Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/SYoal0iDkHfsUi6Nmo_N1cOauEw.roa
File: SYoal0iDkHfsUi6Nmo_N1cOauEw.roa (raw, json)
Hash identifier: ggsmMLAKiQlyVNh7ZpHB4H+SHKCnG3LJgWpdN9rlDsQ=
Subject key identifier: 49:8A:1A:97:48:83:90:77:EC:52:2E:8D:9A:8F:CD:D5:C3:9A:B8:4C
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 0228AA2A
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/SYoal0iDkHfsUi6Nmo_N1cOauEw.roa
Signing time: Sat 01 Jan 2022 05:56:00 +0000
ROA not before: Sat 01 Jan 2022 05:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210166
IP address blocks: 194.61.34.0/24 maxlen: 24
194.61.33.0/24 maxlen: 24
194.61.35.0/24 maxlen: 24
194.61.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36219434 (0x228aa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Jan 1 05:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=498a1a9748839077ec522e8d9a8fcdd5c39ab84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:44:a9:49:0e:21:40:5a:c4:e4:91:80:e5:
08:9c:de:4b:55:9c:c9:10:3f:03:32:65:a4:46:f2:
45:09:2d:ac:0e:0f:0d:43:09:83:d8:2e:35:6d:e6:
12:39:91:7e:a6:c8:b9:92:a8:54:48:8b:af:1e:07:
57:17:d1:ce:97:e3:d6:f4:d8:0a:5f:f9:b3:bd:a4:
23:6f:2d:3a:96:a8:03:44:69:b6:ce:95:41:c0:73:
b9:7a:bd:93:0d:60:37:08:a7:b1:23:de:1e:90:25:
9a:e7:55:f5:14:02:13:ae:84:e7:ef:1c:ae:8a:7a:
65:3a:92:af:e2:9d:6e:96:d1:89:76:36:dc:64:bb:
0a:2c:14:ca:2e:7c:e5:7a:80:b8:a5:40:30:ec:6f:
16:e5:44:70:c2:aa:6b:4d:ad:af:24:d9:03:54:2e:
5b:57:e8:ee:1d:6d:03:b6:81:4c:49:a4:4d:f6:4a:
18:7e:e4:1b:a2:8e:78:69:9b:e0:47:be:81:07:13:
7a:bf:f2:96:fb:81:1e:9f:e7:ec:e4:67:20:b4:81:
8a:e2:98:d7:fc:ef:12:46:10:50:b6:7b:ac:fc:7d:
98:89:b7:08:f7:0c:a9:1a:ae:a1:26:4b:c3:e5:a7:
1a:04:ee:69:8a:0e:ff:cd:91:ca:8a:21:11:93:56:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:1A:97:48:83:90:77:EC:52:2E:8D:9A:8F:CD:D5:C3:9A:B8:4C
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/SYoal0iDkHfsUi6Nmo_N1cOauEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.32.0/22
Signature Algorithm: sha256WithRSAEncryption
00:f3:7a:f2:bb:23:20:6e:a4:85:67:99:6b:fb:53:f9:95:2d:
23:0b:30:6d:dc:69:8f:a3:0f:16:bf:14:9f:c9:09:21:7f:a2:
33:cc:ec:ab:b7:9c:af:2b:94:58:bc:0e:cd:1d:ca:3f:c6:27:
08:30:81:6c:b3:8a:7e:7c:6b:0f:aa:c4:14:52:4c:7c:0f:4b:
18:eb:86:94:73:15:e8:2f:1c:80:d2:09:0f:72:8c:31:8f:9a:
67:d8:c8:e2:e7:9c:ed:69:8c:7a:e5:98:16:aa:0f:ce:2e:61:
0e:db:ff:64:5a:5a:aa:62:19:5c:8a:d8:8a:0e:6f:f7:bb:82:
ea:09:81:5d:a9:11:da:16:22:c3:9e:3b:e3:62:d5:1b:a9:ca:
7d:30:ea:ab:7e:80:43:aa:39:13:96:93:92:98:1a:9c:70:c2:
c2:be:df:7d:5d:ad:fa:5a:4e:0b:42:a5:52:30:8a:87:93:af:
1b:9f:c1:d2:76:3b:73:f5:8d:c3:6a:18:bc:82:dd:f0:b2:15:
8f:4c:5c:3a:80:97:39:4e:18:82:80:75:d2:53:89:e2:2d:8d:
3d:da:e3:d1:c7:3c:3b:9d:07:47:3f:60:93:83:c2:c4:f3:97:
d4:f3:b0:74:fc:23:c3:9c:e9:25:10:b5:8f:1f:cf:be:33:74:
da:cc:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:38 2023 by rpki-client on console-ams.rpki-client.org