Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/ojtlhRMYj5UH2IC6p417I8J7hJs.roa
File: ojtlhRMYj5UH2IC6p417I8J7hJs.roa (raw, json)
Hash identifier: M+ooG7XRndGytJF/gA/k8+0J8+C/oSrQomwTSJEHy9g=
Subject key identifier: A2:3B:65:85:13:18:8F:95:07:D8:80:BA:A7:8D:7B:23:C2:7B:84:9B
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 01822298EAC788656450634D57D4CFE95B55
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/ojtlhRMYj5UH2IC6p417I8J7hJs.roa
Signing time: Thu 21 Jul 2022 21:10:23 +0000
ROA not before: Thu 21 Jul 2022 21:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210788
IP address blocks: 193.41.47.0/24 maxlen: 24
193.41.82.0/24 maxlen: 24
2a0f:7ec0:100::/48 maxlen: 48
2a0f:7ec0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:22:98:ea:c7:88:65:64:50:63:4d:57:d4:cf:e9:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jul 21 21:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a23b658513188f9507d880baa78d7b23c27b849b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:19:ae:83:a7:78:a2:3d:c3:06:99:93:ce:
45:4c:e6:06:9a:c3:df:35:e8:a9:1f:e3:da:b5:b2:
0c:e3:ab:f2:de:78:2b:a6:69:ee:94:bd:ec:ef:52:
4b:0e:e7:cb:e4:c0:52:56:2e:f0:02:9a:2f:fd:59:
c7:7c:71:bc:fe:be:a6:a1:dc:a9:4d:38:42:5b:34:
4e:99:5b:1d:68:84:b6:ce:5f:c7:a8:c1:7b:e4:dc:
e9:0b:49:53:86:75:99:64:d3:52:3b:4d:28:a6:45:
df:55:c9:d4:45:02:68:69:bc:e3:24:8f:65:d2:94:
98:bd:4c:2a:21:9b:cb:8d:36:33:05:83:b2:61:e7:
a3:d5:06:5c:06:e3:ad:36:22:7a:7b:a4:59:bf:9c:
d6:3f:96:f3:a0:9a:14:84:d0:b4:fc:af:fa:40:33:
fb:7c:a1:71:6d:9a:85:19:e9:dc:37:5d:f5:27:a9:
ab:7a:ee:66:73:14:b3:52:77:cc:8a:08:1e:ee:18:
c8:5c:df:f9:01:fe:20:1d:2a:cb:dd:c1:26:98:e4:
e1:ff:19:1c:f1:62:3b:af:46:c0:ca:0a:25:e6:6b:
ba:bc:2e:88:ea:3e:1d:65:b3:e2:6f:cd:17:ea:26:
ad:c3:75:55:00:13:04:4c:54:da:f2:65:d9:89:73:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:65:85:13:18:8F:95:07:D8:80:BA:A7:8D:7B:23:C2:7B:84:9B
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/ojtlhRMYj5UH2IC6p417I8J7hJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.47.0/24
193.41.82.0/24
IPv6:
2a0f:7ec0:1::/48
2a0f:7ec0:100::/48
Signature Algorithm: sha256WithRSAEncryption
06:0f:c6:92:db:5d:b2:4a:45:1b:4e:25:28:ca:94:51:92:44:
4c:c2:95:10:d2:bd:66:d5:10:d5:15:9b:37:c3:c4:ba:f3:26:
d5:12:d4:75:70:72:45:ab:1b:74:f4:34:61:ff:30:ed:1e:37:
31:42:24:26:a2:22:58:e5:6a:2a:e3:d3:4b:cd:0c:f8:b4:da:
f5:dc:f3:f1:ed:d1:ce:92:57:1b:8f:6d:09:82:f5:f2:ac:38:
86:7d:d5:60:87:41:cf:53:4b:56:2b:df:80:9f:2d:9c:0f:44:
65:30:44:24:77:cf:7d:77:f3:f1:2b:48:9a:e5:da:5c:4b:3a:
21:59:6f:e7:ee:68:a3:64:62:48:c0:50:ec:29:99:26:ec:a2:
0d:0a:d6:5b:37:7b:c8:73:03:df:5e:c8:d3:35:8d:97:98:68:
43:a0:c4:64:20:e9:6b:33:86:3c:f4:ab:0c:6d:76:ae:68:2f:
cc:51:6c:e3:9b:25:0a:dc:06:65:14:17:ba:22:2b:04:61:f5:
a0:41:f8:8b:6f:40:95:93:7b:05:ee:4c:61:49:4f:eb:bd:40:
10:d5:e3:58:0c:e7:86:da:0e:ff:e5:7a:19:05:e2:e2:49:85:
3b:b1:bd:5e:59:74:5a:fb:b3:85:a9:a9:e5:12:c2:b7:eb:d0:
8c:6a:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:34 2024 by rpki-client on console-ams.rpki-client.org