Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/yealvVgRvTlAni5mK223dzwW64U.roa
File: yealvVgRvTlAni5mK223dzwW64U.roa (raw, json)
Hash identifier: S9yL8NulHjuGaTdmMKSM7VdLFewWOpr4w+KwQ1/FBoQ=
Subject key identifier: C9:E6:A5:BD:58:11:BD:39:40:9E:2E:66:2B:6D:B7:77:3C:16:EB:85
Certificate issuer: /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial: 05783CED
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/yealvVgRvTlAni5mK223dzwW64U.roa
Signing time: Sat 01 Jan 2022 04:02:16 +0000
ROA not before: Sat 01 Jan 2022 04:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197752
IP address blocks: 176.100.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91765997 (0x5783ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Validity
Not Before: Jan 1 04:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9e6a5bd5811bd39409e2e662b6db7773c16eb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:f2:0b:06:2d:1a:63:f1:b3:81:9f:dd:4e:
6f:e9:78:6a:68:c2:be:0c:1d:fd:82:35:31:e3:8e:
6f:c2:5d:4b:ef:a2:ae:0b:04:68:71:3e:49:94:c9:
1e:39:f8:dc:90:29:7c:a7:e0:94:33:3b:04:1c:8f:
01:a6:2a:33:e7:a2:65:15:df:ea:3f:3f:4d:04:a7:
a8:6f:8c:44:3c:86:cd:6a:c3:e0:79:a3:69:59:6f:
19:4e:db:08:e0:b5:ae:b7:6f:a2:fe:fe:c4:c8:d5:
4e:00:5f:7b:12:11:ef:75:9d:80:b3:1d:82:03:cf:
e4:5b:91:49:c8:51:64:12:63:62:78:4b:eb:d7:42:
1f:80:49:b0:5e:89:e6:1b:de:f4:43:45:a0:43:43:
ba:a1:9e:15:f4:dc:ed:90:12:86:46:b3:98:bd:4e:
b2:43:fc:af:3e:0c:62:9d:52:99:89:cc:9b:82:67:
31:8f:9e:b6:2d:6c:cb:a4:0e:1f:17:fa:23:47:6f:
69:f9:cd:90:9e:f4:e6:ab:9b:76:77:ee:5d:61:3b:
f5:83:a3:ff:21:0e:26:c7:d8:cc:5f:1b:b3:a7:e0:
9f:b7:6e:bd:b9:01:4b:9f:6d:1f:09:9b:68:32:10:
5f:e9:76:e0:02:c2:5b:30:dd:60:3e:a9:7d:74:32:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:A5:BD:58:11:BD:39:40:9E:2E:66:2B:6D:B7:77:3C:16:EB:85
X509v3 Authority Key Identifier:
keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/yealvVgRvTlAni5mK223dzwW64U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.200.0/21
Signature Algorithm: sha256WithRSAEncryption
68:95:23:ac:c1:22:8f:07:9b:2d:4f:49:08:c6:b3:0a:c9:80:
47:64:9b:4b:f7:4f:70:15:3d:1d:a8:73:36:10:64:d5:fb:24:
d8:dc:0d:73:54:41:b6:51:16:96:f5:cc:61:69:9a:7f:a9:58:
ff:59:df:44:66:56:c3:5e:93:0d:75:43:1b:c2:2e:2b:56:01:
01:8d:44:af:ba:6a:dc:51:83:87:40:9f:6b:5c:1a:52:1d:3c:
29:a2:26:13:d3:37:02:97:47:8f:64:5a:49:74:68:8b:73:50:
00:13:13:ad:ab:d3:67:d6:5f:a4:64:29:4d:fa:43:ea:9f:c8:
64:f3:ee:cd:21:13:0a:66:fa:44:ca:7c:3a:e5:3a:5f:86:90:
4c:b8:a0:b0:39:d8:b2:5b:98:c3:35:3f:28:b6:f1:cd:00:90:
40:b4:0e:bd:d3:df:6c:60:fe:1b:35:c4:c6:f2:34:5c:f7:07:
44:0a:ca:59:f4:b5:0b:12:a3:cc:86:3c:55:5b:11:cb:b9:26:
49:79:f4:48:53:dc:4f:e6:49:10:18:03:fc:f5:8f:3c:21:d1:
db:e5:6c:1d:f4:12:89:88:17:b0:e0:f6:a9:f3:5a:59:b5:5c:
29:4b:84:1d:c2:89:69:72:aa:06:95:37:fd:a3:a4:a3:ab:35:
23:ca:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:53 2024 by rpki-client on console-ams.rpki-client.org