Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/mKd0kNs_ibqXeFXizzU_XEDG6II.roa
File: mKd0kNs_ibqXeFXizzU_XEDG6II.roa (raw, json)
Hash identifier: z7MxuxsZf0SRc3KfkxN5/wFWgToWksOwjx681zmq264=
Subject key identifier: 98:A7:74:90:DB:3F:89:BA:97:78:55:E2:CF:35:3F:5C:40:C6:E8:82
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 0A0D58C2
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/mKd0kNs_ibqXeFXizzU_XEDG6II.roa
Signing time: Sat 01 Jan 2022 10:54:02 +0000
ROA not before: Sat 01 Jan 2022 10:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202495
IP address blocks: 193.148.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168646850 (0xa0d58c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 10:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98a77490db3f89ba977855e2cf353f5c40c6e882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:65:a0:3e:2e:30:25:8c:c3:a3:50:2f:5f:
52:66:12:08:12:10:64:a4:0a:95:59:40:55:b7:f7:
64:2c:f4:9f:78:97:52:c4:61:37:5f:e6:ea:d7:83:
19:d3:57:2e:b7:eb:89:3d:d2:f5:db:31:49:65:f1:
3f:de:8a:39:8f:77:fc:db:6e:f4:75:61:07:f5:95:
99:08:5a:6a:8f:fc:cc:67:3c:00:19:80:b3:4d:09:
9f:f7:ce:da:50:64:d0:18:0c:0c:7d:67:67:1f:22:
ac:f9:17:86:d3:c9:eb:11:46:09:7c:68:f2:ac:dc:
8c:fd:45:76:57:71:2a:ed:d6:15:e3:f6:2b:a8:b6:
e8:53:c1:4c:0e:a5:c5:45:69:59:f2:be:76:52:ed:
48:59:97:e6:1f:bd:e3:8e:5f:0b:81:5f:d4:ce:d4:
ed:fa:1e:11:56:7d:08:5d:08:8f:c1:34:a6:55:ef:
0e:36:ff:c2:d9:20:82:f4:ca:f1:f6:3a:da:bc:b7:
4f:47:74:37:75:98:f8:d1:f5:b6:7e:74:2e:b4:80:
ab:2e:d4:65:0c:f6:fc:de:8f:23:90:bd:ef:82:1e:
80:c2:f3:b3:9a:c1:f6:1f:ee:d4:02:9f:16:32:e8:
08:1d:b1:fe:9f:fe:5c:2f:db:17:0c:83:40:ed:39:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:74:90:DB:3F:89:BA:97:78:55:E2:CF:35:3F:5C:40:C6:E8:82
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/mKd0kNs_ibqXeFXizzU_XEDG6II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.8.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bf:d6:96:2b:a8:92:aa:e3:51:1c:14:89:a0:a4:a9:44:40:
29:d7:8f:e7:54:21:98:21:6d:1a:02:92:c1:ba:17:a8:f2:e9:
63:90:9f:4c:6f:e8:37:59:cf:8b:4a:10:77:d5:9f:e7:eb:63:
15:af:6f:69:86:2f:28:69:54:8c:5f:42:d3:7a:f8:8f:42:e5:
46:ce:89:e7:25:4d:6c:fb:54:c3:e1:48:d4:28:03:59:46:6d:
b1:18:5a:2c:d7:c4:93:e3:31:a1:9d:42:45:a1:e2:d0:96:98:
84:62:5a:54:13:d5:ea:f0:a3:77:b8:80:aa:33:b5:b9:f9:9f:
c1:d1:d6:f7:22:cf:4c:95:53:3b:3f:dd:51:84:ce:cd:05:84:
42:7f:53:9c:97:d0:9f:a0:9b:5b:b9:47:53:cb:ec:4a:30:d4:
77:22:5b:82:28:4b:f6:35:d5:81:33:6b:00:47:a7:39:49:54:
ad:c9:ef:5c:d6:c7:69:e3:85:ca:71:b2:73:23:25:35:67:0e:
c1:98:af:ed:8f:07:86:43:0c:88:c7:41:3b:49:19:d6:05:d7:
0a:56:4b:ab:78:bd:6c:5d:d2:2c:82:48:4f:cc:4e:b5:ac:61:
da:90:ff:d1:4e:e0:f1:77:c6:66:d6:01:b6:33:5c:73:74:c9:
a7:f2:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:26 2024 by rpki-client on console-ams.rpki-client.org