Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/9ZpF6zI-iISSbDXWPzRBp23w3Q8.roa
File: 9ZpF6zI-iISSbDXWPzRBp23w3Q8.roa (raw, json)
Hash identifier: 2xusrxxC4HIzOqRyCCPzqzzdPXN4h/11wEtP6pk/zSo=
Subject key identifier: F5:9A:45:EB:32:3E:88:84:92:6C:35:D6:3F:34:41:A7:6D:F0:DD:0F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185304F136E1BB76CAFF16F9C2C211AC8E5
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/9ZpF6zI-iISSbDXWPzRBp23w3Q8.roa
Signing time: Tue 20 Dec 2022 16:12:46 +0000
ROA not before: Tue 20 Dec 2022 16:12:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39281
IP address blocks: 194.35.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:4f:13:6e:1b:b7:6c:af:f1:6f:9c:2c:21:1a:c8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 16:12:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f59a45eb323e8884926c35d63f3441a76df0dd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:dd:16:f8:7d:c8:5c:36:7e:ad:c2:6c:3d:
ef:b5:3d:90:ea:06:81:62:d2:32:6c:d7:de:d1:bd:
58:84:49:bf:f2:3f:f9:7b:43:cc:49:43:06:98:5f:
5d:83:a2:a0:88:02:59:c0:cd:f7:9d:ea:d5:22:5b:
ae:b0:f5:a6:22:bd:9c:c8:09:30:58:e1:b5:bd:27:
df:de:20:d6:a7:4b:2e:f0:07:1f:e7:f2:63:ca:d9:
8d:cc:4e:3e:fa:fe:f9:4f:40:d4:bc:a3:a9:c0:c1:
89:f8:6b:f6:d3:5c:b4:36:f1:7f:63:36:e5:e5:b1:
65:cf:2a:b4:6b:90:b9:0b:a5:75:9d:a5:d8:9c:63:
f4:e7:2e:39:3c:3f:87:7c:d2:4f:84:ec:91:6f:8e:
26:40:d8:9b:2f:02:8c:0c:fc:19:e0:e1:85:7e:da:
71:e2:d7:97:f1:e5:f6:64:7c:f1:17:36:b6:1d:d7:
d1:29:5d:dd:ad:f2:f9:47:84:18:f0:00:c0:f0:c2:
39:83:75:2c:de:cd:02:6c:57:32:76:7d:bd:0f:5c:
fb:d9:d9:52:e0:e9:5b:16:d9:8d:1a:03:d4:d2:76:
e5:05:6c:fd:05:3d:50:78:fa:15:51:34:02:7f:13:
9a:39:af:d6:4e:44:d5:be:8c:9e:6b:6e:6f:a5:2f:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:45:EB:32:3E:88:84:92:6C:35:D6:3F:34:41:A7:6D:F0:DD:0F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/9ZpF6zI-iISSbDXWPzRBp23w3Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:a5:bf:9f:4b:7a:22:df:ba:54:bc:34:82:75:b0:7e:46:55:
2c:a5:d4:5d:b5:61:91:69:d1:cc:6d:db:55:58:81:73:c1:78:
6b:46:ce:3e:01:91:15:9a:6b:90:68:05:e7:07:2e:cf:b0:0a:
1f:54:19:e4:ce:d0:9d:26:f7:21:cf:bd:03:c1:80:56:36:2f:
21:b5:85:c2:41:4d:51:20:a7:bf:df:15:4b:20:dd:0b:e9:dc:
1c:35:b3:51:3c:3c:b2:59:ee:2d:ec:7f:48:2d:64:af:b9:bc:
7a:27:33:f3:c5:6d:76:c5:94:66:ae:db:87:d6:2c:ab:52:c2:
46:7f:8a:aa:06:f0:a5:68:aa:fb:95:78:3c:ba:ce:3e:42:a7:
fc:89:3f:ef:20:9c:20:c2:4b:92:2e:44:dc:8d:09:7e:66:4a:
a4:3b:c7:95:94:7b:75:aa:ca:7b:b6:c5:3b:e5:60:c0:98:55:
11:51:c3:14:a9:7b:13:b8:fc:d6:91:6e:f7:18:6e:d0:2d:a8:
49:19:2b:68:a2:1a:cf:57:60:9f:e1:d1:15:d5:0d:ca:11:e7:
9c:a1:8b:07:fd:8c:0f:7b:78:e9:84:30:c3:3f:ff:e3:f9:39:
51:c9:61:35:cc:26:3d:c9:90:50:27:88:25:16:7e:de:36:3c:
a0:a1:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org