Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cI0-zMN6vGrmgotaoMiFs3YTW1w.roa
File: cI0-zMN6vGrmgotaoMiFs3YTW1w.roa (raw, json)
Hash identifier: WHHXvahs5a3HqxucxmCYd4yif61hGGOvdxonKkWsxuQ=
Subject key identifier: 70:8D:3E:CC:C3:7A:BC:6A:E6:82:8B:5A:A0:C8:85:B3:76:13:5B:5C
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 128B5790
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cI0-zMN6vGrmgotaoMiFs3YTW1w.roa
Signing time: Sat 01 Jan 2022 10:05:49 +0000
ROA not before: Sat 01 Jan 2022 10:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 188.253.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311121808 (0x128b5790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 10:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=708d3eccc37abc6ae6828b5aa0c885b376135b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:87:de:f2:c1:c3:45:ab:98:1c:11:e2:a3:
30:e5:62:c4:0c:57:cc:ef:06:fc:e0:90:5b:6a:4d:
2e:76:67:d8:dc:fc:48:88:cc:7f:ba:58:e5:60:9a:
4d:36:c6:98:37:33:5e:73:ef:1a:f4:e3:e2:a0:87:
70:61:4f:b5:7b:41:3e:2b:80:3c:e1:da:c7:07:73:
42:59:83:a6:88:b2:7d:07:41:79:7a:1d:c2:8b:37:
d9:4d:31:ee:9e:0e:a0:1f:1c:e1:a5:6a:1a:b1:37:
e0:03:c7:9e:b4:66:1c:7f:30:13:5e:b1:1e:38:8b:
cc:f7:1e:3a:fa:c4:37:c8:18:80:17:76:2a:19:f2:
48:14:32:b8:5c:4c:c7:3a:31:9c:1b:9f:a4:ca:ed:
22:41:50:fc:90:1e:08:84:81:4d:26:4d:2f:d9:19:
41:6a:b3:4b:9b:8f:4d:02:c3:04:85:30:0d:73:5d:
58:e4:c0:14:bd:18:be:f7:c0:60:f4:56:cd:a6:5b:
ad:be:37:8f:d4:0a:87:72:c9:9e:6b:51:58:d2:d5:
e9:9a:fc:b1:23:ee:d4:b7:34:0a:8a:4e:23:eb:14:
5d:1c:e3:11:14:65:23:7b:d2:a6:e8:b0:cc:16:51:
04:1b:01:89:f0:99:27:f6:90:b8:85:c1:28:d3:06:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:3E:CC:C3:7A:BC:6A:E6:82:8B:5A:A0:C8:85:B3:76:13:5B:5C
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cI0-zMN6vGrmgotaoMiFs3YTW1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.32.0/19
Signature Algorithm: sha256WithRSAEncryption
02:e0:8a:12:99:ca:10:10:d6:5e:91:81:c7:62:e5:9f:78:e1:
06:0d:98:46:d2:db:00:64:09:2a:10:fa:aa:b6:e9:d3:a6:0a:
e3:99:b6:a2:0d:b6:e7:bf:86:4f:96:dc:12:7c:fe:3d:1e:a1:
dc:e4:3f:f3:b6:58:af:8c:1c:c8:18:df:03:21:6c:c9:55:1b:
9b:4b:a8:1c:b2:95:78:81:8a:1a:3d:89:83:15:9d:12:73:85:
76:11:95:41:44:4f:82:4a:ac:fb:46:8d:15:bd:d3:a3:32:b3:
42:09:10:56:5b:ee:95:f2:2f:4d:5e:7f:d4:0c:95:90:3d:54:
d4:99:3a:fc:d1:81:7b:1f:bf:95:f4:f6:2d:9d:a8:7f:e3:b1:
aa:d0:51:75:3b:f8:e4:3f:6b:5a:cd:86:22:76:84:2d:5a:d8:
d6:ac:fd:8a:61:60:da:28:25:49:9c:00:e0:a6:b8:af:ab:4f:
25:79:c2:db:b8:20:5b:2b:d0:35:4a:9a:c6:95:c1:b7:04:23:
96:13:d2:fa:7d:14:da:6e:07:be:02:f0:a5:21:e8:4b:81:ae:
29:5b:b5:bc:ca:13:8e:7f:49:0c:3d:a1:26:51:30:d6:4e:af:
05:41:f5:8b:af:2e:91:90:03:77:f9:90:93:a0:23:55:e1:8d:
e6:2c:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org