Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AcTuYjqIkiDTu7T_HE3azUoiNag.roa
File: AcTuYjqIkiDTu7T_HE3azUoiNag.roa (raw, json)
Hash identifier: f+b68d1t66yh994Non6KjlNDd3kfWp4edQzyntn9cZI=
Subject key identifier: 01:C4:EE:62:3A:88:92:20:D3:BB:B4:FF:1C:4D:DA:CD:4A:22:35:A8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01850CFA63D3209DB8243B867DA2EC448EEA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AcTuYjqIkiDTu7T_HE3azUoiNag.roa
Signing time: Tue 13 Dec 2022 19:33:33 +0000
ROA not before: Tue 13 Dec 2022 19:33:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 193.58.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:fa:63:d3:20:9d:b8:24:3b:86:7d:a2:ec:44:8e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 13 19:33:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01c4ee623a889220d3bbb4ff1c4ddacd4a2235a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:82:d3:3b:c0:e8:62:1c:4e:61:0d:fb:f5:
f3:44:bf:04:82:eb:28:8a:d9:01:bf:b9:77:a2:53:
93:ea:16:6b:bc:6b:14:a9:1a:fc:1e:c0:80:7c:af:
4d:22:83:e6:bf:0a:6e:a0:a5:14:6b:73:72:41:25:
f9:e5:92:fc:6c:bf:91:b4:a8:fc:75:b6:76:b7:b9:
88:af:2b:ab:ab:33:e8:3b:56:a0:ad:ac:12:38:67:
ef:6a:93:f6:83:bd:73:36:14:f7:ee:7d:b0:e7:ae:
7e:d4:cb:c2:64:09:ca:94:d3:21:e4:ec:88:83:9a:
1d:5b:72:dc:9c:88:13:3c:b8:59:7d:7f:f5:14:92:
6b:e8:ee:37:ba:fa:cc:1c:0b:be:92:c7:12:72:20:
ca:d4:da:c2:79:a5:e9:60:c8:bc:e4:1f:b4:f7:c9:
7e:ad:da:56:fc:33:31:20:1a:c2:bb:06:a5:65:18:
b4:07:58:cd:c6:af:f4:88:93:d4:af:13:26:d7:f2:
1a:7b:c9:ca:82:59:6a:ab:3d:aa:fa:9b:8c:15:d7:
07:6b:78:cd:c3:c0:27:bb:fd:aa:e8:22:88:9c:01:
ed:c4:09:5e:69:1f:f5:03:cc:a3:c3:50:98:fa:0e:
75:f2:18:07:99:69:fc:e0:cc:37:91:97:af:80:bc:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:EE:62:3A:88:92:20:D3:BB:B4:FF:1C:4D:DA:CD:4A:22:35:A8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AcTuYjqIkiDTu7T_HE3azUoiNag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
94:14:c6:ad:f1:3d:1d:0e:19:f6:4c:8a:d6:f4:e3:11:e5:53:
13:bd:19:39:eb:f7:5e:09:5a:d7:06:4e:be:da:34:40:0a:14:
0b:a5:a6:bc:0b:3c:20:2d:30:c8:a9:8e:a8:20:f8:1e:19:81:
17:94:da:17:27:d2:a4:73:63:27:7f:03:b8:19:1d:15:d8:f9:
6d:21:cc:df:d1:6c:0c:dd:56:2f:1f:bd:37:df:cd:b6:78:a1:
58:3d:ea:23:7e:75:ad:3b:cd:d0:e9:86:31:ab:6f:5e:7f:77:
71:e7:f9:15:51:c0:d7:fc:45:7a:8c:13:cf:3f:b9:2d:db:8e:
7a:da:ec:90:9f:27:b0:9a:43:0a:12:0c:02:4b:40:50:2e:8d:
3f:68:99:42:08:23:05:63:08:ce:1c:ba:b2:48:07:44:93:45:
5b:36:3f:23:18:79:5a:b3:86:2e:5e:c6:5a:56:52:f2:99:9b:
54:a0:e5:f5:a1:3f:56:ab:fb:f9:f3:c9:23:41:92:88:42:95:
07:da:74:54:8b:8c:ce:75:72:86:20:db:7f:c7:76:1b:9f:1f:
8a:2b:ea:49:be:d3:27:c6:30:02:71:af:9f:2f:49:32:56:62:
e8:84:99:6c:92:08:62:af:fa:3a:d2:4e:7a:75:52:a1:10:90:
4d:57:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org