Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/0jCIyeCYwSgkAgb2OhpE2mp7m6I.roa
File: 0jCIyeCYwSgkAgb2OhpE2mp7m6I.roa (raw, json)
Hash identifier: PSnH10lhdwmQufP36Xx0AOQ1I2cwbTcjqsZrnTzNg7I=
Subject key identifier: D2:30:88:C9:E0:98:C1:28:24:02:06:F6:3A:1A:44:DA:6A:7B:9B:A2
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 0978E7C7
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/0jCIyeCYwSgkAgb2OhpE2mp7m6I.roa
Signing time: Tue 29 Mar 2022 08:47:00 +0000
ROA not before: Tue 29 Mar 2022 08:47:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196773
IP address blocks: 217.168.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158918599 (0x978e7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Mar 29 08:47:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d23088c9e098c128240206f63a1a44da6a7b9ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:a6:71:cf:a0:05:bb:c2:ce:3a:40:fd:46:
09:f1:b7:d1:41:d7:a6:f0:0b:08:48:71:53:3d:73:
48:84:b9:85:72:8d:a8:61:fb:83:66:ed:be:96:9b:
40:94:d6:2a:91:b1:3e:03:aa:48:a6:24:b9:51:74:
b2:75:fb:0c:8b:0b:d9:5d:4c:69:27:a1:66:82:f9:
4a:fe:8b:15:ef:6c:fb:15:7d:62:e0:38:f1:00:59:
1b:8b:e2:ae:4f:73:f2:86:e1:06:71:83:0e:c7:b1:
7c:21:d2:19:14:75:14:3a:97:e9:85:28:83:d7:9d:
87:7e:18:86:39:a7:89:31:98:f9:3a:de:36:8e:1e:
46:e8:a1:f8:96:53:da:1e:4e:29:11:53:2f:86:02:
cc:21:68:78:d2:b1:f7:6d:a0:2b:61:09:98:2f:e0:
8d:bb:58:ce:a8:cc:b5:ef:9a:83:b4:9a:22:93:c0:
b7:9e:52:ca:05:8a:7b:c5:1d:b4:b3:5b:da:e4:b3:
91:9b:b9:f0:60:2e:d5:88:e8:0c:d5:63:76:84:5b:
ba:f4:3a:23:16:3f:4c:ac:d8:89:f0:52:d1:b5:eb:
df:a1:14:e5:35:2e:78:72:a1:81:27:82:93:75:1c:
d5:dc:c2:e8:72:21:b5:1d:b0:ca:27:0a:ac:9c:aa:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:88:C9:E0:98:C1:28:24:02:06:F6:3A:1A:44:DA:6A:7B:9B:A2
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/0jCIyeCYwSgkAgb2OhpE2mp7m6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.168.97.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bb:46:b1:50:06:91:76:9a:4a:1e:b8:62:2a:10:a0:12:9a:
19:03:af:9b:02:96:3d:cf:41:b5:89:d7:ef:b4:d3:c3:37:87:
38:6b:ac:a7:dc:33:da:7b:99:a8:41:e3:f3:4e:86:59:cf:51:
19:39:98:b1:83:35:ab:85:b2:ff:54:9f:f0:1a:a4:87:3e:42:
f9:05:46:67:22:0b:ae:38:25:98:34:10:2f:e3:59:35:54:a0:
14:87:39:9b:46:c8:c9:51:a5:d6:e8:4b:78:42:bd:5d:1b:37:
63:da:bd:2f:1f:95:c3:19:63:09:0b:d6:4d:45:21:0b:e8:61:
57:16:3a:fb:8e:19:b0:77:14:9e:e2:64:ab:8c:66:ad:9a:a3:
b4:f1:cf:d7:0a:06:a0:f6:8f:bd:c7:a2:63:c8:98:7f:1c:50:
04:78:f4:d4:37:7d:71:6a:34:ac:b4:60:d0:a2:82:98:99:ee:
27:7f:5d:ef:d9:48:59:97:aa:08:19:7f:f5:75:0d:82:ad:f8:
ca:25:58:b5:e4:a7:cb:f1:5a:8d:28:36:49:71:da:49:78:24:
6a:ab:93:50:46:e7:cd:0d:60:15:9d:18:21:26:72:0e:65:06:
56:dd:43:49:9f:b5:25:b2:3e:a1:f3:29:b0:1c:74:ba:f0:37:
d8:f2:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:58 2024 by rpki-client on console-fra.rpki-client.org