Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/ni9VxKHIQcw4Uu80T-wXZVDoqco.roa
File: ni9VxKHIQcw4Uu80T-wXZVDoqco.roa (raw, json)
Hash identifier: +Ihp+vGlZ5cFvTu3+kRvYHth3m0YgXzYg0D+LZhfrSE=
Subject key identifier: 9E:2F:55:C4:A1:C8:41:CC:38:52:EF:34:4F:EC:17:65:50:E8:A9:CA
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 03CCDB1E
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/ni9VxKHIQcw4Uu80T-wXZVDoqco.roa
Signing time: Sat 01 Jan 2022 05:59:55 +0000
ROA not before: Sat 01 Jan 2022 05:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57167
IP address blocks: 193.0.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63757086 (0x3ccdb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Jan 1 05:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e2f55c4a1c841cc3852ef344fec176550e8a9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:05:60:63:fa:d1:52:ae:39:47:95:d1:31:
a8:45:10:2f:cd:aa:3a:b1:dd:42:86:0d:66:61:61:
0f:8f:b1:92:0e:f5:35:d2:d1:a8:a6:01:65:f8:46:
8c:15:02:5e:66:0c:21:ea:e1:a9:40:c5:b6:63:ed:
d0:38:ae:b6:95:30:02:a1:2a:0d:6d:8b:eb:db:73:
45:d1:9b:20:44:6c:a1:f3:33:e4:5b:33:1c:5e:d4:
d8:53:5f:40:75:aa:8a:23:3c:cc:b8:9f:42:75:19:
14:76:66:1f:e2:04:fe:19:b2:a0:a7:c6:45:16:30:
a9:fd:f2:93:69:1e:27:f3:29:23:1c:bd:b2:8f:3a:
7b:de:52:4f:4c:b8:94:33:fc:ab:3a:a9:43:b5:15:
8a:c7:06:e1:eb:7a:44:32:32:47:40:0a:ec:3d:70:
e5:1d:28:fb:b4:d5:78:c2:a9:95:76:6c:9e:00:3a:
27:fd:3c:03:c1:75:a7:9b:e3:22:77:6b:7d:6a:b9:
ec:cc:57:c4:a6:c9:6e:1e:00:d7:5e:83:26:3e:7c:
eb:5a:c5:04:26:51:d1:59:d8:50:e9:97:dd:ff:93:
c3:be:42:f8:19:60:27:c4:47:10:19:c7:83:8b:4a:
e7:4e:9c:e9:86:42:4f:7a:29:4e:a1:f3:11:6c:9f:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:55:C4:A1:C8:41:CC:38:52:EF:34:4F:EC:17:65:50:E8:A9:CA
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/ni9VxKHIQcw4Uu80T-wXZVDoqco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8f:d3:52:22:cf:3f:3d:59:01:c0:3a:46:ff:79:07:4f:bf:
82:87:28:90:74:bc:61:fd:21:f4:e1:1f:5c:f8:77:eb:c8:51:
09:35:0b:ac:e7:c2:9a:c5:f3:cd:8f:76:e3:18:9c:e9:66:c4:
50:54:93:7e:e0:2d:20:b2:90:a9:6f:6a:94:01:3a:7e:71:48:
e2:f2:51:bd:8f:d4:45:4e:c3:9c:68:ee:60:fc:b5:e6:13:39:
6a:05:ca:b8:e9:6d:8b:03:cc:e9:ba:73:ba:5c:37:f8:b2:5c:
c5:99:13:22:b0:86:c9:53:f8:84:50:87:43:44:35:48:33:09:
43:ee:ed:51:97:75:42:1a:b0:9b:c8:bb:54:5c:95:b9:c1:35:
73:bc:21:6d:35:e1:d3:ae:8a:17:b4:53:4c:b5:98:d8:d1:a5:
4e:49:e7:48:f3:3d:ce:75:0e:a4:e9:59:53:fa:42:42:11:c8:
72:50:4d:b3:11:76:5f:19:62:11:56:0e:30:cf:56:6e:ee:57:
2e:63:9f:2e:87:20:a0:bf:a9:89:19:d1:6c:85:7e:ac:b6:09:
08:eb:ec:da:b5:53:e7:10:44:d8:25:b3:85:b3:cc:5a:04:6d:
93:4f:d6:3a:77:c2:08:5d:0f:e9:02:2c:ea:47:89:8b:93:82:
22:54:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org