Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/Ct-RBuy9pZH1L-1BpUaRSufqFwA.roa
File: Ct-RBuy9pZH1L-1BpUaRSufqFwA.roa (raw, json)
Hash identifier: 6DXxabMZ35OF6fOTkQ2HUZ5FC/9CQogOa0sW7zQ0eZg=
Subject key identifier: 0A:DF:91:06:EC:BD:A5:91:F5:2F:ED:41:A5:46:91:4A:E7:EA:17:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 02C1C9CE
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/Ct-RBuy9pZH1L-1BpUaRSufqFwA.roa
Signing time: Sat 01 Jan 2022 05:53:39 +0000
ROA not before: Sat 01 Jan 2022 05:53:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206701
IP address blocks: 194.0.168.0/24 maxlen: 24
194.0.139.0/24 maxlen: 24
194.0.141.0/24 maxlen: 24
194.0.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46254542 (0x2c1c9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Jan 1 05:53:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0adf9106ecbda591f52fed41a546914ae7ea1700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:af:8d:32:46:19:fb:0a:ce:eb:b0:16:a7:
a3:09:87:fb:d1:1a:fd:d0:7c:96:4b:3a:46:38:12:
f6:fc:fa:f8:ea:60:f2:33:e8:41:d2:ed:67:f1:43:
d7:98:61:f3:25:f0:1c:b3:e1:dd:82:9c:7f:c0:44:
c9:55:50:5a:3d:30:b0:23:1d:c0:a9:f3:ce:c8:1a:
a0:4f:f5:d8:9b:bb:b3:b3:df:c4:70:be:01:2b:a2:
7c:47:2b:2f:4e:18:f0:84:96:7d:fb:3d:f8:29:e1:
e7:00:4a:7e:e3:aa:ce:0e:d3:d0:a2:14:da:e0:72:
bf:ac:f1:0c:f8:4b:15:d0:bf:6b:8b:78:db:de:74:
a3:d5:95:10:11:3a:9c:1c:ed:2d:fc:53:aa:d4:4c:
33:fa:9b:dd:60:1d:2e:82:a5:63:31:c0:5e:8e:50:
38:0f:09:aa:2a:23:fd:0e:0f:73:dc:45:4e:b9:ed:
79:95:67:3b:09:81:c5:c6:87:8a:fc:c2:88:1f:bf:
6a:6d:d8:0d:19:80:fb:5e:48:cf:19:1f:d5:e5:f9:
85:c8:d2:20:6a:58:4f:6f:29:09:ec:6a:13:a5:cc:
a9:54:24:92:e9:de:22:fe:07:10:1d:19:b5:92:13:
ff:8c:3d:ce:1b:88:b8:5e:0f:c0:2c:93:00:23:50:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DF:91:06:EC:BD:A5:91:F5:2F:ED:41:A5:46:91:4A:E7:EA:17:00
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/Ct-RBuy9pZH1L-1BpUaRSufqFwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.139.0/24
194.0.141.0/24
194.0.159.0/24
194.0.168.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6f:9c:6d:18:df:cd:a7:71:14:95:6b:bf:e3:f2:18:ce:51:
bd:79:55:4e:0e:9b:27:4f:1b:c2:f9:aa:13:ef:af:65:04:76:
03:19:69:3a:2f:a3:90:ee:29:6c:f5:56:cf:36:ef:1a:5d:54:
c7:b4:71:88:79:15:f5:55:27:b4:0d:ca:91:d5:62:13:82:6e:
e5:3f:79:87:96:59:67:c8:fe:73:ba:49:9a:2b:11:cb:d2:64:
f7:35:a5:e4:4a:af:17:20:12:20:06:d4:68:be:57:dd:1c:e3:
3d:0c:40:35:e8:62:81:1f:e2:00:7a:8a:8d:8f:6d:55:a5:72:
84:8a:82:2f:f7:fe:c2:d3:26:a2:81:df:1b:03:b5:8d:3a:0b:
1e:29:90:67:f1:f1:9d:79:03:fd:a3:80:1a:63:cc:8d:4a:8e:
c9:5f:d2:15:08:dd:65:b5:fc:f1:91:f7:af:96:6d:c2:c1:9d:
7e:08:65:f3:12:0e:7f:12:e2:66:8b:4f:76:6c:eb:03:3f:cd:
90:56:cc:f7:5d:9d:6a:35:18:d6:9e:44:04:79:29:01:22:f3:
9c:f1:77:7b:1a:24:4f:f7:c2:72:09:af:9d:44:3c:82:88:f1:
98:30:cb:61:f3:c6:94:47:f4:69:06:45:97:c2:ce:ca:0e:c3:
90:f2:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:50 2024 by rpki-client on console-ams.rpki-client.org