Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4ds1LhMx86iUMoLjt98RTwd7U20.roa
File: 4ds1LhMx86iUMoLjt98RTwd7U20.roa (raw, json)
Hash identifier: sW+pC1RdJfzBfe3My1/w1xc51BofH9kPM1qHb+VjpO8=
Subject key identifier: E1:DB:35:2E:13:31:F3:A8:94:32:82:E3:B7:DF:11:4F:07:7B:53:6D
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 0D942A27
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4ds1LhMx86iUMoLjt98RTwd7U20.roa
Signing time: Sat 01 Jan 2022 09:06:16 +0000
ROA not before: Sat 01 Jan 2022 09:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20857
IP address blocks: 193.111.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227813927 (0xd942a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Jan 1 09:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1db352e1331f3a8943282e3b7df114f077b536d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:26:40:bd:25:b1:da:f1:12:25:8d:f0:07:
58:f5:35:02:25:26:ff:6b:0a:60:f1:b9:fd:48:f5:
86:2d:a6:fc:da:f2:19:72:63:78:d9:08:78:b4:78:
9e:55:9e:03:51:42:aa:e6:92:ac:fb:29:f4:9c:12:
69:a5:86:1e:b0:21:9d:31:dd:9b:eb:fb:93:1a:8a:
e6:3f:2c:21:f2:e5:4d:e5:85:a7:1a:c4:4d:f9:84:
4d:bc:c3:21:84:83:c3:87:8f:3d:06:70:79:d2:cb:
23:e4:55:a0:e4:7a:34:4f:09:43:ca:fd:7f:ef:8a:
4d:90:a9:47:8c:37:0d:ff:13:ca:ac:88:c1:31:d9:
26:52:3a:94:14:8a:58:89:37:06:ca:df:0f:33:8d:
04:3e:3d:9d:ff:4a:f4:39:24:0b:4e:41:f6:c5:b8:
84:e0:38:ae:0b:ee:75:fd:f5:87:18:62:8d:65:f5:
71:2f:8f:8f:5b:97:e3:e9:85:ae:54:7b:f5:07:f3:
61:8a:3f:9a:26:ee:03:fe:96:96:bc:aa:61:1c:ea:
28:e0:61:9f:fb:fe:b6:0b:47:5a:8a:6d:bf:14:a6:
c8:0f:8f:31:5e:61:aa:c3:cf:ae:39:f9:79:81:38:
94:02:64:10:64:df:e4:15:64:81:fd:e6:91:6b:f9:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:35:2E:13:31:F3:A8:94:32:82:E3:B7:DF:11:4F:07:7B:53:6D
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4ds1LhMx86iUMoLjt98RTwd7U20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.95.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a3:d4:bd:91:d2:c5:36:08:94:44:52:9e:a5:75:4c:a9:cf:
12:5c:cf:21:11:77:aa:78:d7:c8:2f:a6:67:c0:39:23:c4:bc:
c1:16:73:dd:0d:c4:e2:c4:ee:52:d8:06:17:98:c9:d3:b3:65:
a7:ab:c0:67:75:90:a0:f4:cb:21:02:ac:a5:70:bb:c6:18:ef:
59:1a:5a:97:05:2f:f7:9b:e8:23:b2:b7:fb:87:8f:1b:e6:3f:
cc:d9:fd:2f:43:76:9d:4f:53:d1:3b:25:39:2b:0b:93:21:1a:
87:ae:1c:16:a5:6f:3c:68:2b:83:89:7f:e4:68:56:e7:0b:14:
fc:d7:2b:67:6a:d7:ed:15:27:a4:2c:9b:cc:18:66:d2:ab:d0:
2f:d3:40:9d:19:69:ef:d6:04:f9:8d:26:70:3f:a5:fc:0e:9a:
ef:bc:0c:ca:98:a1:19:1e:65:55:a8:84:98:2b:f1:eb:de:60:
c9:d1:cc:21:99:d4:98:01:a4:8e:dd:19:9f:f4:fe:d2:a8:39:
31:4d:9a:e6:dc:90:48:58:8f:f4:a8:e4:21:6c:95:33:39:5d:
96:1f:b1:f2:80:dd:67:f1:0b:d9:92:ed:30:e0:bb:22:64:27:
e7:71:cc:30:1c:33:84:23:1e:1f:9c:d9:8a:eb:16:43:cb:21:
f7:dc:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:52 2024 by rpki-client on console-ams.rpki-client.org