Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/sAOIFGAy8jjqOc8eOx4lYZa40kQ.roa
File: sAOIFGAy8jjqOc8eOx4lYZa40kQ.roa (raw, json)
Hash identifier: hX9TWCeQ2B9KEJP94qeIB5HCOyAm9d5S5Dwz1wT+zQ4=
Subject key identifier: B0:03:88:14:60:32:F2:38:EA:39:CF:1E:3B:1E:25:61:96:B8:D2:44
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 167C4CCF
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/sAOIFGAy8jjqOc8eOx4lYZa40kQ.roa
Signing time: Sat 01 Jan 2022 01:58:59 +0000
ROA not before: Sat 01 Jan 2022 01:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41622
IP address blocks: 193.104.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377244879 (0x167c4ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Jan 1 01:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b00388146032f238ea39cf1e3b1e256196b8d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:11:36:77:54:73:d1:2d:49:49:dd:3e:5e:
f1:b6:5a:82:7c:89:04:ea:2b:17:c5:60:d3:00:75:
61:c4:fa:60:d2:26:73:ed:5f:a4:ec:42:ca:bd:fd:
8a:4b:75:26:cb:60:b4:e5:53:c9:e7:69:ca:8b:79:
cb:d9:4f:ef:bd:af:4f:42:ee:0c:a3:fe:8f:76:63:
80:9a:dc:33:b2:b0:79:20:71:ad:e4:e1:03:44:24:
ce:03:89:0a:f3:10:8b:44:57:b7:3c:02:b4:6d:5d:
73:a8:5a:6d:b6:c1:b0:a7:bb:a6:9a:f1:31:2c:2a:
0d:f7:39:99:88:46:08:06:30:e8:7c:11:c9:67:f7:
a9:fd:18:64:46:14:4f:ee:f3:20:11:df:22:39:fe:
c8:7e:0f:c0:8d:a5:9d:bf:b5:e7:fb:0b:9e:f6:85:
59:ac:1a:7d:29:b5:c1:ae:20:67:b1:99:41:a1:a4:
d1:58:e6:9e:d3:c4:38:24:21:75:66:80:2e:f1:8c:
af:41:ed:d7:ec:96:2b:d5:b0:eb:c8:db:cc:4a:5c:
d4:06:e8:a9:c4:a4:36:bf:3f:2e:b1:fa:6a:35:e7:
33:d2:eb:db:1a:dd:55:a8:7d:96:b4:b4:31:69:1a:
9c:2d:98:d5:3e:d1:2e:9c:ae:ff:7c:b8:fd:78:4d:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:88:14:60:32:F2:38:EA:39:CF:1E:3B:1E:25:61:96:B8:D2:44
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/sAOIFGAy8jjqOc8eOx4lYZa40kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.116.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fd:9c:59:e9:d7:ac:d8:28:7f:34:1c:fe:96:a1:71:e0:d3:
ab:d4:b4:aa:86:a7:d3:b0:31:16:20:53:ac:57:f9:ed:ae:81:
88:2d:5c:31:a3:33:92:98:3f:97:e9:b3:e3:25:ee:69:7d:c6:
32:7f:a8:b6:35:50:cc:71:6f:e2:a5:f9:38:61:6f:ba:e1:36:
3a:b7:ec:bb:85:e5:38:51:bf:c0:92:61:c0:5d:11:b6:06:89:
e6:48:f4:3a:71:74:cc:60:ee:bc:fb:81:fd:ec:63:8b:7e:de:
c8:dc:a7:4e:6e:23:58:9d:b5:32:9a:13:45:3f:c7:24:f3:32:
b9:a5:ad:c8:07:2c:de:77:49:de:48:1f:e2:19:60:87:eb:b8:
57:b6:d8:65:cd:9c:03:e8:89:83:b6:f2:99:57:da:6e:ab:8e:
81:23:63:25:ff:85:f6:bd:dc:08:49:ee:bb:80:e9:73:ae:d0:
80:27:14:5a:1a:0f:c0:7c:d0:81:9d:a0:ce:e6:dd:01:1c:3e:
e9:a2:5b:39:c5:57:d2:84:30:ef:cd:f8:ee:6e:8e:96:90:ec:
69:01:ba:30:3f:93:9e:23:2a:76:e8:a6:a6:e2:9a:fe:dd:49:
8d:c1:36:b5:d4:be:c3:fb:93:96:4e:b3:7a:d1:90:51:2e:42:
35:39:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org