Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/a2AQBL9xKVCkzHrZpEp18HEaq4k.roa
File: a2AQBL9xKVCkzHrZpEp18HEaq4k.roa (raw, json)
Hash identifier: 69m8fZwJNdQ9asgZy8JPAJYQghRaulcSPocCuDt2m9U=
Subject key identifier: 6B:60:10:04:BF:71:29:50:A4:CC:7A:D9:A4:4A:75:F0:71:1A:AB:89
Certificate issuer: /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial: 049169AF
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/a2AQBL9xKVCkzHrZpEp18HEaq4k.roa
Signing time: Sat 01 Jan 2022 14:05:14 +0000
ROA not before: Sat 01 Jan 2022 14:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24929
IP address blocks: 195.144.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76638639 (0x49169af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Validity
Not Before: Jan 1 14:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b601004bf712950a4cc7ad9a44a75f0711aab89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:a4:ac:a9:35:27:0e:38:29:cf:f9:00:c1:
0c:94:b1:29:43:69:95:54:87:b5:06:15:e7:14:56:
d7:6c:52:a1:ac:3b:6d:df:a5:78:46:0c:7e:44:f3:
c1:42:d3:42:4c:2d:f7:6c:69:c5:3b:c2:98:9f:e3:
bf:95:95:ac:f5:28:1b:6a:76:fe:93:69:50:8a:d3:
29:fb:64:33:87:4f:bd:00:61:c7:a9:de:a3:03:74:
a6:6a:3e:f2:60:a2:94:ea:c8:61:20:cb:10:81:a8:
ee:4c:70:76:93:d9:52:fa:17:dd:f0:d1:e1:96:f6:
06:bd:bc:71:ea:27:f2:bc:49:eb:a4:be:09:31:ab:
3f:ec:c7:b5:cf:a8:0b:8e:bc:86:38:12:dd:ed:13:
5f:0f:ac:e3:62:4e:26:9e:7f:93:83:4c:17:e7:1b:
1b:1c:ed:28:ed:2d:3f:2c:68:9c:83:7a:50:67:a9:
47:ac:fe:41:01:30:1b:93:a2:31:61:50:a1:3d:08:
af:29:37:6d:db:2a:90:5b:c1:f7:c7:2c:49:71:88:
5a:05:92:5a:a7:2b:1c:2f:72:f5:ee:a0:a5:55:72:
b9:b7:17:45:f6:c8:54:2d:c8:f8:78:52:06:f5:fe:
16:81:ab:a9:b6:4f:7e:30:f0:e9:77:d0:c0:45:78:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:60:10:04:BF:71:29:50:A4:CC:7A:D9:A4:4A:75:F0:71:1A:AB:89
X509v3 Authority Key Identifier:
keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/a2AQBL9xKVCkzHrZpEp18HEaq4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.9.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7c:08:1c:70:18:08:d9:05:1c:88:2d:45:d7:6c:30:d9:6f:
84:f5:76:07:ab:97:65:d5:90:f6:e4:dc:c0:7e:50:64:84:95:
50:5f:cb:aa:64:ea:f2:4f:12:1b:ff:99:be:6d:28:6f:b5:ee:
8b:e2:3e:15:1c:e4:0b:9a:b9:d5:fd:a6:9d:62:af:90:99:28:
b7:44:64:6c:07:3b:d2:ae:f9:7e:02:66:38:30:80:12:91:11:
42:13:4d:41:32:ac:5c:4b:1f:e6:7f:5e:4e:65:6d:0d:2c:4e:
df:f6:cc:4d:3e:8d:ad:34:ab:8c:42:df:0f:9f:a6:8f:4d:1e:
dc:7b:e2:79:82:b7:f8:fd:7f:13:6c:8f:58:d5:7a:26:80:4e:
eb:fc:a2:c7:de:34:b5:99:37:30:79:33:7b:32:36:d6:3a:14:
e1:49:dd:7c:31:dc:b7:d3:43:f4:b3:d8:f5:8b:89:85:d8:c6:
b9:fd:4a:ff:6c:ac:34:8d:93:bc:bd:75:4d:59:56:e7:69:49:
97:ca:e0:74:96:85:4a:0b:b0:27:28:6b:e0:12:3b:d4:7c:87:
a1:4a:94:ad:17:de:91:d4:82:c0:8e:e8:e3:43:28:d6:bb:89:
9a:f6:ec:b7:a5:91:08:ec:e4:5f:06:07:c8:36:58:b4:65:45:
3e:20:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org