Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/SxAK_6zINrmz2MV-z3iPsA0CNgU.roa
File: SxAK_6zINrmz2MV-z3iPsA0CNgU.roa (raw, json)
Hash identifier: atkpxOZX9TNfAr9mttNT1+OqVhBSiPHe98VNipwYzok=
Subject key identifier: 4B:10:0A:FF:AC:C8:36:B9:B3:D8:C5:7E:CF:78:8F:B0:0D:02:36:05
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 05BB9376
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/SxAK_6zINrmz2MV-z3iPsA0CNgU.roa
Signing time: Sat 01 Jan 2022 13:59:56 +0000
ROA not before: Sat 01 Jan 2022 13:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207794
IP address blocks: 194.113.139.0/24 maxlen: 24
194.113.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96179062 (0x5bb9376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Jan 1 13:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b100affacc836b9b3d8c57ecf788fb00d023605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:c1:e3:00:58:c6:b8:7b:5a:dd:31:2a:00:
30:2b:cb:45:89:84:4a:69:d4:35:56:02:75:76:b0:
25:1f:d2:17:20:5f:87:a1:83:c9:09:75:01:fa:91:
4e:86:fd:54:66:7d:77:05:6d:2f:e8:ae:5d:7b:2a:
cf:99:48:85:34:f4:0d:d9:29:88:e3:c6:15:a1:40:
73:a3:fb:c9:5a:95:04:0b:6c:0c:64:50:df:4c:32:
30:08:68:32:7e:1d:7b:af:c2:8b:6c:99:1c:a8:b2:
b9:e2:18:73:3d:9e:99:3f:0d:ea:00:31:2c:ea:fd:
5d:da:8b:02:7b:bb:31:cc:75:1e:bb:d9:3a:c8:be:
ec:08:e5:34:c8:3f:d6:73:24:81:07:6f:fa:69:ed:
7b:70:49:02:58:66:ba:88:9d:95:7c:51:98:70:e3:
cb:c8:25:04:43:f5:fb:92:67:b8:ae:f4:69:ab:77:
e8:cd:d8:42:de:0b:2e:bd:7e:b6:45:1d:f3:69:b4:
da:48:02:f0:b9:7c:70:a8:8b:c5:ac:73:6b:57:e4:
df:5e:20:00:89:7e:70:65:30:b3:1f:71:bf:a4:61:
9b:62:20:cf:d7:66:56:e5:cc:dc:78:a9:c8:59:10:
51:11:2a:da:56:1b:68:cc:54:ea:82:58:c4:bb:b6:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:0A:FF:AC:C8:36:B9:B3:D8:C5:7E:CF:78:8F:B0:0D:02:36:05
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/SxAK_6zINrmz2MV-z3iPsA0CNgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.139.0-194.113.140.255
Signature Algorithm: sha256WithRSAEncryption
52:6a:de:cf:39:32:1d:94:37:0f:f9:13:31:f9:51:0d:1f:8c:
d8:04:dc:90:2e:e6:05:7c:8b:43:f0:42:62:56:1f:ec:74:24:
68:e3:06:6e:59:ae:06:01:59:fe:61:7a:eb:f4:9f:db:10:1e:
57:46:52:80:c0:0f:1c:86:3e:b6:c9:27:d2:54:ad:37:cb:06:
b9:ee:93:0c:69:05:8a:4e:7b:06:82:d5:6d:95:bf:a4:cb:71:
59:e8:45:80:9f:66:65:69:0f:6e:c9:7c:c5:7c:31:5e:7d:4a:
de:20:1e:f5:e4:46:df:27:84:ac:e2:d0:1f:63:3c:d3:3b:30:
1c:4c:18:28:8a:4a:f8:b0:60:1b:ce:05:16:e2:ef:8f:ff:ab:
97:e8:89:78:f4:39:08:83:85:e7:54:17:2e:79:a9:e3:9d:cd:
34:e3:81:83:d4:ef:f8:a1:24:08:3a:75:a5:bd:ef:e8:e4:cf:
0f:90:4a:fc:da:2a:a8:d0:57:10:11:53:e7:41:1a:13:9d:7b:
dc:21:6f:35:39:1b:42:26:67:fa:5a:40:f9:77:e0:4c:08:37:
57:90:a5:8c:d2:9e:9d:ca:22:a7:48:b0:b9:67:f5:c2:48:6d:
40:c5:64:00:c2:6e:5b:b2:93:6a:57:0b:6f:00:35:d5:67:90:
15:68:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:08 2024 by rpki-client on console-ams.rpki-client.org