Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/xf9hEkadJHNQpPbReTzXCVOxSS8.roa
File: xf9hEkadJHNQpPbReTzXCVOxSS8.roa (raw, json)
Hash identifier: nPU7BYuh7nYMjMSHoajllOU/qrxMkNsCNTc/ifHe9dg=
Subject key identifier: C5:FF:61:12:46:9D:24:73:50:A4:F6:D1:79:3C:D7:09:53:B1:49:2F
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 045C7D2A
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/xf9hEkadJHNQpPbReTzXCVOxSS8.roa
Signing time: Sat 01 Jan 2022 08:54:10 +0000
ROA not before: Sat 01 Jan 2022 08:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.8.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73170218 (0x45c7d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Jan 1 08:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5ff6112469d247350a4f6d1793cd70953b1492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:73:f7:05:39:45:c8:54:ce:a4:cc:a2:64:
84:c4:3c:bc:5e:98:ea:39:ba:0f:0a:2d:1c:80:2e:
b2:ae:f4:97:ca:3f:5e:b9:51:65:21:9a:c1:c1:b4:
7e:89:30:11:94:17:53:2c:e9:6e:51:13:66:c9:f4:
46:18:56:c1:f5:9b:fe:24:a8:17:bd:6d:21:a8:81:
48:29:df:90:b8:6e:cb:51:ed:14:d1:4a:da:70:6c:
2e:57:08:53:5e:07:2e:2d:92:51:4d:54:ba:61:4e:
da:4d:93:64:81:dc:28:b4:42:dd:d7:e5:4c:ef:07:
2c:05:31:9a:37:26:6f:b3:79:4f:e3:97:ff:b9:9d:
47:60:28:f4:f0:af:dd:61:f9:e1:86:63:51:a5:98:
d8:11:c9:dc:0e:ce:21:27:0c:ed:5f:51:5b:98:24:
eb:30:c8:03:60:13:a3:2a:e4:61:9b:88:46:fa:5c:
b6:25:79:fb:99:44:38:f9:bc:ef:01:0a:f6:7c:73:
ab:9a:7a:ab:a5:1d:65:17:99:6a:4f:72:e3:5f:a5:
88:3c:75:05:f2:86:5e:0a:24:58:42:dd:9f:42:a0:
e8:1e:7b:ad:15:b1:d9:67:f3:1b:e0:83:88:b4:b3:
da:f6:41:13:59:11:12:b5:db:ba:d7:0a:f2:3a:f3:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:61:12:46:9D:24:73:50:A4:F6:D1:79:3C:D7:09:53:B1:49:2F
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/xf9hEkadJHNQpPbReTzXCVOxSS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.140.0/23
Signature Algorithm: sha256WithRSAEncryption
35:f2:75:98:c7:61:bc:7f:22:06:63:f7:e2:a2:03:59:e7:d1:
33:9b:5b:97:65:3f:4c:ed:cd:83:6f:5c:a3:39:ad:21:96:63:
35:8f:54:86:c8:01:fa:59:59:65:4c:f1:39:5e:dd:b0:21:c3:
57:54:b6:65:a1:81:e0:20:1e:4b:32:e3:f7:32:c6:63:47:84:
25:27:5a:d0:77:7e:1e:0e:7a:a3:02:fd:e6:c6:57:fe:c6:3b:
e7:d8:60:c7:e5:61:79:48:ec:9e:17:5a:4d:49:13:80:69:fa:
b8:5a:6d:8c:22:8d:4f:f5:e1:73:12:8b:fb:95:3a:ae:c4:71:
f1:63:a3:5e:78:1c:02:ab:81:0b:82:e0:cd:49:32:71:55:4d:
9d:3d:36:ec:5f:6f:b3:ed:81:64:86:a3:f7:c1:33:ad:c8:f6:
fb:fb:b3:09:73:92:25:68:bb:ee:c0:44:c9:5c:bb:8f:73:0d:
20:d7:f2:7c:b5:22:e4:9a:cb:8f:08:34:84:f4:56:9c:f3:d2:
17:3a:bd:1a:e4:fe:cb:82:58:bf:ef:5c:38:69:25:80:13:64:
de:1f:c8:d3:e4:10:93:ff:9b:10:bd:fb:77:e1:a9:bc:58:10:
5d:e8:87:25:a5:08:2d:1f:a2:0b:60:67:1b:a2:52:33:82:bc:
5b:d7:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:32 2024 by rpki-client on console-ams.rpki-client.org