Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/bERsIPg9FMNmli2EzdAF2x24c_E.roa
File: bERsIPg9FMNmli2EzdAF2x24c_E.roa (raw, json)
Hash identifier: dJdvopCkzuo9giWzRojby80jeLhiZiDKH9kXVE2X0rE=
Subject key identifier: 6C:44:6C:20:F8:3D:14:C3:66:96:2D:84:CD:D0:05:DB:1D:B8:73:F1
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 02DE813F
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/bERsIPg9FMNmli2EzdAF2x24c_E.roa
Signing time: Thu 24 Mar 2022 11:35:13 +0000
ROA not before: Thu 24 Mar 2022 11:35:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202636
IP address blocks: 217.67.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48136511 (0x2de813f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Mar 24 11:35:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c446c20f83d14c366962d84cdd005db1db873f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:79:e5:58:77:98:7f:ad:de:18:1a:bd:36:
b0:c6:49:b4:0f:71:3d:54:0a:3d:92:cd:60:e4:9b:
96:e3:70:ed:71:2d:4f:da:85:a4:fe:92:82:a6:9a:
77:d7:c0:c7:b3:10:fb:09:20:96:44:63:10:6b:3b:
44:68:3f:12:ab:40:5f:28:b5:fb:8e:76:0f:27:d4:
a0:2a:5b:7c:77:7e:60:f9:df:79:60:26:fd:1e:c8:
08:2e:6f:ce:82:b5:cb:b9:25:ff:69:7a:f0:28:db:
b6:a5:12:c4:8d:98:b8:c5:df:62:82:e9:61:b9:87:
f0:f5:00:86:7a:48:18:7f:d1:27:a4:a7:8e:81:d6:
7b:45:12:e9:01:2c:dc:8f:25:5c:55:d3:41:65:65:
9d:b5:64:57:b8:a5:51:01:46:f4:d7:8a:1c:85:8d:
d5:2d:69:74:0d:81:18:f1:4c:32:98:c1:4a:e1:8c:
1d:98:eb:9a:73:f5:54:c7:24:2a:bb:a6:54:9c:71:
a2:3b:4f:ca:ed:c5:88:18:16:b6:e2:74:07:60:72:
00:c7:8a:9e:64:b0:8d:35:ba:91:b9:2b:48:78:1e:
66:b5:b7:55:24:1f:57:94:a8:b1:ff:29:d5:70:b6:
06:32:a0:fc:3e:99:f2:1d:18:16:46:ec:f1:f6:ec:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:6C:20:F8:3D:14:C3:66:96:2D:84:CD:D0:05:DB:1D:B8:73:F1
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/bERsIPg9FMNmli2EzdAF2x24c_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.160.0/24
Signature Algorithm: sha256WithRSAEncryption
53:24:ce:2c:df:37:af:b1:b6:cb:c1:0b:e5:ec:e9:c4:60:e0:
69:12:b4:af:9d:99:43:5f:35:e5:53:5d:f5:65:42:60:1d:64:
91:82:f2:6a:f0:34:86:4e:88:66:f4:37:31:c8:99:53:32:92:
41:51:86:65:43:09:5c:91:8c:0f:80:4a:cc:ad:13:67:86:4d:
fd:38:1c:de:77:85:0c:b6:9c:8b:1d:03:bc:32:a1:df:ec:a3:
15:bf:ab:38:e0:85:d8:28:84:68:d6:14:20:1f:c6:83:9e:72:
cc:71:9d:1d:a8:46:91:85:2c:fe:a4:2b:c3:ef:b6:d0:d8:49:
70:52:60:82:1e:72:b1:82:66:fb:96:c7:0d:e4:43:8c:b3:15:
5d:17:d9:12:29:61:bc:d1:98:db:4f:14:4b:2f:75:eb:fe:6d:
08:07:ed:e5:53:15:f4:05:b9:9e:ae:ab:8f:1a:ef:c3:ad:dc:
65:a7:c4:ae:e5:83:21:09:a3:2e:8d:09:e7:aa:93:b6:8e:89:
6e:0c:8d:95:dd:cb:3d:21:15:41:f5:1f:bb:b0:cf:a5:50:c5:
3a:21:93:38:67:75:52:9a:00:6b:6c:83:c9:58:c2:17:59:e2:
c2:61:e5:ed:d9:30:27:b3:86:62:11:59:71:25:2d:41:8b:24:
3c:50:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:05 2024 by rpki-client on console-fra.rpki-client.org