Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/sfsq6vvBRTyvuUUctqgomNVBNqM.roa
File: sfsq6vvBRTyvuUUctqgomNVBNqM.roa (raw, json)
Hash identifier: 0nVD4p1aNKUWCnN75WD4OzRsf6wSrsgNJSAYajUNtmM=
Subject key identifier: B1:FB:2A:EA:FB:C1:45:3C:AF:B9:45:1C:B6:A8:28:98:D5:41:36:A3
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 3D8A7316
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/sfsq6vvBRTyvuUUctqgomNVBNqM.roa
Signing time: Sat 01 Jan 2022 11:57:44 +0000
ROA not before: Sat 01 Jan 2022 11:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42873
IP address blocks: 192.129.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032483606 (0x3d8a7316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jan 1 11:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1fb2aeafbc1453cafb9451cb6a82898d54136a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:74:8c:84:27:3f:8e:fb:ce:5e:e6:4a:9b:
57:dd:d0:4b:ec:bb:2f:2d:80:07:e0:0c:50:8c:00:
31:55:60:0f:c4:67:bd:dc:83:51:02:e1:e0:31:c1:
a8:76:b5:0f:41:d4:08:d4:a7:c8:47:d1:70:17:0a:
0f:58:54:38:66:72:f9:0e:dc:a5:54:5e:e2:36:18:
70:19:7e:a6:e0:eb:00:cd:08:49:dc:04:63:03:99:
1e:a0:26:4c:da:9f:b0:b9:d6:9b:d4:74:ad:a8:77:
a1:b1:5e:b2:10:c7:54:f9:eb:5f:11:b9:cd:47:fc:
21:14:2a:48:43:f7:95:22:3c:91:9c:23:69:c3:65:
f8:c0:78:86:7f:0c:7e:73:64:62:97:44:b3:ab:f9:
34:b5:e2:d4:78:b6:63:62:07:fc:9d:d2:72:b1:df:
b8:bc:ef:00:de:e0:ce:fe:b2:33:40:da:a4:ca:a2:
dc:7a:be:97:43:07:b4:42:29:54:75:7c:df:5d:bd:
d8:16:25:d9:07:64:02:67:b8:0b:75:67:de:d3:60:
88:d2:a6:b3:64:11:93:f4:9d:9f:dd:fb:49:25:99:
ff:3d:ec:5f:86:f9:cf:4d:f7:92:85:51:4a:af:0b:
22:9d:7f:d7:43:eb:02:ad:ad:e2:04:f3:78:7e:cf:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:2A:EA:FB:C1:45:3C:AF:B9:45:1C:B6:A8:28:98:D5:41:36:A3
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/sfsq6vvBRTyvuUUctqgomNVBNqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.129.30.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d1:02:3a:89:f4:9c:81:04:b8:0d:63:2d:ab:43:2a:6b:fa:
2a:5c:d7:5b:84:f1:b6:bf:5e:06:52:e0:a9:b4:12:25:e9:ac:
bd:17:35:f2:5f:14:6d:07:0b:23:e7:19:e5:eb:2a:e3:03:a8:
f9:93:a3:07:aa:db:f8:6c:ca:fd:28:93:b3:d1:33:28:82:36:
21:65:bb:42:91:2a:eb:50:c3:d9:9c:6a:0b:ed:99:f1:0e:0b:
a9:7a:29:d6:6e:28:4b:14:2c:70:09:8e:d5:61:0b:4f:73:da:
d4:17:1e:e9:56:2e:52:bf:7b:e3:7a:c7:07:cf:42:0a:d0:9e:
1d:c4:04:f1:7e:10:d6:34:8b:c7:00:7c:83:7d:bf:4d:b0:57:
4c:ba:4e:49:a3:83:ad:a1:93:f4:2f:ab:0a:a9:f2:f2:cc:de:
38:fb:cc:63:2d:1c:97:46:65:47:25:e6:52:14:fa:39:43:8b:
2a:68:99:65:1b:6e:da:5a:a2:e3:e6:ec:02:5a:39:f7:de:2f:
42:80:34:a9:44:69:4e:36:ed:a7:76:a8:fe:b6:50:cc:e4:11:
10:0c:5e:4e:38:cc:4f:b7:16:1f:f7:19:f1:64:fe:67:36:36:
5e:51:9a:30:fc:fd:b4:c3:70:45:00:64:29:7b:8a:be:0f:21:
58:77:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:55 2024 by rpki-client on console-fra.rpki-client.org