Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/4Z2HSDCBsfd45oOpk3QnaTHSBXA.roa
File: 4Z2HSDCBsfd45oOpk3QnaTHSBXA.roa (raw, json)
Hash identifier: jbeTQWglnH8cM515kBlm7QbXcDqXhyUCma5LqZGGvnc=
Subject key identifier: E1:9D:87:48:30:81:B1:F7:78:E6:83:A9:93:74:27:69:31:D2:05:70
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 0AD8B065
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/4Z2HSDCBsfd45oOpk3QnaTHSBXA.roa
Signing time: Sat 01 Jan 2022 16:04:45 +0000
ROA not before: Sat 01 Jan 2022 16:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33927
IP address blocks: 194.6.232.0/23 maxlen: 23
194.6.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181973093 (0xad8b065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Jan 1 16:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e19d87483081b1f778e683a99374276931d20570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:37:67:58:a2:30:cc:44:6e:f0:9b:12:83:
99:ee:4e:73:97:3f:84:2c:8e:1a:e6:a1:32:66:96:
92:f6:c5:3b:7b:8a:01:8b:0d:b0:f2:b8:1c:0c:c5:
63:2f:03:35:a1:01:fd:96:6f:9c:3a:8e:c4:a7:2b:
ae:b3:5e:cb:f6:4e:57:09:8f:a6:65:ad:3d:e7:d2:
1f:5a:9d:23:4d:b1:86:f2:c0:d2:a6:2f:0e:6b:74:
ca:c9:4d:41:70:0e:d3:96:73:7d:23:50:e2:ef:9f:
02:a2:71:29:fc:03:66:98:19:f3:3c:30:d9:a5:43:
98:ff:a3:bb:ba:c4:d9:14:cc:c0:95:c3:29:0f:dd:
3d:dc:7c:93:a8:70:fc:bb:95:2f:74:bc:6d:d7:06:
4f:36:27:38:f4:cc:6f:8a:dd:3a:b4:71:02:bf:34:
e8:4a:2e:30:9f:2c:bd:56:58:95:46:57:39:d0:2c:
07:fe:48:95:c2:72:15:f5:7f:11:29:67:68:15:1d:
bd:e3:0f:4e:00:f0:fc:de:df:02:f8:79:1e:22:da:
95:d5:dd:0b:38:58:f2:86:92:ab:69:86:73:54:e6:
4f:08:c4:1f:ae:da:7f:a3:38:19:41:d6:64:4c:11:
04:3c:ef:d4:01:c6:b3:f1:9f:e6:1a:4a:c5:83:14:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:87:48:30:81:B1:F7:78:E6:83:A9:93:74:27:69:31:D2:05:70
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/4Z2HSDCBsfd45oOpk3QnaTHSBXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.231.0-194.6.233.255
Signature Algorithm: sha256WithRSAEncryption
84:38:90:3b:72:62:9a:8b:af:d9:2b:6b:8a:5b:16:b6:2e:05:
52:ee:87:54:31:50:93:04:c7:e3:b4:0e:3e:88:73:45:70:f4:
ae:94:ff:9d:bb:9a:ff:3e:ca:90:fd:56:c2:39:77:6b:f7:ed:
1f:fb:56:81:10:c8:19:17:37:7c:82:9c:21:c5:24:a8:f8:36:
ae:d6:3f:3b:6e:09:30:a8:35:79:f0:33:88:7f:38:0d:e8:82:
91:03:6a:3a:a7:1d:76:fb:28:8f:b8:5c:50:1d:b2:09:a5:ad:
36:f7:48:1e:5c:ab:7d:78:15:a3:c9:43:be:07:ef:98:b8:79:
18:c6:6f:e2:e7:7a:3b:af:bd:c3:61:a0:a9:b9:d6:74:64:a5:
87:b8:82:ef:df:71:bd:d6:92:0c:9c:5c:c7:a6:20:d3:d0:9a:
1d:3b:e3:ed:62:0f:ed:64:a2:a3:2f:c7:cd:fd:52:27:dc:59:
3b:e2:fc:c4:39:ec:9c:aa:76:14:e9:7f:d7:96:ed:91:3b:83:
a7:02:26:32:fa:95:eb:a3:0f:f7:99:2d:66:87:fb:c8:15:ed:
b6:c0:52:43:88:f3:c6:06:5c:f1:ab:42:14:a5:5d:36:4a:51:
d7:6f:eb:4b:fe:8a:98:03:20:3b:b1:8e:10:03:bc:86:4b:cc:
fc:db:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:33 2024 by rpki-client on console-ams.rpki-client.org