Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/PUimUrAmsKcbOBg5JagVNSKiRHU.roa
File: PUimUrAmsKcbOBg5JagVNSKiRHU.roa (raw, json)
Hash identifier: USlrJhSckslukpKCjMbTRVhYMN6bpyNLnuOmsvVeUHI=
Subject key identifier: 3D:48:A6:52:B0:26:B0:A7:1B:38:18:39:25:A8:15:35:22:A2:44:75
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 0B4492B8
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/PUimUrAmsKcbOBg5JagVNSKiRHU.roa
Signing time: Sat 01 Jan 2022 08:55:10 +0000
ROA not before: Sat 01 Jan 2022 08:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202332
IP address blocks: 194.147.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189043384 (0xb4492b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Jan 1 08:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d48a652b026b0a71b38183925a8153522a24475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:8c:65:d9:d3:a7:a5:be:02:6a:9c:65:14:
f1:94:52:2a:48:c7:ce:a9:cc:04:da:56:d3:b2:42:
b7:79:33:9b:25:18:25:cc:e5:50:8b:63:83:a9:9a:
b7:fa:3d:6b:a6:4c:36:a2:5f:91:dc:ae:cc:b7:18:
a2:13:4c:a6:48:e0:64:08:e0:4e:3f:f4:50:a0:b0:
0b:00:ec:a4:15:a5:41:fb:22:1c:81:15:48:40:ed:
d5:33:3c:31:a7:0c:63:56:da:55:ea:2f:45:96:e7:
f4:0e:ae:8e:e5:37:19:f0:df:97:14:ac:c6:aa:c7:
ca:91:99:91:62:7a:93:91:92:8f:75:e8:e3:3e:44:
fc:26:4b:ee:0b:f0:ef:fb:8a:65:ba:19:b9:c0:54:
9a:74:0c:2a:c5:22:0a:6b:48:4c:76:86:09:eb:05:
fb:04:e6:6a:8a:c7:49:c4:d0:0a:a0:24:cc:c4:23:
c0:4d:a7:c8:aa:e5:46:b2:68:25:c9:3d:41:a0:32:
a6:7a:9a:00:7e:9c:fd:4e:40:87:f6:39:59:9a:a2:
48:46:0f:de:ff:54:56:d5:55:c5:76:d7:ee:31:a0:
15:49:8a:2c:2a:6c:f7:20:6a:3e:6e:40:77:4b:0d:
99:0b:8c:82:54:1a:04:79:0b:ec:56:88:0c:41:93:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:48:A6:52:B0:26:B0:A7:1B:38:18:39:25:A8:15:35:22:A2:44:75
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/PUimUrAmsKcbOBg5JagVNSKiRHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:50:a1:3e:e2:49:df:42:40:90:a1:36:ef:9b:65:e1:18:c7:
13:a2:a0:08:53:a0:6d:69:2a:0b:1e:52:ba:92:7e:bb:77:f2:
85:9f:9f:8e:1d:ea:48:f4:75:1f:4d:e3:dc:2a:bd:ed:ac:79:
e9:f6:4c:19:07:2e:14:a1:03:40:cb:ae:3b:cf:cc:ce:c9:34:
b4:5c:74:dc:59:11:f2:41:44:c9:54:fb:c9:ec:ea:1e:01:c9:
50:4b:59:1e:11:c7:bd:83:e3:f6:70:78:74:1f:9b:7a:ee:1e:
f8:dc:ef:47:12:5d:6d:eb:68:27:e4:95:a7:5a:51:91:e8:84:
22:be:c5:a4:ae:99:dc:1c:b3:b7:f4:c7:04:e3:5c:c4:45:02:
d9:bd:d7:5c:2d:10:00:41:ee:68:d3:52:2e:79:40:1c:e3:ba:
57:a0:67:6d:9c:5b:f1:a2:9c:a0:63:32:53:65:ed:72:f9:79:
44:ac:2f:82:3b:5a:3c:35:e4:66:c2:b2:d0:18:36:b2:28:20:
df:7e:ce:a1:65:f9:e7:95:d8:cb:6c:0e:1b:c8:c3:be:9c:ce:
a6:c2:99:4c:a5:18:58:f0:57:d9:9c:7e:7f:9e:6e:ac:d4:d9:
3e:44:fe:4c:19:06:4b:63:72:f8:65:6f:2d:51:88:d5:85:6b:
75:32:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:02 2024 by rpki-client on console-ams.rpki-client.org