Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/386Mjhaze58lY4OrW3OPj0aNhTE.roa
File: 386Mjhaze58lY4OrW3OPj0aNhTE.roa (raw, json)
Hash identifier: SVtw+jd+6jyiF//Ubxj4X+f8CkPhPJCEtjisbKBiWjM=
Subject key identifier: DF:CE:8C:8E:16:B3:7B:9F:25:63:83:AB:5B:73:8F:8F:46:8D:85:31
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 2464
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/386Mjhaze58lY4OrW3OPj0aNhTE.roa
Signing time: Sun 30 Jan 2022 18:59:13 +0000
ROA not before: Sun 30 Jan 2022 18:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59447
IP address blocks: 193.9.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9316 (0x2464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jan 30 18:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfce8c8e16b37b9f256383ab5b738f8f468d8531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:39:4e:a4:f1:8a:e4:2a:d1:30:fe:f3:9e:
7c:a9:6d:9a:99:c2:a2:07:44:33:80:65:12:8c:93:
c3:65:91:1c:6c:ea:7e:21:dc:9c:90:69:6c:2d:2c:
f4:a3:77:19:e6:54:dc:1a:b3:86:ca:74:38:c9:5e:
2a:8c:e5:78:a4:4d:96:ce:ae:30:94:0f:6d:d1:44:
db:b9:0b:f6:8a:93:80:1a:6e:0c:c2:8c:10:19:db:
fd:d1:87:d0:d5:86:4b:a6:a2:59:72:e6:ee:1e:19:
c7:9c:8e:12:7d:67:fd:40:7f:d1:bd:f7:3a:08:0b:
b0:74:00:35:ee:0a:f9:fa:27:98:0e:c9:46:2c:c6:
c4:dc:1b:c0:40:6d:0b:46:44:15:92:34:9d:a0:36:
57:de:3a:ce:a2:31:fc:85:8f:9d:4b:c0:86:49:13:
7b:67:da:90:64:0c:84:c7:f1:c0:76:72:0d:e1:7a:
f3:b4:e7:4d:41:03:e2:a6:1b:6f:34:fc:46:c4:97:
21:7b:01:cd:62:0e:7c:92:04:2f:83:37:1e:29:76:
a6:e2:3c:6a:ed:b5:70:6b:ac:9d:fb:8c:62:1b:83:
14:77:b0:dc:d8:58:e0:d2:db:c7:c6:82:b7:ce:63:
9f:f5:9e:c1:c0:ee:40:f1:fc:55:f3:72:dc:6f:b6:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:8C:8E:16:B3:7B:9F:25:63:83:AB:5B:73:8F:8F:46:8D:85:31
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/386Mjhaze58lY4OrW3OPj0aNhTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:30:d3:f4:26:5a:d6:a1:44:d0:6a:47:24:d8:98:1e:81:4a:
b9:60:05:fb:ac:ea:22:22:d1:5a:ae:2a:4f:2f:a8:fe:1e:8d:
37:be:57:a3:da:b7:9e:c1:7f:f6:cf:b3:6f:55:95:89:85:85:
3d:c5:20:8c:2a:ad:f3:94:89:a8:70:b5:74:0f:61:95:b4:ed:
78:53:8f:4f:84:5e:ae:b0:47:82:ec:6d:61:8c:ed:67:db:0a:
8e:34:01:3b:bc:76:e3:cd:6a:dd:74:77:98:7a:5c:c3:c8:50:
a0:d7:8f:51:a7:ff:fc:e4:1a:ad:a9:c8:44:a1:09:09:e7:96:
2c:4d:55:68:a1:8c:22:0f:cf:d1:d6:dc:8a:42:8f:4f:6c:7b:
c9:a8:92:d2:22:4a:ea:48:40:dd:82:72:ec:b1:51:f0:b8:15:
b3:01:36:d0:64:4d:95:28:38:96:14:70:cd:42:a9:db:d5:e6:
9a:5d:23:44:5f:48:ab:66:de:19:96:13:cb:2d:c7:02:c2:e9:
a3:b1:24:2e:33:24:8b:83:47:93:84:c0:21:b9:1b:81:46:d3:
1b:be:d6:89:b9:74:24:73:a1:b9:84:fb:99:43:14:72:b5:a7:
b2:fd:d7:da:ca:90:10:5d:e2:1d:9e:26:c9:ef:2e:70:41:72:
a6:97:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-fra.rpki-client.org