Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/8CNHyXDOH2ie3tvAcaSnnkN9mNg.roa
File: 8CNHyXDOH2ie3tvAcaSnnkN9mNg.roa (raw, json)
Hash identifier: 0YFfhdrKnTz/Xx61mVCSdKmaYt6VkaXXJVSPD5S6s18=
Subject key identifier: F0:23:47:C9:70:CE:1F:68:9E:DE:DB:C0:71:A4:A7:9E:43:7D:98:D8
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 0908B1C4
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/8CNHyXDOH2ie3tvAcaSnnkN9mNg.roa
Signing time: Sat 01 Jan 2022 12:59:57 +0000
ROA not before: Sat 01 Jan 2022 12:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50796
IP address blocks: 194.180.116.0/22 maxlen: 24
192.166.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151564740 (0x908b1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 1 12:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f02347c970ce1f689ededbc071a4a79e437d98d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:2f:5c:00:14:59:82:8a:cc:c6:e5:57:b0:
4d:9f:58:7e:10:e8:ce:25:71:12:ae:99:bf:54:52:
a9:7c:06:69:5e:c7:01:cd:da:06:e5:6d:6b:d8:5a:
13:cc:94:98:ea:d4:55:71:42:22:e4:6a:db:94:7d:
3b:d0:74:f5:2e:57:2c:6d:4d:ef:91:75:1e:03:ee:
99:25:e9:15:c6:e2:63:a7:bd:5e:67:50:ea:22:82:
3e:3b:2e:f6:6d:95:e8:cb:86:89:c4:82:c5:04:a0:
1b:48:7a:a9:dd:7e:8a:f6:72:7d:d7:e1:3f:a0:1f:
3d:8c:fb:80:bc:2c:4d:01:7b:85:19:66:19:85:77:
7f:00:6a:1b:56:d1:e1:01:bc:70:a8:8c:3a:b5:c5:
0b:3e:29:26:31:e4:fd:26:ba:bc:86:a9:a8:8b:53:
95:3c:e3:4a:0d:3d:1a:9e:d8:be:97:19:82:b3:c8:
3f:3c:a9:52:4a:61:6e:c4:c0:01:ac:44:e0:cf:0d:
95:98:eb:8b:aa:64:0b:1e:2d:39:dd:4b:50:c4:02:
e7:8e:c2:83:e7:b1:92:cb:30:79:88:d8:f1:51:9c:
7e:21:5c:a8:83:52:70:97:92:b5:84:c4:70:5a:6d:
bb:2c:0b:62:a3:5a:1a:18:f1:1c:da:4d:aa:9f:04:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:23:47:C9:70:CE:1F:68:9E:DE:DB:C0:71:A4:A7:9E:43:7D:98:D8
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/8CNHyXDOH2ie3tvAcaSnnkN9mNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.204.0/22
194.180.116.0/22
Signature Algorithm: sha256WithRSAEncryption
96:8d:00:1b:68:db:15:c7:b7:cb:68:b8:51:90:13:7e:a8:77:
c6:ba:1e:04:9b:67:e5:33:f5:3c:e5:3c:d6:a3:92:36:b2:f3:
27:98:a4:21:17:94:30:5f:0a:71:65:94:2b:99:6b:c6:00:ec:
98:a9:65:15:1c:3a:b8:70:a3:dd:45:83:0b:7e:92:41:3e:c8:
aa:f9:7a:0f:b0:36:06:5e:83:3a:50:67:68:c8:cb:ec:92:68:
a5:b3:9d:85:c7:ea:64:9a:8d:81:9f:93:f6:a3:de:ea:41:ff:
50:d9:69:d7:83:a7:a2:92:dd:29:d1:7d:34:b1:40:b2:b3:17:
42:f8:18:86:b6:95:88:6e:d0:20:0c:7a:28:ed:1f:4e:2f:f2:
71:27:e4:da:4f:18:c2:be:44:29:34:76:98:69:d6:5c:17:55:
0c:f4:bc:b0:2c:32:d9:c7:49:34:e0:ea:be:f8:79:a2:8c:1e:
04:21:4c:a2:6d:2a:bd:9b:02:21:c7:91:79:73:3c:d8:0d:89:
b1:f6:dc:8f:70:ef:e7:8e:ed:5f:e2:0e:73:53:5f:6e:b9:bc:
0c:4f:99:1d:e3:c5:7c:04:09:69:10:ea:15:cd:ca:ce:ea:3f:
24:90:9c:c5:2e:a2:3d:35:71:b8:dc:c9:5c:ad:f9:c2:d1:31:
75:7c:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:27 2024 by rpki-client on console-fra.rpki-client.org