Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/P8u0FDp0otasrX4BED8WrEtpSK4.roa
File: P8u0FDp0otasrX4BED8WrEtpSK4.roa (raw, json)
Hash identifier: kK+bgkJympIcnjusWMRCjmdIFkAFZlkUJ+kvkobPIOI=
Subject key identifier: 3F:CB:B4:14:3A:74:A2:D6:AC:AD:7E:01:10:3F:16:AC:4B:69:48:AE
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 18AAA062
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/P8u0FDp0otasrX4BED8WrEtpSK4.roa
Signing time: Mon 20 Jun 2022 07:26:44 +0000
ROA not before: Mon 20 Jun 2022 07:26:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57652
IP address blocks: 188.72.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413835362 (0x18aaa062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jun 20 07:26:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fcbb4143a74a2d6acad7e01103f16ac4b6948ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:8f:0d:76:6d:8f:24:fb:e6:97:df:a0:0b:
93:72:03:54:ea:49:27:87:4e:cb:12:66:9c:cc:e0:
67:09:c6:fd:2d:f0:34:15:a0:0f:57:25:5c:46:4e:
ba:81:dc:d4:07:68:e7:07:dc:27:5f:f0:02:d5:05:
45:63:59:4c:21:99:42:ed:92:6a:db:de:83:3d:ef:
03:5d:84:94:5f:5c:63:b6:68:34:6e:7b:33:3d:58:
68:2b:37:30:38:66:51:f1:54:b0:1f:15:4d:78:9a:
b3:bb:c7:80:29:48:b1:43:f9:31:2f:16:f0:d5:f0:
19:20:c5:56:42:98:4a:d8:91:4d:8e:d2:16:70:67:
19:6c:02:93:5a:1c:92:cb:b0:eb:9c:ee:10:2f:ef:
c8:3d:34:4b:08:f0:4d:12:a2:24:f2:69:a9:b9:14:
3e:34:6c:b6:cd:53:1e:4a:eb:05:4f:38:b0:00:77:
2e:e6:02:db:ec:98:86:87:20:40:7c:41:07:99:fd:
49:75:cd:09:4c:99:12:87:ce:39:80:6e:b1:3d:b1:
96:3c:78:c6:68:b5:b7:ae:57:29:87:3a:27:78:a3:
08:6e:c8:dd:03:11:2d:6d:ef:a8:60:39:fc:3a:1a:
31:d7:e3:38:9d:48:f1:34:ed:90:8f:d9:89:ae:fc:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:B4:14:3A:74:A2:D6:AC:AD:7E:01:10:3F:16:AC:4B:69:48:AE
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/P8u0FDp0otasrX4BED8WrEtpSK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ca:5d:84:4b:77:d3:c7:b3:0e:87:f1:6f:08:5e:6b:cd:0b:
95:17:ee:2f:54:17:b6:6f:fe:8a:5a:1c:a7:71:4e:77:00:3f:
86:1f:bb:92:0c:5d:db:2b:ed:78:ba:e6:82:94:29:a7:cc:55:
ea:92:0e:1f:3a:53:58:1a:3c:3f:43:bf:5b:13:1a:ab:6a:ee:
33:6f:05:7f:49:77:9e:82:06:7d:0e:33:7d:db:a0:26:bf:82:
02:b9:ba:2e:76:44:22:c1:46:c3:10:4e:ec:64:69:3b:14:67:
00:53:1a:aa:a0:51:54:47:01:f7:02:82:6e:87:c8:f1:61:4d:
ff:b8:26:69:11:7f:94:1f:39:ea:7f:a6:3c:56:14:b7:38:3c:
c6:9c:48:80:9a:e2:74:c1:00:b2:d8:40:73:0c:6b:60:77:75:
bd:02:b6:97:b4:49:bb:0b:e4:9d:7c:f0:c4:12:c3:ed:18:42:
44:d9:f3:d2:aa:f2:7c:11:8a:62:ee:9b:19:f2:af:b8:91:10:
67:fb:13:9c:79:ee:b7:88:a9:46:51:21:9c:13:3a:6e:38:21:
e0:5f:b3:e3:93:21:f1:f2:ca:fd:af:3b:8a:59:8f:b0:92:54:
cb:4c:2e:3b:8f:b6:8c:d0:94:73:a2:d1:5e:dc:a5:bc:9a:db:
c8:a9:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org