Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/ckNjluy7yOD5YCwjwQ_Q6drIcjE.roa
File: ckNjluy7yOD5YCwjwQ_Q6drIcjE.roa (raw, json)
Hash identifier: wQk6gnNvhGW0OKZvypqHvgMGk0uj+OjQTw1TACWWFyE=
Subject key identifier: 72:43:63:96:EC:BB:C8:E0:F9:60:2C:23:C1:0F:D0:E9:DA:C8:72:31
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: AADDD2
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/ckNjluy7yOD5YCwjwQ_Q6drIcjE.roa
Signing time: Sat 01 Jan 2022 06:05:54 +0000
ROA not before: Sat 01 Jan 2022 06:05:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202984
IP address blocks: 194.38.8.0/24 maxlen: 24
194.38.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11197906 (0xaaddd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 1 06:05:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72436396ecbbc8e0f9602c23c10fd0e9dac87231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:c3:73:fc:59:29:2c:17:ca:2b:4d:ce:fa:
d5:27:49:41:ba:d1:80:dc:7f:f1:89:31:00:0c:f2:
a0:2d:04:90:69:43:ef:44:4f:65:d7:da:d2:93:b0:
4b:10:34:4a:ca:4a:7c:bb:1e:d7:98:43:a6:0b:fc:
6f:0d:82:1d:e6:83:bd:3e:8e:c5:7e:1f:94:41:2b:
11:d1:92:0b:83:a7:fa:81:fa:41:c3:09:91:6f:2d:
27:47:67:d8:1f:b9:47:4a:28:91:ea:94:e5:69:90:
41:c5:9f:4f:db:1c:c1:a8:f6:bf:30:da:ab:da:17:
92:22:03:54:ec:77:60:f4:33:64:75:01:a2:05:92:
27:33:8b:68:f8:24:74:ff:7f:56:66:2e:8f:75:ae:
c6:96:5a:1d:64:a8:e9:7a:1b:e4:82:b1:fa:a6:e3:
21:c6:51:22:db:ca:ed:f1:a1:57:76:e1:5a:9f:4b:
7a:d2:ed:89:d7:40:e3:65:c7:64:91:ac:42:96:13:
8c:bf:11:24:69:8c:7a:6d:40:4b:f6:f3:28:92:0f:
f8:ed:62:c5:08:e7:3f:a2:76:32:e3:2e:8a:7b:e3:
51:5c:a4:a9:42:6a:2f:a4:26:73:d9:4d:84:d8:fe:
63:53:cc:c8:12:cc:33:30:e0:a8:5f:c9:90:e7:43:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:63:96:EC:BB:C8:E0:F9:60:2C:23:C1:0F:D0:E9:DA:C8:72:31
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/ckNjluy7yOD5YCwjwQ_Q6drIcjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.8.0/24
194.38.11.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0d:eb:0d:dd:3e:ae:f5:5a:d2:6e:86:4a:ae:65:1f:62:87:
e7:29:e8:60:0c:19:8d:ce:2b:e2:c4:3e:e5:be:09:04:c5:82:
ae:b2:c9:35:3e:15:b6:4e:f0:41:b0:c8:e1:aa:d4:17:49:c0:
e5:f8:1d:93:f0:a4:93:fd:0f:f5:7f:0c:dc:21:e4:78:b2:f1:
6c:3a:40:73:57:b9:8a:99:51:c9:6d:25:9d:0d:85:c9:84:52:
02:55:38:c9:f7:83:30:c6:95:96:3f:33:8a:73:c5:40:61:8b:
99:c7:eb:eb:cf:b3:cb:a2:c1:35:6f:e0:ba:37:e2:c0:93:7d:
12:ba:2d:a8:9a:ab:68:15:47:10:63:1a:63:e3:51:19:8f:8f:
01:70:c6:6f:63:be:e0:16:f3:c1:2b:82:6c:a3:80:42:77:8d:
9d:ac:3b:28:99:3c:c5:69:45:35:e8:77:99:b7:9e:47:67:b7:
7d:7f:9f:24:45:f5:0f:64:94:b9:15:5a:e5:0d:b9:75:c2:87:
0e:8b:97:2d:94:1a:c6:4e:a1:a1:85:ac:8c:24:30:b3:ef:81:
2c:11:5f:3b:00:43:0b:c5:9b:d3:43:19:52:00:13:ae:98:53:
76:60:f8:e7:70:d0:6d:54:7d:0b:07:de:d6:cb:76:75:dc:3f:
52:54:b4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-fra.rpki-client.org