Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/9YiGKrCQBCIe3FPoVyBkhNrSb7E.roa
File: 9YiGKrCQBCIe3FPoVyBkhNrSb7E.roa (raw, json)
Hash identifier: brouo3uFzV3xhJGNXxlEY7YRCQl3slkxWRIV8xgJT9g=
Subject key identifier: F5:88:86:2A:B0:90:04:22:1E:DC:53:E8:57:20:64:84:DA:D2:6F:B1
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 074022E6
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/9YiGKrCQBCIe3FPoVyBkhNrSb7E.roa
Signing time: Wed 09 Mar 2022 15:11:26 +0000
ROA not before: Wed 09 Mar 2022 15:11:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198843
IP address blocks: 5.56.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121643750 (0x74022e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Mar 9 15:11:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f588862ab09004221edc53e857206484dad26fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:2e:9a:e3:ff:98:7b:9e:e4:41:4d:be:29:
47:8c:00:66:d8:ec:88:25:5d:f1:a9:67:7c:24:27:
ab:d3:a5:f1:3b:cf:a6:ce:94:27:d3:ef:51:09:67:
28:5b:72:9a:0c:c6:fa:c2:4d:ff:73:2c:6a:bf:29:
94:4c:b0:e5:1b:66:c4:e3:40:72:24:8e:dc:18:10:
84:15:ed:37:7f:b6:cb:4b:c8:5f:31:ab:ea:8f:15:
4e:90:ec:59:d9:56:ec:ab:07:7f:15:6c:58:d6:4e:
70:f7:7b:ab:c7:99:2e:a3:b1:ad:80:92:b1:44:1d:
f5:6a:c5:55:29:c6:8b:93:4a:9b:c6:c0:5c:4d:2e:
fa:06:87:76:09:fe:d2:d4:c1:a5:15:f4:e1:1d:c7:
cf:3a:ec:82:e4:e1:5c:d3:85:31:dd:85:a1:4f:00:
77:21:6b:fe:56:a6:f4:33:53:58:97:42:7f:21:3d:
0d:47:42:26:57:e2:e6:1b:11:f6:59:8a:47:e5:c9:
51:dd:f6:ec:b5:11:0a:31:98:2b:49:db:c3:fd:65:
45:41:81:84:40:1f:7a:f7:c6:0b:a7:08:05:57:63:
d4:b3:1e:16:97:03:1d:a8:4f:5d:63:cf:34:81:10:
1c:2a:3c:ab:45:b2:fa:52:2e:5a:8f:0c:1c:76:5a:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:86:2A:B0:90:04:22:1E:DC:53:E8:57:20:64:84:DA:D2:6F:B1
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/9YiGKrCQBCIe3FPoVyBkhNrSb7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:12:6b:ef:dc:5a:31:47:10:0e:1b:f5:29:1f:1c:79:12:4d:
46:b2:c4:c6:ff:ea:68:6f:d5:0a:5c:55:88:db:7c:3d:c1:a0:
43:e5:dd:6b:27:cd:dd:17:4f:aa:11:e3:f4:35:28:3e:78:1f:
1f:a5:27:e6:94:64:49:ac:f8:6b:bd:50:bc:b4:9e:8e:50:03:
cf:4d:eb:93:8c:65:31:77:3d:ee:91:44:7d:88:cb:b1:48:f7:
c3:19:72:a4:1c:61:6e:23:af:47:fc:bc:0b:6f:22:b0:ea:71:
68:7f:95:0b:e4:c5:2a:23:27:5d:92:f9:9b:1c:52:58:ce:d2:
59:87:37:53:03:14:4d:09:db:51:ff:02:4f:fa:bd:10:f0:78:
68:ee:dd:cd:3c:14:1e:21:f2:12:c2:40:f8:33:77:66:b7:44:
b7:44:35:6c:b1:82:ba:ec:c9:f3:5a:ef:ae:d7:db:88:d2:23:
9c:3f:07:d5:6b:f1:97:a1:d6:30:b5:01:65:de:cd:6c:d0:4a:
87:4b:15:f7:8f:f9:c0:da:28:23:1a:3a:35:a5:45:12:e5:c7:
2f:43:f7:53:f5:86:ca:a2:1d:fc:86:ee:39:19:4a:b8:2e:00:
79:da:d0:2a:84:3d:4c:f5:6e:a3:c7:c9:d3:80:e4:f5:7e:51:
17:cb:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:20 2024 by rpki-client on console-fra.rpki-client.org