Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/gM9rhC4lCn4t1ynxf9AUSBW1pAU.roa
File: gM9rhC4lCn4t1ynxf9AUSBW1pAU.roa (raw, json)
Hash identifier: RL/A6oE3656YKgIwZlUbHDJMy7Y3sBcebRr5y4KCDeM=
Subject key identifier: 80:CF:6B:84:2E:25:0A:7E:2D:D7:29:F1:7F:D0:14:48:15:B5:A4:05
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 018414D8D6CB14B39B42373B1BE9E01C584F
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/gM9rhC4lCn4t1ynxf9AUSBW1pAU.roa
Signing time: Wed 26 Oct 2022 15:11:05 +0000
ROA not before: Wed 26 Oct 2022 15:11:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44880
IP address blocks: 192.101.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:d8:d6:cb:14:b3:9b:42:37:3b:1b:e9:e0:1c:58:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Oct 26 15:11:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80cf6b842e250a7e2dd729f17fd0144815b5a405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:c0:0c:58:78:89:cc:e8:23:24:e1:ea:f4:
f8:70:08:7d:2d:2c:48:eb:db:a1:c8:73:91:ad:da:
a7:12:4d:2e:b4:b8:d7:99:4c:1b:68:0d:7d:6e:ab:
b7:f1:5a:16:c6:1a:fc:2d:86:05:71:df:da:44:b7:
35:cc:36:f5:61:fd:fe:39:25:80:cb:0e:49:0b:48:
9e:81:02:09:15:0e:f9:9f:b6:0d:41:72:85:e2:77:
5e:6e:06:6a:07:c1:56:b7:31:dd:d9:58:be:c1:79:
0c:e7:4b:a0:13:aa:e6:f0:7f:3d:fd:12:91:19:7e:
3e:4c:2a:8b:c6:f6:c1:e8:51:c4:a5:05:44:0e:9c:
9d:16:93:57:c9:36:40:86:39:06:54:f6:95:b5:26:
a4:50:52:c8:b5:bb:43:28:e9:95:f5:b5:ab:7a:9e:
79:38:52:9e:b2:c8:69:5f:c6:5a:92:99:54:ee:fe:
3e:92:33:54:01:23:8d:f6:60:9c:45:93:bc:41:1c:
b1:7a:9b:1d:a7:5e:17:90:db:76:2f:d1:7f:6a:a6:
8c:3e:5d:b8:90:ca:97:75:37:26:58:9c:21:63:b1:
f3:a6:ed:73:e0:b7:5a:01:0d:eb:4e:2d:20:11:5b:
08:08:50:92:23:17:58:55:1b:43:f9:1f:3b:e8:65:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CF:6B:84:2E:25:0A:7E:2D:D7:29:F1:7F:D0:14:48:15:B5:A4:05
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/gM9rhC4lCn4t1ynxf9AUSBW1pAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.101.75.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b2:bd:66:85:0e:47:5f:a7:86:84:96:24:89:70:b6:8e:8e:
b2:81:15:de:4d:c4:e0:d7:a9:be:0d:a5:a4:ff:02:36:36:12:
d5:cf:56:04:49:b0:61:17:9b:b0:07:03:17:8b:db:08:91:9d:
4d:54:46:96:0c:58:8d:3b:18:e0:4a:5a:ba:06:54:13:73:b4:
68:0e:92:10:a8:74:05:dc:86:e0:93:43:03:eb:f0:13:9e:d0:
c0:d0:84:e6:bf:6c:a4:5b:b3:15:e1:8a:9a:9e:84:66:97:2f:
e0:4a:5a:81:b0:aa:11:c3:dc:61:aa:b5:7b:fd:cd:af:af:5b:
ad:8a:04:0c:35:1f:1b:ef:e6:8f:f3:ca:c6:b9:2b:6f:d5:2e:
26:03:18:69:1b:8d:d7:ba:b8:6f:10:f0:96:18:b3:bb:c3:18:
18:a5:b9:2d:d6:c8:9b:98:67:54:ed:78:cd:de:09:a3:c7:38:
54:4c:5b:08:c8:05:d5:b5:a4:30:6a:0f:d0:8a:87:36:62:fb:
d7:7d:c5:fb:54:4e:03:a0:eb:b6:b9:6c:59:fb:9e:16:a6:03:
a7:61:8b:fb:99:47:84:ec:95:c6:20:ab:ed:12:db:82:00:d4:
51:35:9d:f4:82:f6:c1:37:d5:62:9e:97:37:99:11:95:2e:c2:
46:41:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:23 2024 by rpki-client on console-ams.rpki-client.org