Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/pi3e9hG0S2bBtNr2aNZNGmpWVhk.roa
File: pi3e9hG0S2bBtNr2aNZNGmpWVhk.roa (raw, json)
Hash identifier: isKBqqBnoZriWhoW3kSma+1dhZKAS6Q7/O+pGzu9lis=
Subject key identifier: A6:2D:DE:F6:11:B4:4B:66:C1:B4:DA:F6:68:D6:4D:1A:6A:56:56:19
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 02BFDC
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/pi3e9hG0S2bBtNr2aNZNGmpWVhk.roa
Signing time: Tue 08 Feb 2022 13:25:52 +0000
ROA not before: Tue 08 Feb 2022 13:25:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50351
IP address blocks: 195.191.110.0/24 maxlen: 24
195.191.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180188 (0x2bfdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Feb 8 13:25:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a62ddef611b44b66c1b4daf668d64d1a6a565619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:be:93:fc:6e:87:3d:b2:bc:bc:07:ae:c1:
ee:06:84:89:d1:32:df:1b:6b:70:da:52:ac:3c:57:
9b:5a:f9:fb:c8:99:68:87:f6:6a:1e:2c:ba:8a:84:
36:32:10:93:60:4d:7d:63:f3:21:66:94:4d:07:58:
4a:51:9b:cb:2c:52:13:0f:12:5e:ad:f9:65:e8:c9:
22:36:77:7f:9b:bb:26:8b:bb:cc:ba:6e:9a:a5:d0:
66:2b:d4:5e:93:ea:0b:0d:3b:e3:57:95:6b:b2:a2:
4a:c4:66:c9:3d:db:d0:4e:cd:5f:53:80:af:d5:c4:
b9:5d:51:d0:f2:71:42:4f:3d:cb:c7:80:b9:2b:86:
1c:a5:5e:68:68:29:92:04:ad:ae:88:f0:74:4d:bf:
3b:aa:ab:97:80:f2:24:b9:46:01:7a:cb:c9:a4:f4:
d6:0e:b2:f7:b1:f4:f0:07:1a:90:8c:41:df:ee:b3:
d7:d6:fb:9b:de:60:92:76:82:bc:12:dd:08:dc:cd:
42:ae:02:c5:d3:b9:33:48:d1:a3:3d:dd:4a:c8:27:
17:53:12:b6:fa:f6:93:59:71:4f:61:43:6c:fd:ee:
76:9c:11:9d:21:fe:ec:d8:3c:ac:76:66:9c:8b:a3:
7b:25:0f:80:0e:74:cf:1f:aa:f0:66:e1:9d:c7:cc:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:DE:F6:11:B4:4B:66:C1:B4:DA:F6:68:D6:4D:1A:6A:56:56:19
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/pi3e9hG0S2bBtNr2aNZNGmpWVhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.110.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:71:9f:ed:26:d9:f7:e5:93:78:5b:03:13:1d:59:9a:b8:7c:
ce:a4:e7:2c:eb:97:8f:b1:75:bd:a4:70:36:6e:09:c7:5c:64:
e7:21:89:1f:a1:71:02:4f:43:77:6b:42:b7:2d:3f:20:45:b5:
00:1e:e0:7a:07:45:bb:b2:55:44:70:07:f7:05:9c:95:8e:6e:
0c:e6:ed:5e:4a:e4:6a:c3:a8:27:48:c3:8d:f3:e0:0e:7b:25:
9c:97:d1:e6:86:9d:77:c3:f9:41:2b:78:18:59:da:28:35:44:
fa:6a:fc:4e:af:60:81:5a:e3:1c:01:c6:72:10:9d:ba:77:75:
a2:5c:ea:7b:2c:7b:c4:8d:e0:35:67:ad:2d:27:0c:0a:55:7c:
bc:9c:10:b7:71:4e:52:2a:7c:4f:c4:64:2f:08:00:eb:38:98:
78:44:9d:a2:b1:b6:77:a3:0f:5d:c4:24:de:eb:49:68:30:5f:
d3:cc:bc:46:b8:99:c1:b6:9b:b1:57:ed:8c:39:96:4b:ae:3c:
ac:91:01:51:c3:d6:35:cc:74:26:bb:37:3a:6b:22:7d:17:88:
38:e1:62:eb:a3:1d:78:ee:8f:44:05:59:ac:2e:b5:48:19:e5:
10:90:cd:38:9c:07:9a:b4:91:d6:51:02:01:f9:21:ba:37:7c:
cc:75:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:35 2023 by rpki-client on console-ams.rpki-client.org