Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/IHqTLDBQZFuAQ7CwFvh1EfG3k7U.roa
File: IHqTLDBQZFuAQ7CwFvh1EfG3k7U.roa (raw, json)
Hash identifier: AAcAh4pRm/RjAZjd5ASsVI9XrCipbmT3yXz92tHzIN4=
Subject key identifier: 20:7A:93:2C:30:50:64:5B:80:43:B0:B0:16:F8:75:11:F1:B7:93:B5
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: B7F3
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/IHqTLDBQZFuAQ7CwFvh1EfG3k7U.roa
Signing time: Thu 28 Apr 2022 12:42:14 +0000
ROA not before: Thu 28 Apr 2022 12:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.11.152.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47091 (0xb7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Apr 28 12:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=207a932c3050645b8043b0b016f87511f1b793b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:ce:1d:fe:8b:9a:94:26:aa:be:1d:15:48:
fd:8a:8a:73:c6:18:7e:af:4e:7f:c4:23:01:4b:d7:
ae:a5:f7:1f:05:41:09:9b:1d:69:fd:73:95:fe:69:
0c:39:e6:bf:43:11:b0:9f:90:86:bd:1e:cb:53:62:
12:5f:87:8d:eb:a6:6a:b8:6c:b2:4e:16:91:2f:6f:
7b:e8:41:ad:42:72:63:71:4c:91:64:2a:92:79:14:
3c:b4:7a:d5:06:76:43:ed:23:db:8d:b2:07:fb:a2:
d5:2a:b7:b9:f3:ca:af:c3:84:42:5f:07:c0:f9:fc:
ba:42:e0:cd:13:1e:5f:c1:b6:53:7b:c6:09:80:cc:
fb:92:20:5e:8b:eb:11:29:e6:b3:64:a4:a7:11:73:
1e:33:c3:49:21:bd:df:b9:4e:4b:10:54:01:61:a8:
7d:75:22:fc:d7:11:49:a0:e5:ce:f6:99:22:31:41:
9e:9a:b6:6b:45:bd:c8:c4:b1:4e:b0:e8:8b:63:ef:
b3:56:34:14:01:30:a3:a6:a7:7d:63:e1:03:5d:a5:
5e:84:21:ef:44:38:0f:f7:ed:6a:ec:ed:49:9f:e9:
f6:b0:33:ce:44:14:e9:44:78:16:29:91:95:93:5d:
62:43:af:b0:10:63:bf:9c:b0:70:5f:4b:2c:56:93:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7A:93:2C:30:50:64:5B:80:43:B0:B0:16:F8:75:11:F1:B7:93:B5
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/IHqTLDBQZFuAQ7CwFvh1EfG3k7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.152.0/23
Signature Algorithm: sha256WithRSAEncryption
28:14:6b:a3:60:02:93:a7:60:2b:ba:70:1a:10:7b:8f:68:dc:
c6:bb:44:99:57:21:75:d7:13:42:d2:2e:ed:4b:b9:ea:d2:9e:
f0:7a:01:e3:3e:13:e3:fd:cc:3f:ab:a9:3b:b3:81:94:39:7b:
ef:8b:bc:63:ab:c0:5d:a3:60:3b:b6:99:f8:29:b2:fa:5d:35:
6d:7d:88:a3:f1:ce:04:61:71:04:a4:5c:a0:97:6d:a5:47:c6:
ab:f3:ed:82:81:ba:59:04:c1:f6:33:12:00:cd:e6:bf:14:92:
6b:19:b0:83:47:a0:ae:8d:18:ee:ce:ee:4f:fa:33:bd:84:c0:
d1:63:c1:e2:54:da:1b:1f:68:4b:71:9a:13:28:dd:3b:6c:5c:
79:33:4a:bc:04:50:6a:a8:2f:30:47:b7:f3:19:ae:dd:bf:2e:
16:d9:b3:55:0d:c7:a3:37:76:df:fc:14:e6:9c:2a:34:61:04:
82:8a:6a:f6:40:77:66:89:5f:7e:8b:c2:f8:44:6c:76:58:f7:
7b:88:ec:ac:88:86:ea:7f:8f:2b:57:c4:b9:ba:d2:5b:b7:f7:
38:70:c1:38:ed:b9:cb:df:6a:9e:d5:fb:41:55:cf:ec:57:83:
4a:ff:00:92:ba:0d:c8:31:21:f4:df:06:42:09:20:43:58:5c:
6a:d2:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:31 2024 by rpki-client on console-ams.rpki-client.org