Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/m0B6sbZJ1tmsFk3uLhKYVhrYszw.roa
File: m0B6sbZJ1tmsFk3uLhKYVhrYszw.roa (raw, json)
Hash identifier: Jatk9Rp27wbC2WXfgs/7otJxDl8M2dPA1+DFiC9cMv0=
Subject key identifier: 9B:40:7A:B1:B6:49:D6:D9:AC:16:4D:EE:2E:12:98:56:1A:D8:B3:3C
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 01F34A
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/m0B6sbZJ1tmsFk3uLhKYVhrYszw.roa
Signing time: Thu 09 Jun 2022 10:07:02 +0000
ROA not before: Thu 09 Jun 2022 10:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 194.176.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127818 (0x1f34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Jun 9 10:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b407ab1b649d6d9ac164dee2e1298561ad8b33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:b1:f7:7e:12:90:c1:4f:21:0d:de:2c:41:
3a:eb:db:f1:47:be:a8:6e:89:cc:6a:13:ff:ea:1c:
1f:4b:6b:56:5f:14:41:0b:f5:9c:a4:02:1e:3f:36:
0f:94:f5:cc:1e:13:90:30:3b:85:c6:4f:15:d9:df:
e6:d1:9e:48:b9:a3:1a:8e:78:1e:0b:d6:e0:ba:7a:
b0:97:ab:e2:6b:86:3d:e2:88:03:48:cb:a9:8d:24:
20:11:7d:ec:64:2e:b3:30:de:37:0c:92:d7:7d:38:
35:c3:ad:ff:9b:d9:0a:02:1c:29:38:c9:8d:8a:0c:
1d:89:54:53:b1:eb:6d:25:c1:86:34:de:d9:9d:3e:
3e:28:82:22:91:ae:6b:49:02:0f:70:92:f2:22:61:
50:41:e8:65:62:a7:d2:64:2f:3a:23:95:3b:a0:ac:
8c:ad:78:c1:1a:a8:34:f3:3f:79:fd:76:1e:0e:68:
65:26:79:43:d4:b0:83:02:1b:b4:e4:81:97:cb:88:
20:35:65:c7:9a:d6:82:ec:b4:5a:e8:29:4e:34:c2:
59:4d:33:09:d8:14:cf:fc:65:1a:d2:98:ee:0e:3a:
f9:8d:8c:ad:32:f6:ab:12:f7:60:bf:5d:d3:4c:90:
ca:75:44:74:2f:ce:97:6f:94:b0:8e:3f:0f:17:02:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:7A:B1:B6:49:D6:D9:AC:16:4D:EE:2E:12:98:56:1A:D8:B3:3C
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/m0B6sbZJ1tmsFk3uLhKYVhrYszw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.173.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d7:5a:6d:b6:32:0d:18:ba:d6:71:93:73:0c:92:19:b5:36:
b9:78:13:dd:be:97:7c:9f:80:39:ed:73:86:22:8e:ea:20:a2:
e2:38:3b:c2:58:ed:86:0f:85:35:ab:db:2e:38:50:e1:3a:0a:
3b:9d:98:55:63:51:96:ac:a3:09:f3:7a:ab:4e:c4:d5:dc:3d:
26:59:a8:1d:dc:0e:4d:cb:d2:a4:b2:cd:d0:da:50:3d:72:94:
83:79:09:37:4d:98:dd:5d:6c:2e:5f:97:7c:20:c6:45:7e:97:
75:d2:63:c5:71:57:39:68:5f:c6:cd:cf:d4:a1:86:3b:df:1a:
21:ec:bc:6c:79:ea:f9:00:98:b6:d8:3d:70:71:5b:6c:3c:05:
36:d4:25:8a:68:9a:84:da:59:23:6d:c6:8e:15:b6:32:4f:8d:
e0:a7:ac:6d:9b:95:6e:94:b3:2f:e3:37:5e:e9:fb:5c:56:d1:
e1:e7:c4:8e:47:fd:99:56:ed:44:2c:18:f7:0b:b2:9c:53:c5:
b8:b0:b2:98:d4:e6:a4:44:f9:7d:01:e8:28:7a:96:f3:70:fd:
ff:e7:03:29:4c:31:cb:70:ad:3f:58:9b:0e:0a:6b:7d:bb:b6:
88:7e:4b:38:a5:f3:ed:03:56:24:1a:3b:17:57:f4:a4:3d:4d:
4c:b7:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:33 2024 by rpki-client on console-ams.rpki-client.org