Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/_eRRFy-opqWfXmnxs-xa9BI8ESM.roa
File: _eRRFy-opqWfXmnxs-xa9BI8ESM.roa (raw, json)
Hash identifier: rCw6icWWKJmUgCrJID1+kWAi2NEDt5UEpIwKx9xC9Jc=
Subject key identifier: FD:E4:51:17:2F:A8:A6:A5:9F:5E:69:F1:B3:EC:5A:F4:12:3C:11:23
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 03E1F5
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/_eRRFy-opqWfXmnxs-xa9BI8ESM.roa
Signing time: Thu 07 Apr 2022 13:57:43 +0000
ROA not before: Thu 07 Apr 2022 13:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8767
IP address blocks: 193.28.242.0/24 maxlen: 24
2a10:57c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254453 (0x3e1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Apr 7 13:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fde451172fa8a6a59f5e69f1b3ec5af4123c1123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:19:ca:3d:ba:48:6d:98:38:2f:44:5f:fd:
47:ef:7d:ce:f4:0f:a3:38:6a:37:4f:63:f4:1d:20:
b1:4f:26:ef:a1:d3:5e:db:43:b5:98:e8:28:a9:35:
7c:0e:9d:46:df:de:ae:e6:53:b4:be:86:4a:60:86:
c9:5d:4a:45:c0:3d:b5:1a:4f:6e:4d:7d:64:39:31:
29:26:a0:c4:38:af:97:5f:14:d3:0d:d4:0d:96:9b:
42:00:cc:76:a6:31:e0:9b:25:7a:09:1a:cb:96:c8:
ce:34:ed:ff:90:d4:1a:70:f9:1b:06:37:aa:22:c6:
d3:97:77:b5:be:17:10:e9:6a:72:60:f5:2d:38:c2:
b9:de:b9:4c:7a:1d:2e:61:ea:8f:ce:9e:26:98:4e:
4c:08:a9:9d:53:4e:ef:24:78:a1:fa:fb:e5:9a:c6:
c0:fc:4c:94:cb:fc:0f:63:ec:9d:3c:ca:41:e5:8a:
e5:53:02:48:9f:4f:61:d9:90:ba:11:ec:07:e2:ad:
86:7f:86:c4:c2:0c:8d:b4:74:35:f1:c9:8d:31:fb:
1f:28:c3:bd:f2:b1:97:41:a9:78:02:39:e8:39:ef:
02:1c:e2:c4:81:36:f1:92:48:9a:61:94:cc:ab:7d:
ef:71:66:7e:d6:c7:bb:ac:be:c2:bd:30:8c:82:1e:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:51:17:2F:A8:A6:A5:9F:5E:69:F1:B3:EC:5A:F4:12:3C:11:23
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/_eRRFy-opqWfXmnxs-xa9BI8ESM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.242.0/24
IPv6:
2a10:57c0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:1c:83:02:b8:17:d4:76:4b:54:f2:63:0c:0c:49:b6:76:e2:
10:03:fe:77:18:3d:54:1d:04:e2:31:81:b0:74:cd:cd:36:d6:
e1:9a:29:e0:41:65:91:f9:5a:54:ea:1a:76:da:01:b7:57:d0:
a6:8d:cd:15:94:e4:03:eb:79:a3:9f:21:ee:97:f3:d8:98:d1:
4c:88:74:29:be:40:e0:21:9a:a0:81:e7:7e:94:6c:99:53:f7:
fc:f4:80:63:73:0c:fa:7c:79:cd:48:19:d5:28:0e:bf:34:9c:
a6:3d:91:c9:ca:61:17:94:ae:ce:72:b5:ad:93:3e:4e:1b:27:
bd:48:3e:5b:c4:c0:d2:23:a8:b2:54:79:15:b1:cb:de:f1:42:
4c:5d:83:f7:c3:32:77:2f:12:d2:20:b2:a8:85:1b:21:b5:62:
55:d7:f6:5c:9c:e9:48:34:7c:ea:d1:68:36:4f:f9:49:b9:4e:
a2:26:60:8e:1c:90:73:48:84:f7:66:a3:b1:ac:5a:a3:7e:83:
74:24:af:d6:35:77:45:d9:28:72:d7:fa:e8:a2:38:94:bd:e2:
cd:65:29:d7:af:8f:a3:33:eb:1b:ba:ab:aa:d4:6b:5f:30:90:
96:d1:40:a9:66:65:11:75:ce:82:de:f4:c3:cc:2f:35:f8:47:
45:4e:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:01 2024 by rpki-client on console-ams.rpki-client.org