Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/v9az7FxrjnlhqW3nR2XTR2MiXXc.roa
File: v9az7FxrjnlhqW3nR2XTR2MiXXc.roa (raw, json)
Hash identifier: uxZf1WI4LkzMlH5xzMffmwkZDLzFFFYSYPBQlKnw4xs=
Subject key identifier: BF:D6:B3:EC:5C:6B:8E:79:61:A9:6D:E7:47:65:D3:47:63:22:5D:77
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 020E3541
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/v9az7FxrjnlhqW3nR2XTR2MiXXc.roa
Signing time: Sat 01 Jan 2022 08:55:13 +0000
ROA not before: Sat 01 Jan 2022 08:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9211
IP address blocks: 193.102.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34485569 (0x20e3541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Jan 1 08:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfd6b3ec5c6b8e7961a96de74765d34763225d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:22:62:df:59:21:52:df:0d:42:19:47:a1:
d6:2a:21:22:8f:9a:ee:30:73:fd:96:87:1d:9f:2d:
56:91:09:8a:9f:2d:3b:ea:fe:b3:71:d8:a9:22:93:
bd:c8:7d:e3:69:2f:56:a9:a5:b5:d6:f5:27:47:f3:
76:3d:4b:59:fa:bf:6e:28:c3:f3:d2:4e:6f:45:e0:
51:b0:21:9b:7f:61:e0:72:41:49:44:d5:d8:34:cb:
be:23:aa:c9:ef:29:52:a0:df:1b:17:59:f5:ca:5a:
83:80:96:1a:61:b9:6b:36:d0:5a:46:f3:dd:ec:95:
eb:60:a2:57:57:b5:f5:78:ac:6d:a0:b2:b5:35:0b:
08:f1:f1:b1:c9:6f:85:4a:cd:a4:66:2f:85:8f:70:
9f:b8:ea:df:a0:5b:40:88:bf:5d:61:eb:2f:fb:b2:
72:ab:6d:21:11:5e:20:6b:4b:59:2b:bc:8c:a6:a4:
5b:61:00:a8:1d:e8:fc:82:71:c7:10:ca:1a:e7:3b:
a6:43:ae:00:0b:ee:f1:21:53:af:65:2c:2d:20:6f:
b9:ea:33:14:2f:aa:fd:2e:2e:45:a7:f0:ca:42:47:
9c:8d:40:dd:52:c5:94:a7:58:3b:e6:bb:09:0c:94:
a9:97:c9:c9:2d:00:4b:17:b5:e4:ec:37:79:98:40:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:B3:EC:5C:6B:8E:79:61:A9:6D:E7:47:65:D3:47:63:22:5D:77
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/v9az7FxrjnlhqW3nR2XTR2MiXXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:02:e9:65:54:6b:fe:07:a1:b4:e8:17:52:a7:80:2d:4d:f4:
91:c5:e7:92:b4:62:1c:ec:28:b6:ee:cf:d4:fd:48:e0:0a:c6:
2e:d3:62:10:58:84:7e:9f:f6:c1:a1:7f:5a:c4:16:bd:49:aa:
b4:86:95:35:7f:c7:01:b1:ba:f9:a6:d3:89:f7:f9:dd:13:44:
7b:47:40:be:70:7c:15:99:3b:ca:01:0f:c2:4a:7c:0a:0e:14:
e3:94:fe:55:c5:80:57:da:ec:95:b7:91:38:ed:ae:ec:af:4d:
d2:00:79:1b:13:c0:9f:2a:35:36:5e:37:1b:04:d8:a4:79:15:
ba:83:5d:ae:7d:cd:8f:e6:be:dc:d5:ab:7a:9d:2e:22:ae:b0:
86:84:af:26:59:f5:74:0a:ae:c6:c5:68:5d:78:60:4c:67:d2:
eb:1f:c2:ac:eb:19:82:40:76:08:d2:02:02:a2:e7:29:6d:2f:
78:c9:c2:2a:45:8d:bd:77:6a:c2:fc:16:29:f1:47:88:b0:d8:
0b:ae:54:4f:bb:10:57:2f:de:74:00:5c:e8:52:a5:00:97:fb:
27:80:59:12:0a:3a:16:e8:e9:ac:12:e7:b3:0e:3a:5f:6e:9b:
80:82:fe:0d:94:a8:dc:c2:87:76:2a:58:a0:8c:22:fa:bd:fb:
01:02:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:27 2024 by rpki-client on console-ams.rpki-client.org