Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/9Pq1uK-UwmNVKdAdPKhyaCbkbnI.roa
File: 9Pq1uK-UwmNVKdAdPKhyaCbkbnI.roa (raw, json)
Hash identifier: WR736eb/unNRTyAgioHZ+1Ab0T3TfsifeQyc0ewmcQg=
Subject key identifier: F4:FA:B5:B8:AF:94:C2:63:55:29:D0:1D:3C:A8:72:68:26:E4:6E:72
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 110090AB
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/9Pq1uK-UwmNVKdAdPKhyaCbkbnI.roa
Signing time: Sat 01 Jan 2022 14:57:09 +0000
ROA not before: Sat 01 Jan 2022 14:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57348
IP address blocks: 194.8.250.0/24 maxlen: 24
194.8.251.0/24 maxlen: 24
2001:67c:1814::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285249707 (0x110090ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Jan 1 14:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4fab5b8af94c2635529d01d3ca8726826e46e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:53:3c:99:13:ca:3a:b6:f0:2e:02:e6:11:
32:33:b2:cb:c0:a9:60:6e:f9:92:55:f7:68:a2:39:
e9:07:37:51:b1:91:23:2f:17:91:5e:2b:be:25:9b:
d4:dc:c8:26:81:0e:9c:fc:06:a6:35:0e:0c:3a:60:
45:76:44:24:b0:d3:e7:d9:79:7f:32:53:bd:20:8a:
60:82:c8:1b:99:e5:d8:04:41:41:51:37:56:46:3a:
86:37:b7:59:b2:27:7e:bf:a8:03:f4:c4:c3:b1:9e:
ed:e2:e4:ad:72:72:35:ea:aa:95:7c:4a:26:26:7b:
29:f7:1b:f2:fa:de:21:a0:4a:cc:13:4d:3e:25:05:
5a:9a:ad:b8:18:7f:39:e2:b8:7b:29:ab:15:e9:19:
ac:93:3e:24:4f:5f:a7:a8:bd:cb:05:2e:87:17:4d:
68:04:7f:3d:da:b8:4e:2a:8d:6b:d5:6d:0a:93:9a:
2b:cb:61:6f:1a:b4:d1:fe:61:3f:0e:ea:e7:3d:87:
6b:3b:1e:a6:77:9f:9f:f4:99:65:e3:8d:4f:a3:3a:
80:40:17:34:01:f6:fb:f9:a5:d1:53:aa:85:0b:5f:
cf:31:89:e1:4c:e4:6b:e3:db:75:ec:c6:4e:d0:f0:
6b:85:b2:9f:cb:2a:ef:6b:7f:48:05:04:53:7e:2a:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:B5:B8:AF:94:C2:63:55:29:D0:1D:3C:A8:72:68:26:E4:6E:72
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/9Pq1uK-UwmNVKdAdPKhyaCbkbnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.250.0/23
IPv6:
2001:67c:1814::/48
Signature Algorithm: sha256WithRSAEncryption
5e:f3:a6:42:7d:f9:9b:77:d1:8e:d6:c7:98:6a:f4:b2:79:77:
3c:9f:fa:a1:dc:5e:cf:68:8f:9d:dd:fa:d4:51:7a:43:91:52:
ed:9e:b6:54:d3:5b:5b:0f:4c:21:04:52:42:11:eb:5b:10:81:
37:b3:37:78:f8:7c:13:3a:90:b9:1f:b3:64:c5:23:4b:a6:2d:
5c:86:f9:bd:f5:86:b0:cb:ac:a1:a9:fb:9e:38:45:06:1c:a9:
b8:12:c2:1e:ba:a8:08:91:25:f6:2f:51:05:bf:13:d8:0a:9c:
b1:fe:02:ca:ef:b2:02:b7:ae:b8:0d:4c:31:01:b9:0e:16:b8:
f5:fb:08:dd:42:32:b9:b1:64:64:8f:c7:2c:f1:f9:48:d5:c4:
2c:fe:e5:92:3c:b7:bb:8a:3e:0b:a8:bb:da:b0:0c:9f:15:86:
7d:80:cf:7f:83:95:47:a5:b7:d4:17:84:56:72:31:d1:d6:19:
ce:d2:77:a5:e2:81:cb:f8:e3:a0:da:b6:ea:83:1e:df:6e:71:
4d:8b:1a:3c:c2:71:1d:46:e7:a1:fb:ce:4a:73:02:a3:86:da:
29:bb:40:d3:f7:3b:f7:70:37:49:3a:b3:e1:2d:4a:3f:19:5a:
e0:f3:23:64:5e:f4:66:14:2b:03:e2:b2:ce:32:81:a7:5d:37:
23:17:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org