Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/mz9wQRhK86Rv8SMm-DQ1LhDn6-o.roa
File: mz9wQRhK86Rv8SMm-DQ1LhDn6-o.roa (raw, json)
Hash identifier: pSFeuxBb8IUmsP69AAPZkJIwnieV5ckxh5ecSHpebAg=
Subject key identifier: 9B:3F:70:41:18:4A:F3:A4:6F:F1:23:26:F8:34:35:2E:10:E7:EB:EA
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 02FAC55D
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/mz9wQRhK86Rv8SMm-DQ1LhDn6-o.roa
Signing time: Mon 04 Apr 2022 08:49:18 +0000
ROA not before: Mon 04 Apr 2022 08:49:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212830
IP address blocks: 217.67.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49988957 (0x2fac55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Apr 4 08:49:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b3f7041184af3a46ff12326f834352e10e7ebea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:aa:dc:16:4b:8c:fe:85:af:9f:f4:cc:aa:
2b:eb:f3:b5:5b:da:36:18:72:6d:80:7d:ab:9d:97:
77:e8:a6:9b:d7:b4:8c:6e:57:06:ec:25:d3:cf:24:
6c:f0:19:de:86:92:60:bd:b5:bd:6b:d6:3f:37:9b:
57:93:4e:d5:b7:73:00:d7:71:59:f1:e4:a1:5c:06:
47:a9:9b:60:98:03:73:b8:2a:eb:c0:17:11:46:67:
ce:e0:ae:35:a7:97:fc:63:5d:4f:74:64:b9:60:5f:
19:6b:b4:df:f9:1a:7f:5a:cd:f5:5b:91:ff:88:c8:
6c:ca:e8:34:77:f5:21:de:1a:fd:fe:18:90:3d:88:
33:f6:9f:af:33:18:19:f2:48:ac:cf:ca:c0:68:b5:
a4:14:a4:a1:b3:27:88:86:47:e5:0f:13:b2:2f:42:
0f:a0:7d:79:01:a4:04:29:ca:31:4e:70:22:5d:f4:
bb:3e:90:77:33:26:a2:32:a8:73:a9:92:95:ba:09:
3d:1e:99:b5:77:d5:00:cc:a0:85:d7:87:d4:aa:d3:
50:d6:a9:78:37:73:5e:b9:45:5a:6d:87:dc:93:78:
be:c2:48:97:17:8a:df:9e:01:cb:0e:b8:5e:bb:47:
41:bd:a2:34:1a:d2:64:86:ed:23:99:f8:1e:57:56:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:70:41:18:4A:F3:A4:6F:F1:23:26:F8:34:35:2E:10:E7:EB:EA
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/mz9wQRhK86Rv8SMm-DQ1LhDn6-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:36:01:f3:95:3f:82:53:53:c5:ed:af:28:7e:72:97:a0:21:
0f:e5:60:d7:e9:ed:e9:e9:e3:49:26:a1:45:ef:66:0b:77:1f:
aa:65:0a:b1:4d:46:d8:a6:34:03:a4:5f:46:a0:e3:fc:7a:89:
b6:2e:d3:92:d2:48:70:16:f9:18:3f:91:8d:38:28:85:3d:01:
d0:c7:f0:f5:87:15:7f:6b:3c:95:fa:9c:2c:26:99:ea:8f:d1:
61:69:f0:67:35:7c:7c:2f:c3:3a:08:62:16:6a:e5:fc:87:60:
16:48:fd:e2:57:0e:f0:eb:cd:1d:f6:1b:88:4c:8f:c8:85:a1:
4b:f6:15:ea:79:93:58:f8:ef:f0:76:13:68:b8:84:74:65:da:
4c:e3:09:8b:38:28:ea:ed:39:02:9e:d2:37:0b:0c:81:64:99:
ec:73:73:89:b6:7a:f3:4e:ce:67:72:76:79:d8:cb:42:21:31:
ce:fd:21:de:f9:c9:53:39:94:18:38:f7:9f:be:64:8c:e8:8c:
c7:7b:dc:da:6a:4d:9c:9b:60:18:c2:32:88:f6:9b:14:93:0f:
cb:cb:86:69:62:9a:6b:7e:d5:c0:a8:89:1c:91:54:44:9f:ae:
05:b3:f0:e6:c4:cd:65:ed:6c:97:a1:85:a9:c2:05:b5:47:99:
c5:9f:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:05 2024 by rpki-client on console-fra.rpki-client.org