Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/nHUJ6_OsOSVY5O0jtI8OSbUBP4o.roa
File: nHUJ6_OsOSVY5O0jtI8OSbUBP4o.roa (raw, json)
Hash identifier: KzD7eh3QTyllgxVC6DdhDYhrEjKrFYT1Ag3FGf767Q4=
Subject key identifier: 9C:75:09:EB:F3:AC:39:25:58:E4:ED:23:B4:8F:0E:49:B5:01:3F:8A
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 9354
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/nHUJ6_OsOSVY5O0jtI8OSbUBP4o.roa
Signing time: Thu 17 Feb 2022 03:03:14 +0000
ROA not before: Thu 17 Feb 2022 03:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 194.127.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37716 (0x9354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Feb 17 03:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c7509ebf3ac392558e4ed23b48f0e49b5013f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:02:17:b6:dd:3a:38:c9:bb:ba:54:53:87:
31:51:e7:a2:10:20:70:b6:ff:0a:7d:e9:3d:70:b7:
40:30:2d:43:e8:b5:63:1b:e1:b1:5f:22:92:21:77:
f1:ca:9d:63:da:ef:5c:4f:be:d8:8c:37:eb:06:47:
f8:6f:12:4d:76:3f:f1:b6:e6:b9:70:8c:a7:82:88:
14:61:8f:2a:3a:ef:26:a9:84:8b:26:97:e6:e8:41:
a2:28:6e:a5:e8:9b:f0:6c:69:85:09:d4:19:b7:84:
38:3e:5c:04:ac:29:81:57:6d:a1:69:e3:c4:73:d9:
ef:fc:77:99:80:25:6d:02:f5:a2:eb:8d:7b:5b:0c:
fc:6b:a4:de:ea:39:af:13:35:60:dc:e0:99:04:c5:
b0:cc:83:c6:78:c1:70:b9:c8:eb:9e:41:0a:84:3a:
1f:c7:ee:98:12:3b:5c:a4:ea:bc:d1:37:bc:6c:bf:
9e:c9:9e:3b:b3:02:46:5f:cd:07:b6:04:17:7e:77:
25:94:e6:5c:39:4c:aa:79:95:c2:ea:22:da:0a:4f:
cd:7a:28:d5:44:73:02:f4:e6:ab:ac:7f:b5:06:66:
89:80:69:f7:2c:fa:a1:08:72:92:2f:59:c3:04:45:
08:ac:69:f8:d1:85:78:28:54:28:e5:93:98:24:a7:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:09:EB:F3:AC:39:25:58:E4:ED:23:B4:8F:0E:49:B5:01:3F:8A
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/nHUJ6_OsOSVY5O0jtI8OSbUBP4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.172.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:f0:a1:ec:6a:de:a9:28:05:81:b8:9b:ed:f9:3f:22:b9:42:
63:2d:42:19:f7:97:32:4d:88:b2:5a:1a:36:0f:e4:c0:95:b2:
00:b6:5b:cf:76:6d:40:48:14:99:4d:74:0d:c1:31:df:43:6e:
6f:d1:0f:e4:07:e1:5d:0f:00:eb:c2:7a:4b:ae:fa:29:fd:5d:
c1:60:d5:a5:44:a7:0c:70:c2:75:0b:77:02:c4:fc:54:f2:6a:
72:6c:95:24:be:08:ae:54:31:57:be:22:7c:dc:4b:29:da:06:
6c:45:a9:e9:ce:3a:f7:96:29:72:b4:93:ab:0f:5f:9d:73:05:
1e:02:80:fb:b5:9d:f0:6f:07:e0:0a:bc:d3:06:9a:10:d9:8c:
47:77:20:0f:af:11:0e:44:81:28:9d:39:b4:f4:d2:18:ff:bf:
56:6f:f4:c8:d1:9e:3e:e4:b6:af:14:1e:6d:89:03:3e:cb:d7:
f2:29:a1:db:d2:26:28:83:b0:df:d9:ef:c5:74:b1:a9:80:06:
eb:5d:98:61:1f:79:e5:15:f6:e7:e1:e8:c4:59:6c:40:e3:a8:
df:d7:fa:12:f2:43:bf:89:ee:da:da:fd:22:55:30:a0:aa:09:
f0:cc:e1:74:51:d8:7b:a1:29:96:dc:eb:30:11:d3:67:84:01:
ff:b4:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:23 2024 by rpki-client on console-fra.rpki-client.org