Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4JajRsRC_knwcMq2OVz0owcgrEk.roa
File: 4JajRsRC_knwcMq2OVz0owcgrEk.roa (raw, json)
Hash identifier: Ihc24qIqBWhjtJNsqBz8LkMpUeLl+eFxHPxpN9zOruU=
Subject key identifier: E0:96:A3:46:C4:42:FE:49:F0:70:CA:B6:39:5C:F4:A3:07:20:AC:49
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018537B5AA3EBF9F761D02C4EB1C82EDE6FF
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4JajRsRC_knwcMq2OVz0owcgrEk.roa
Signing time: Thu 22 Dec 2022 02:42:10 +0000
ROA not before: Thu 22 Dec 2022 02:42:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149020
IP address blocks: 194.5.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:37:b5:aa:3e:bf:9f:76:1d:02:c4:eb:1c:82:ed:e6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Dec 22 02:42:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e096a346c442fe49f070cab6395cf4a30720ac49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:10:9b:62:5f:e7:ce:14:c0:07:e0:06:13:
58:42:5e:03:30:24:60:99:81:19:02:9c:69:46:3b:
8f:37:58:24:29:e6:54:33:f8:3e:a9:77:6e:98:aa:
93:a9:64:50:d5:af:64:13:3d:76:07:2f:63:1b:ae:
55:41:14:ce:b9:e9:15:6d:43:67:4c:48:3a:de:c2:
be:12:c4:7a:53:23:b2:29:e1:7c:2e:67:61:ae:7f:
96:71:28:56:04:98:52:b0:0d:49:e3:c7:ed:02:ac:
89:68:b7:7c:13:86:2e:2f:05:78:c7:39:b7:94:f8:
f7:ae:20:50:78:ab:2b:d4:45:7d:bf:46:3a:36:72:
58:2e:02:96:b6:56:27:bf:5a:f6:79:23:7d:c9:dc:
fc:84:ed:bc:4f:00:cd:a2:9e:99:a4:76:c9:00:22:
6b:bb:63:89:89:72:2b:52:e9:d7:d2:af:a9:50:14:
ce:ca:5d:f8:3c:b0:48:f9:9a:02:31:8c:f7:ea:fa:
fb:7a:69:89:a0:96:58:e3:ed:93:ff:a9:b1:75:73:
27:93:43:88:fd:73:35:6b:04:20:24:e9:14:be:23:
3b:15:01:f7:6d:1b:a8:fe:39:8b:ea:1e:35:31:14:
93:dd:e0:88:40:af:f4:ab:4c:30:ff:3b:10:19:35:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:A3:46:C4:42:FE:49:F0:70:CA:B6:39:5C:F4:A3:07:20:AC:49
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4JajRsRC_knwcMq2OVz0owcgrEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:70:42:73:f2:16:02:9a:a5:ae:f0:62:4c:d9:9b:a1:9c:74:
38:20:43:bb:97:55:1e:c8:12:d7:96:3c:f9:27:2a:44:0c:f8:
b7:5f:58:39:61:a6:b0:c2:e9:cb:35:b1:cc:41:6a:3d:1e:50:
56:9d:5d:03:8c:0a:16:a5:65:fa:cb:77:8f:87:82:a8:b5:f0:
c3:23:aa:e9:6d:31:bc:73:4d:3a:b5:cc:b8:d9:a0:84:f8:fa:
e7:5f:f5:6c:bb:f9:23:59:87:6b:b0:ff:b8:af:b2:6a:2a:19:
54:87:df:a4:00:8c:bb:dc:dd:36:0a:3c:29:c7:07:c2:a9:9c:
47:18:d8:58:c8:04:dd:51:4e:01:73:f5:21:dc:e2:e0:6b:74:
a7:e3:f8:5e:2d:be:f8:a0:6a:9a:41:2a:d2:a8:7d:4d:a7:dd:
0d:9e:b3:3b:92:3d:5a:a1:34:16:a5:72:88:03:bd:4e:52:3a:
93:2d:77:d2:58:3e:db:6e:6a:e8:1e:07:29:a2:c8:67:b8:de:
5f:3c:44:78:2f:e4:7c:39:d4:79:df:1b:79:3a:6a:70:0e:24:
be:de:73:90:15:6b:f2:85:07:a1:45:a9:37:67:b1:8d:ae:e4:
2d:73:f2:e0:85:47:14:cd:20:e1:fb:19:d1:66:fb:08:db:2a:
b7:08:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org