Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/9BJbrLMbU1SxSILM3xkN1Bzr92U.roa
File: 9BJbrLMbU1SxSILM3xkN1Bzr92U.roa (raw, json)
Hash identifier: e4QNAJ2Y4V/zDuwiQrk5Ky/Cl1ew90TciQtzvtEPxow=
Subject key identifier: F4:12:5B:AC:B3:1B:53:54:B1:48:82:CC:DF:19:0D:D4:1C:EB:F7:65
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 02AE8A7F
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/9BJbrLMbU1SxSILM3xkN1Bzr92U.roa
Signing time: Sat 01 Jan 2022 11:01:14 +0000
ROA not before: Sat 01 Jan 2022 11:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39222
IP address blocks: 193.30.245.0/24 maxlen: 24
194.165.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44993151 (0x2ae8a7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Jan 1 11:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4125bacb31b5354b14882ccdf190dd41cebf765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:71:18:5b:7d:3a:af:68:cf:8f:62:d3:b7:
52:86:ad:f5:a6:7e:93:0e:6f:40:7c:d2:fd:2d:b9:
4a:6b:60:12:15:25:c0:a5:d9:bb:57:dd:12:e6:3c:
c6:7d:11:07:23:fd:a9:d9:dc:1a:80:8c:1f:c3:98:
b4:f5:d2:d9:9b:fd:2c:59:1b:15:52:0a:96:a9:f6:
f4:cb:9f:02:a8:5a:20:f0:4b:8a:92:e8:19:8b:3e:
83:f6:99:28:16:2b:e2:47:1d:02:8e:5c:69:46:f6:
f3:1d:59:2f:fa:60:01:ce:d0:7d:e6:4d:c8:a0:dd:
73:7f:f2:1f:d6:bf:f2:53:06:5f:1d:26:c2:25:43:
83:06:ba:02:b7:8d:a3:3e:45:57:43:c4:2b:f5:0b:
83:bf:f9:ad:2a:4b:26:63:30:d8:87:71:6b:65:35:
1f:f4:00:8e:bc:f2:b4:81:fe:50:4f:a4:00:4d:87:
12:62:1c:47:11:c1:27:7c:7d:d8:da:14:ae:1e:9e:
c9:57:1b:ea:55:0d:20:ae:98:7d:a3:93:8e:44:b1:
23:bb:5f:67:11:68:2b:3a:da:bf:28:17:9b:d7:91:
e3:f1:3e:97:10:39:a4:38:62:56:14:0c:13:2c:ea:
57:19:ab:9c:0e:7d:fb:2f:c1:53:ed:88:e6:99:ab:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:5B:AC:B3:1B:53:54:B1:48:82:CC:DF:19:0D:D4:1C:EB:F7:65
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/9BJbrLMbU1SxSILM3xkN1Bzr92U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.245.0/24
194.165.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e2:c0:bf:5c:33:21:83:4c:cd:50:00:d1:e2:c7:1a:2e:cf:
6c:05:b6:cc:d5:38:4a:90:58:b2:8f:9b:61:4e:a8:31:bd:b7:
ba:01:d8:19:b2:67:86:c4:78:5d:92:42:67:59:b9:67:f0:7d:
91:09:07:1f:62:a3:da:1e:6b:4c:76:82:36:58:de:10:84:6e:
dc:0c:67:1c:47:59:0f:6b:45:46:d9:2d:55:da:37:a2:51:c1:
ab:ef:36:79:86:74:44:5b:07:a5:6f:bb:14:92:91:81:55:d7:
28:10:33:a3:44:c5:cc:e2:0f:8a:17:b4:2d:1f:e2:92:2f:7a:
3e:60:b0:ed:b6:3c:49:31:0a:f4:2a:25:a6:4d:95:bf:ba:3b:
1f:42:ae:f2:34:9c:57:a6:bd:f2:b8:cb:29:9c:bc:a8:00:f5:
d3:f2:c0:f5:e3:13:b0:c3:77:33:37:a9:c0:83:05:42:74:54:
3e:23:07:78:db:e5:0c:39:f0:a4:35:f7:95:e9:5e:f4:c6:6c:
10:9a:28:b7:32:55:2f:87:f1:61:da:3c:34:15:41:ed:31:5b:
73:e0:7e:e8:d5:44:f5:39:f9:b5:e2:0b:3b:82:0f:54:54:e8:
05:d2:50:4c:a8:2a:fb:35:b3:35:ae:45:e6:0d:54:bc:ac:09:
02:9b:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:44 2024 by rpki-client on console-ams.rpki-client.org