Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/n751UDuyUOl5VM0137khuCLe-7g.roa
File: n751UDuyUOl5VM0137khuCLe-7g.roa (raw, json)
Hash identifier: uGw8UYLVhuZxi5r0cAAyjdVi50qlHu9kftq5Cuay8M0=
Subject key identifier: 9F:BE:75:50:3B:B2:50:E9:79:54:CD:35:DF:B9:21:B8:22:DE:FB:B8
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 0A530A9C
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/n751UDuyUOl5VM0137khuCLe-7g.roa
Signing time: Sat 01 Jan 2022 07:53:08 +0000
ROA not before: Sat 01 Jan 2022 07:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41295
IP address blocks: 194.24.178.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173214364 (0xa530a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Jan 1 07:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fbe75503bb250e97954cd35dfb921b822defbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:15:d6:a6:cb:06:9d:2a:f6:66:8c:1f:5f:
eb:69:13:c7:40:e1:a7:f8:2c:4e:db:37:a7:27:ce:
53:99:20:a8:9c:49:9d:e1:dd:7f:3a:34:0b:3e:b2:
6c:cc:48:a1:b2:ca:9d:21:31:ac:54:e6:28:d2:ac:
43:00:80:89:97:88:65:38:f1:89:42:f5:7a:7b:c4:
c7:68:a1:fc:f2:ff:4a:2a:e5:fa:bd:14:b1:f2:d1:
fe:0e:63:81:ab:26:a3:0d:d5:a0:f3:f2:b1:0d:60:
76:81:19:1d:2a:c4:d1:f1:bf:7e:69:4f:51:ed:ae:
db:96:b2:56:0c:fa:35:a4:04:12:d4:b3:5a:23:6d:
95:d8:51:91:70:c0:ac:bd:b2:3f:10:c5:96:bf:c5:
ca:c7:f6:48:9a:f9:38:0b:c0:7b:24:74:c8:b7:2a:
86:84:b5:d2:f2:d6:72:5b:2e:5a:af:75:78:c8:f9:
41:8e:1a:d9:bc:cc:92:aa:1f:b5:7c:ce:12:5f:44:
d9:14:c6:df:29:45:bf:2d:0e:bd:cc:c7:9e:ea:26:
32:64:e2:3d:79:1e:2b:55:51:8e:f4:49:3a:3e:22:
2f:2a:51:c8:4b:7b:37:15:cb:bd:85:ca:9c:b1:2a:
10:fd:62:ab:2e:e9:6b:c6:fb:fa:24:7a:0e:4d:82:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:75:50:3B:B2:50:E9:79:54:CD:35:DF:B9:21:B8:22:DE:FB:B8
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/n751UDuyUOl5VM0137khuCLe-7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.178.0/23
Signature Algorithm: sha256WithRSAEncryption
78:9f:5f:8c:81:df:41:02:1a:9e:96:04:fb:8a:30:5a:63:de:
88:44:48:63:ce:71:ee:9d:09:5c:88:ff:5e:d9:87:49:79:57:
2e:da:65:ee:b1:03:0d:a4:d2:ad:5c:bf:91:e8:60:b8:b8:31:
9e:f5:73:0d:a7:d6:6e:0c:94:01:76:c8:ce:a5:54:a8:67:99:
79:3d:e7:c4:7c:e7:d3:b2:3c:73:e5:b5:1e:32:10:7d:28:a7:
81:86:19:8b:dc:c7:3d:95:af:97:7c:ce:25:bc:ae:70:f4:de:
f8:37:8f:95:e9:8a:69:3a:a5:28:cb:e3:3c:d0:70:08:b8:c8:
ad:e0:6e:5c:d4:ce:8e:98:30:92:35:35:cc:41:cd:f8:00:06:
ca:21:65:f5:5b:41:79:fd:d6:fc:6b:2e:9c:1b:64:7e:8c:92:
b0:93:7a:2e:cb:2d:30:e9:bc:84:2d:df:e3:48:32:ee:14:b2:
a1:90:9e:b7:d3:b8:d5:06:50:ea:3a:8e:0d:ea:3f:23:da:76:
6a:2e:64:60:42:5d:39:e1:aa:fe:09:4d:68:c8:e5:97:01:36:
d7:9c:5f:f8:86:38:da:2f:7f:5e:1c:a1:4a:21:b1:a7:30:18:
0f:61:19:c0:e7:e0:e9:68:4c:56:4d:2a:b3:68:ec:0e:0a:c3:
18:e4:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:02 2024 by rpki-client on console-fra.rpki-client.org