Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/tv9RkMjUkkADvTNPRJjE_6yccAo.roa
File: tv9RkMjUkkADvTNPRJjE_6yccAo.roa (raw, json)
Hash identifier: n9Kj6wqtsYKb58yVto4rR91GoW1yzsNjm2qbldlWWYE=
Subject key identifier: B6:FF:51:90:C8:D4:92:40:03:BD:33:4F:44:98:C4:FF:AC:9C:70:0A
Certificate issuer: /CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Certificate serial: 013CE7CE
Authority key identifier: 0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/tv9RkMjUkkADvTNPRJjE_6yccAo.roa
Signing time: Mon 24 Jan 2022 19:20:35 +0000
ROA not before: Mon 24 Jan 2022 19:20:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212953
IP address blocks: 194.69.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20768718 (0x13ce7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Validity
Not Before: Jan 24 19:20:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6ff5190c8d4924003bd334f4498c4ffac9c700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:f5:14:3c:7e:9f:03:1c:96:d9:23:66:ca:
12:b4:23:42:6f:84:9b:ca:d4:d9:89:3f:96:6a:94:
3d:c2:2e:20:86:cd:ac:46:13:28:60:ed:c8:fc:42:
6f:ea:7c:ea:b7:96:89:d1:37:dd:8f:cc:04:02:5c:
99:72:95:13:2e:04:43:84:ad:dd:bc:be:7e:3a:05:
63:49:7d:79:72:10:16:57:97:a2:1b:12:fb:03:84:
c6:0b:1b:7b:70:0e:cf:d5:90:63:92:39:71:cb:c0:
69:7d:13:e5:14:01:a5:13:3c:58:95:9f:d6:39:14:
88:ec:f1:00:2a:7b:5b:d5:26:d8:fc:6b:7b:dd:61:
e5:c3:48:c1:4a:44:69:5c:74:a6:88:b0:7a:cd:bb:
f1:49:01:60:55:d5:29:29:cf:4a:d4:fb:a6:22:b1:
4a:87:8c:f7:35:9a:30:74:90:fe:de:2e:b2:35:81:
0b:58:93:85:0f:da:fc:2b:41:83:40:56:b0:36:3d:
9f:f6:e9:90:ff:02:92:7e:b0:7d:ae:aa:8f:51:78:
5b:0a:2c:8d:2c:07:4b:65:d6:60:77:ac:fc:d2:2a:
80:0e:bf:f5:7b:ba:61:59:7c:80:c2:9b:28:be:a0:
6b:73:e0:86:09:21:e1:be:8b:f0:bd:91:15:14:c2:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:51:90:C8:D4:92:40:03:BD:33:4F:44:98:C4:FF:AC:9C:70:0A
X509v3 Authority Key Identifier:
keyid:0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/tv9RkMjUkkADvTNPRJjE_6yccAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/Cqw4izfUR2j84Orsl95DP69yudw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:25:1e:f7:5b:60:e1:fb:8a:63:c5:fa:88:ab:40:46:93:4a:
7a:ef:f9:9a:92:fd:85:67:b0:0d:76:49:f6:fe:0c:81:81:56:
1a:0b:9f:fe:ad:96:37:c9:c2:c7:bf:3f:30:2f:7f:17:21:c1:
3d:7f:1f:f5:5d:90:69:f7:f5:d7:90:b6:17:2e:df:0e:25:b1:
b0:1e:c9:6d:6b:f1:c1:69:76:30:f2:9b:29:20:79:af:a0:bf:
52:e3:02:61:17:9a:70:c4:e4:ec:f5:13:0d:90:e8:52:69:c1:
14:f2:b4:dd:a8:47:78:97:77:44:05:7a:19:bb:bc:ad:07:d2:
c3:a9:8d:08:bb:97:a1:2f:fc:95:c2:aa:36:d2:06:59:2e:4c:
8a:a9:1f:53:b7:07:62:17:16:19:66:f4:0b:e7:cb:62:88:bb:
52:34:c8:28:b7:74:7f:69:a3:74:07:b1:3f:c5:4f:bf:20:38:
ed:c3:58:84:37:9c:8c:bd:d0:6a:63:96:ff:63:9c:8a:e5:61:
11:2a:9e:99:99:ad:fe:a7:99:1a:8b:eb:23:54:84:a9:50:58:
02:3b:c2:11:b8:38:31:93:e0:d3:89:23:2a:2a:d7:be:42:82:
f6:e1:dd:af:b1:ad:f3:6c:12:15:eb:24:56:f3:28:7b:75:c1:
1e:9a:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-ams.rpki-client.org