Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dobv2mhhKrsuqHq5hvZp6y2mTdA.roa
File: dobv2mhhKrsuqHq5hvZp6y2mTdA.roa (raw, json)
Hash identifier: +PIPE14qKjY2uF9SI3uIcWrPicQC35A2pyDOYti39wY=
Subject key identifier: 76:86:EF:DA:68:61:2A:BB:2E:A8:7A:B9:86:F6:69:EB:2D:A6:4D:D0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01848EEB99D1F56ED85938DFAD0D33E3CA9D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dobv2mhhKrsuqHq5hvZp6y2mTdA.roa
Signing time: Sat 19 Nov 2022 08:05:15 +0000
ROA not before: Sat 19 Nov 2022 08:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 193.57.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8e:eb:99:d1:f5:6e:d8:59:38:df:ad:0d:33:e3:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 19 08:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7686efda68612abb2ea87ab986f669eb2da64dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:92:e7:0a:e2:02:73:41:14:2e:0f:aa:f6:
c8:db:36:49:3a:c1:bc:0f:be:3d:9a:d8:ae:c0:d9:
57:e9:6d:3e:1f:ee:60:ce:5a:44:12:0d:a3:4f:a9:
38:26:70:b1:0d:5f:10:21:74:99:06:0e:a4:56:f1:
00:42:fe:e0:2c:72:f7:5c:b7:da:6b:b5:eb:c6:11:
a2:0f:9c:d9:7d:e0:56:84:dd:a7:97:e3:ac:80:2a:
fe:fc:22:3e:32:73:98:ef:8c:c4:89:51:68:d7:c7:
26:74:2e:6e:e9:3d:27:d9:1f:d9:58:bc:83:ed:55:
d8:8e:0f:6a:60:01:41:03:ee:18:88:ca:9e:e0:30:
33:c1:b5:09:94:34:db:d7:6f:80:0d:29:15:59:0f:
aa:e5:53:d9:03:40:7c:a3:8d:33:fe:a7:0a:51:85:
98:64:37:f5:07:3d:32:ea:4d:14:18:df:bb:ff:b5:
4d:c5:cd:ef:b9:c8:e5:d5:81:ad:ef:9b:a7:04:19:
b8:58:da:69:77:6f:61:71:c8:59:84:4a:4a:a1:b2:
08:ae:92:8f:b6:a7:44:86:55:fd:6b:d9:c1:48:82:
1b:31:9d:77:47:55:0f:a8:49:d7:67:4d:9b:77:e1:
40:e2:71:b9:03:06:53:8d:75:6c:6e:9c:f8:cd:7c:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:86:EF:DA:68:61:2A:BB:2E:A8:7A:B9:86:F6:69:EB:2D:A6:4D:D0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dobv2mhhKrsuqHq5hvZp6y2mTdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:91:00:5e:37:26:8c:2c:0b:80:7f:b7:d3:e5:2f:73:bd:3c:
e6:20:fd:c8:0c:4e:ea:6b:f9:89:79:a0:67:d1:83:76:c1:c7:
90:b5:0d:a8:c9:46:df:83:8a:c8:af:f2:b0:8e:22:0c:ba:02:
6a:53:35:1d:ed:44:c5:da:9a:26:f5:23:d5:f6:1c:5a:25:62:
46:31:5e:7c:8f:cd:c8:9d:86:48:24:a8:28:33:37:3e:55:aa:
95:b9:bf:17:74:1b:19:34:29:f9:cf:42:fa:1c:8e:fe:ca:f9:
88:a7:de:f4:c1:eb:29:9c:9f:e5:93:2e:e8:ab:86:19:ea:47:
79:3c:f6:69:01:f2:0d:10:37:80:db:b3:a3:67:85:82:fd:8c:
d3:29:44:c4:4e:3d:1f:dc:df:d9:38:93:50:f6:2b:d1:92:00:
7f:ab:9f:57:ec:0a:99:9c:52:24:d2:7b:0e:65:85:e0:9e:88:
12:3a:5f:4f:82:74:fc:be:ec:d5:0c:f2:c7:aa:3f:de:a9:fa:
97:e7:75:e9:23:d1:ab:fa:3f:f7:d0:20:9c:02:6a:39:73:4f:
f7:b9:3c:19:4a:c6:03:7f:a5:91:86:16:7e:1b:03:df:fe:e1:
2e:0c:f1:53:b3:30:35:b0:2f:d6:43:d5:98:fa:56:40:5b:ac:
e0:53:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org