCkhgvGim4DHNJC99OIRhUu1A.roa
Signing time: Fri 11 Mar 2022 15:14:58 +0000
ROA not before: Fri 11 Mar 2022 15:14:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50499
IP address blocks: 193.106.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260857 (0x3faf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Mar 11 15:14:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab8c292182f1a29b80c73490bdf4e211854bb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:3a:af:67:59:05:64:66:ee:78:69:9d:16:
de:9a:3c:43:77:6d:f7:01:df:01:11:4c:b4:bb:1f:
f4:74:f2:c8:f3:f0:37:f1:56:cb:8e:7c:f1:38:67:
f5:8a:20:e4:61:22:dd:c8:6d:68:8f:ce:f5:88:65:
5a:2a:dc:ae:c6:3f:36:40:1b:ad:d6:ab:e4:ad:1e:
9e:5f:74:6b:51:e9:a2:de:4c:23:e4:a8:fe:e7:83:
a9:a4:7b:93:b3:5f:d0:a5:2d:5d:09:32:10:b6:7d:
ed:22:54:ed:fa:a9:5d:69:9b:b8:fb:9d:c4:13:8e:
80:1c:a0:3e:a5:8d:16:bb:36:b1:ce:5e:d8:78:07:
26:8c:3f:9c:92:d3:26:96:fd:a4:2e:09:4e:e2:82:
06:3e:45:fa:a9:63:74:53:d7:02:0e:c3:ce:7c:f6:
fa:36:0c:69:6d:de:61:e9:75:cf:f4:af:65:fd:58:
e8:ef:82:44:eb:a9:98:54:71:e1:de:a1:23:fc:05:
93:be:29:53:87:75:83:87:95:d1:1d:2a:95:3e:27:
d9:49:e0:6a:a1:d6:10:02:37:a6:87:76:eb:49:6c:
e3:0b:9a:41:a3:88:3a:91:3d:51:f8:9a:da:d3:d5:
7e:ca:37:6d:6f:da:91:f9:ba:4b:dd:57:dd:ef:5f:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:C2:92:18:2F:1A:29:B8:0C:73:49:0B:DF:4E:21:18:54:BB:50
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/KrjCkhgvGim4DHNJC99OIRhUu1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.248.0/22
Signature Algorithm: sha256WithRSAEncryption
83:cd:84:0a:5b:82:18:f5:4f:b4:0d:0c:aa:e8:aa:85:5e:50:
5a:8a:34:1d:ec:5e:37:b6:90:2f:1d:81:e1:64:53:45:08:4b:
dc:71:01:df:93:63:2d:e2:1c:1e:8d:a8:c8:9d:ae:b7:d8:2c:
a2:0a:ad:e9:0c:5a:d7:4e:ff:2a:8d:59:27:35:b2:b9:de:4c:
5b:66:33:3f:ba:84:67:d2:c4:53:23:c3:77:bf:a0:a3:c4:0b:
db:48:4c:d0:f2:04:12:82:09:ce:61:b7:79:d8:e9:e1:45:40:
13:9d:d0:f0:e4:d8:f6:24:52:20:7b:da:83:28:5c:08:c7:ea:
37:c9:de:c7:c0:27:14:27:5d:f2:73:a4:c1:51:00:b0:b9:13:
92:9f:2e:66:4a:40:05:5a:1a:f9:e9:ba:6b:67:2d:69:1d:a2:
2c:79:7b:af:46:89:a4:a3:3c:2f:1a:0b:77:08:cb:88:18:c5:
30:37:b1:16:b8:f6:b0:f1:e0:ac:1f:a1:d7:50:5c:0d:3b:f6:
7d:ab:31:e4:b8:da:7b:a2:ee:b3:ae:3b:86:18:ef:15:aa:22:
e9:77:25:72:bc:a1:8e:53:e4:68:7d:cb:33:59:bd:86:77:da:
5e:31:67:c4:49:12:f6:ea:1a:5d:b3:f1:0b:bf:0b:cb:d4:61:
06:22:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:59 2024 by rpki-client on console-ams.rpki-client.org