Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/ShYvcIgSjSWuB6G-iu-kyr7Q4dk.roa
File: ShYvcIgSjSWuB6G-iu-kyr7Q4dk.roa (raw, json)
Hash identifier: 8X4Cqt1uoZK7r+fN5dCYLvEfAP6u5UWFVd+C3ESvygU=
Subject key identifier: 4A:16:2F:70:88:12:8D:25:AE:07:A1:BE:8A:EF:A4:CA:BE:D0:E1:D9
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 107B7684
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/ShYvcIgSjSWuB6G-iu-kyr7Q4dk.roa
Signing time: Sat 01 Jan 2022 07:54:39 +0000
ROA not before: Sat 01 Jan 2022 07:54:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.67.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276526724 (0x107b7684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Jan 1 07:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a162f7088128d25ae07a1be8aefa4cabed0e1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:c7:1d:8f:66:5b:df:32:95:e7:26:ef:c1:
48:a7:c9:b1:73:e5:4c:bc:0b:c7:37:b4:d7:3f:b4:
7e:f4:5d:29:d2:2e:4d:47:59:55:23:46:e9:bd:10:
9e:63:7a:29:7a:55:19:e5:bf:59:91:2c:7c:8f:77:
74:61:b8:05:b7:8d:46:c1:3c:c4:c6:a0:1d:df:af:
ea:fe:30:5d:90:4b:63:48:91:94:a8:26:e6:f2:e6:
00:6c:cc:12:8e:f7:82:5d:50:5a:37:8a:8e:7a:5f:
80:af:95:ea:c3:85:37:0f:7a:52:14:c0:4d:65:49:
b4:99:c5:60:67:d1:c2:8d:4f:90:09:be:d9:b5:0e:
57:4a:ef:4c:08:b4:0e:07:cc:fc:37:a1:2e:b0:b6:
06:ce:0f:f2:aa:89:97:14:68:ae:81:5c:f2:e0:d3:
7c:32:c9:93:67:31:98:7d:11:a6:fb:35:d9:aa:0c:
34:bf:2b:7f:2c:ff:72:f0:b4:0e:81:9f:87:76:1b:
cf:61:84:a4:4a:ff:af:6e:43:fb:6e:53:9e:9f:d5:
f5:03:6f:ec:c7:f9:73:aa:e2:2a:54:fc:2c:b2:7a:
fc:fb:1e:cf:d7:0f:35:be:c6:50:36:c2:52:89:a4:
06:46:1a:c1:fd:34:2a:05:f5:e2:0f:f0:ab:2c:b7:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:2F:70:88:12:8D:25:AE:07:A1:BE:8A:EF:A4:CA:BE:D0:E1:D9
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/ShYvcIgSjSWuB6G-iu-kyr7Q4dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:98:61:59:78:d9:c9:66:3d:33:6f:b5:6d:9d:2d:b4:7d:0a:
76:af:80:81:29:d5:06:76:60:2f:c0:0c:30:98:a3:95:ee:51:
66:df:e0:56:ca:53:61:1d:6b:35:27:04:5a:40:be:82:d0:91:
3a:48:16:21:c3:cb:ed:38:83:fb:8e:78:f0:2b:b2:7d:c8:d1:
69:fe:75:50:d4:37:50:19:f1:86:66:c9:a2:3f:d1:5d:07:4c:
31:a5:7d:29:30:bc:57:ff:74:ee:e5:29:69:8d:98:7b:5c:32:
94:46:f9:5d:cf:a4:3b:72:5e:8a:9d:ed:4e:8b:08:1d:cc:1b:
5f:d8:6f:d6:3c:22:db:c1:cd:b1:23:e8:65:29:9d:1c:37:88:
36:fe:61:43:57:be:65:12:93:73:07:1b:89:9a:51:c9:ba:58:
70:3f:68:ef:6e:41:32:2c:0d:f9:22:09:86:8e:f4:4d:31:ad:
c4:9b:5c:89:83:c3:f1:65:2b:a7:29:96:21:85:68:6e:f5:96:
5e:ac:08:87:58:8e:76:2c:d5:e8:23:90:5c:58:55:76:29:bc:
9a:a7:73:44:22:f0:71:ae:f1:f4:30:5b:18:7f:b7:f2:61:f2:
2c:e6:65:8f:25:c9:17:6e:26:2d:97:99:1a:c7:94:7c:60:0a:
ec:13:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:32 2024 by rpki-client on console-ams.rpki-client.org