Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/r9OXuDIHxBGnQW-8wxmV_LEZqBg.roa
File: r9OXuDIHxBGnQW-8wxmV_LEZqBg.roa (raw, json)
Hash identifier: MRvuteNgBgq4ItDh3wwIkKPit9dK6mNJXuUanBuZG3w=
Subject key identifier: AF:D3:97:B8:32:07:C4:11:A7:41:6F:BC:C3:19:95:FC:B1:19:A8:18
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0187C231
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/r9OXuDIHxBGnQW-8wxmV_LEZqBg.roa
Signing time: Sat 01 Jan 2022 05:52:54 +0000
ROA not before: Sat 01 Jan 2022 05:52:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43754
IP address blocks: 194.36.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25674289 (0x187c231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 05:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afd397b83207c411a7416fbcc31995fcb119a818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:d6:66:ea:46:dc:e2:61:43:e3:3d:ab:d4:
35:e9:2d:8c:6d:f3:ab:98:1f:5b:68:59:b8:6f:7a:
37:bc:29:c8:3c:32:4e:7b:41:aa:4d:ad:6a:a7:50:
5f:6d:c2:85:41:7d:7b:8e:bc:ee:08:19:9d:ac:33:
f0:ad:91:2b:f8:c6:be:8e:31:32:ec:2f:20:dd:9d:
45:e6:57:1b:ce:e2:2d:29:45:b8:23:74:b3:3f:f8:
98:85:14:3f:08:67:e6:ff:e0:a2:68:cf:8f:73:b7:
74:8d:1c:7e:bb:3b:19:c5:16:8a:04:aa:cd:90:85:
b8:a5:a2:72:2b:84:d4:a8:05:65:6c:d3:82:a3:c4:
1d:c1:7b:b5:94:80:12:3e:41:56:90:b0:bf:5b:bb:
57:f0:fd:08:8c:54:6d:df:09:2f:d9:ee:7e:f2:4c:
47:46:ef:fb:11:5a:b6:9f:66:8b:d3:6e:c0:06:eb:
76:8b:fa:3a:26:2f:a9:04:0b:51:59:27:44:4b:4f:
f4:03:19:93:cb:b1:c4:04:9a:70:95:00:e9:6d:1a:
2d:1c:91:6a:8f:a5:4b:a3:86:ef:d1:4a:32:9d:4f:
c6:2a:ab:34:4c:0c:ca:d1:a5:6a:98:ec:fd:5f:50:
3b:63:07:54:a9:11:a8:36:39:9c:ed:bf:26:b0:bc:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:97:B8:32:07:C4:11:A7:41:6F:BC:C3:19:95:FC:B1:19:A8:18
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/r9OXuDIHxBGnQW-8wxmV_LEZqBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:09:fe:a2:a7:24:32:6a:e5:8d:cf:8e:65:87:f3:84:c7:ed:
52:6c:1c:3c:f2:d0:29:be:94:a8:c3:17:1b:b4:d2:3b:64:f2:
7c:2a:08:58:8f:76:92:89:d9:dc:49:6e:55:6f:f9:72:ec:a6:
2d:98:02:65:ac:ad:72:45:1d:36:be:d5:19:22:fe:43:12:c9:
44:4a:17:71:a2:ca:c1:c7:23:43:16:85:08:f1:be:fb:1c:0a:
eb:cc:e3:b3:44:b4:2f:aa:df:21:b1:40:42:d7:3c:38:74:00:
c6:ea:47:4d:f8:bd:c4:c0:18:b4:fb:12:d4:5e:d2:6e:39:6b:
8e:29:9d:73:77:94:1a:f4:d5:17:42:25:03:96:41:dd:fa:a8:
8c:f3:61:91:77:3a:57:8e:99:30:64:c2:33:10:14:47:87:e0:
c7:52:90:c4:7a:01:46:68:9f:9b:5b:18:a4:39:62:e3:06:56:
5a:2c:cb:2c:a0:5d:0e:5f:e4:30:b3:33:06:95:66:80:b9:f3:
ca:3a:94:a4:f9:c9:fd:32:23:d6:84:44:17:97:31:3f:d0:82:
96:71:83:ee:bd:1a:ae:48:a4:bc:07:64:f2:3a:40:e1:0e:e6:
2d:db:43:e1:eb:7b:b2:c8:2c:48:07:60:90:32:6b:03:99:a3:
2b:a9:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org