Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/e9WtHnFI6CeHS0bpAKgd4-iD3ks.roa
File: e9WtHnFI6CeHS0bpAKgd4-iD3ks.roa (raw, json)
Hash identifier: CSNaS3/ye+fVMUXh5WUWFMbm8UAe7hsObL+3UQjc2Ko=
Subject key identifier: 7B:D5:AD:1E:71:48:E8:27:87:4B:46:E9:00:A8:1D:E3:E8:83:DE:4B
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 06A40E69
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/e9WtHnFI6CeHS0bpAKgd4-iD3ks.roa
Signing time: Sat 01 Jan 2022 08:59:13 +0000
ROA not before: Sat 01 Jan 2022 08:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 193.247.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111414889 (0x6a40e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Jan 1 08:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd5ad1e7148e827874b46e900a81de3e883de4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:ef:02:b8:73:cb:7e:ce:9b:66:73:39:39:
56:4f:fe:10:81:48:65:9e:90:91:80:0c:c2:c3:88:
6e:5d:3d:6d:ef:e0:01:df:5f:98:0f:20:d5:3b:6a:
61:b1:ca:0a:8a:d2:36:d6:1f:48:d8:8a:22:ce:2e:
c2:bd:76:65:be:0b:f7:77:de:c7:5f:a7:b5:23:bb:
41:fb:e3:8a:d8:e8:e5:ed:9a:5e:85:55:ad:35:05:
c5:c0:66:ff:ea:5f:1c:b3:78:7a:08:4e:8c:26:2e:
bd:dc:c4:b7:bd:41:d0:d0:42:71:2e:fa:5e:69:0d:
df:e8:09:f2:6d:2c:53:db:7e:64:5d:d4:b6:8c:be:
e4:b3:8a:89:22:cb:db:56:b5:4a:60:f8:5b:ff:8a:
6d:86:7a:16:75:ce:93:49:23:57:b0:91:db:2e:27:
cb:fe:57:da:ac:76:f6:60:c1:29:79:f9:f7:3a:3e:
9a:8c:5e:85:9f:36:4d:d0:f7:92:22:ca:23:8d:71:
e0:3b:12:19:3b:9e:18:2f:ea:1e:41:80:d6:e8:17:
33:cd:8f:b7:43:27:6d:57:43:25:85:14:34:65:80:
21:d2:d2:35:a5:c5:87:a0:2d:d7:20:36:30:f7:8c:
06:58:dd:5b:f9:8a:f7:bd:9b:71:a5:e3:e9:fd:1d:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:AD:1E:71:48:E8:27:87:4B:46:E9:00:A8:1D:E3:E8:83:DE:4B
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/e9WtHnFI6CeHS0bpAKgd4-iD3ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.190.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b2:1e:31:8b:70:cb:20:1f:7f:48:17:86:61:b9:2e:e3:91:
ef:9c:38:93:20:e9:d1:15:fe:d0:d5:5f:b1:27:ee:53:4e:7e:
bb:91:b4:26:0c:64:e0:7f:bb:dc:5a:57:63:37:67:92:a4:2d:
37:30:69:2d:dc:91:ac:e5:fd:9c:98:f0:f6:19:52:da:20:64:
60:4c:f2:80:92:4d:6b:a5:b1:36:1f:77:e9:98:f3:a4:fc:0f:
87:d8:14:b6:ed:3e:90:43:1d:b9:d6:7e:af:2a:bb:4c:8e:ac:
0b:0d:ce:0f:18:09:f1:0a:e7:1f:e9:e1:30:97:8b:4d:ab:01:
d5:bb:87:82:73:5a:f1:8b:e4:a6:e0:ca:40:28:86:cf:3f:33:
ad:ff:61:a5:07:1c:a8:38:13:58:b1:51:fd:63:5b:11:97:08:
6a:4b:35:18:25:a8:5e:93:c7:aa:83:0b:9d:33:f6:87:5f:ac:
70:2a:23:9c:45:c3:bf:51:c6:8f:21:35:37:31:84:26:0a:ec:
6a:0f:82:10:e5:4e:ba:cf:0a:01:a7:e3:ac:0a:a3:7d:5d:c9:
60:21:5b:98:bd:f0:93:60:82:fd:d7:90:56:9b:7a:b7:17:5c:
ad:2c:bc:75:fc:7e:06:9a:2a:3c:93:7a:fb:23:ae:73:60:2e:
20:8b:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:59 2024 by rpki-client on console-fra.rpki-client.org