Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7MnV_DYjEFnNrNxYpLl25-mYUQI.roa
File: 7MnV_DYjEFnNrNxYpLl25-mYUQI.roa (raw, json)
Hash identifier: oz1tChVSBsuKuSXr9LXYRamsFqgtRoP8mmlwknrZRXc=
Subject key identifier: EC:C9:D5:FC:36:23:10:59:CD:AC:DC:58:A4:B9:76:E7:E9:98:51:02
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B0BA8BE
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7MnV_DYjEFnNrNxYpLl25-mYUQI.roa
Signing time: Sat 01 Jan 2022 13:58:06 +0000
ROA not before: Sat 01 Jan 2022 13:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202050
IP address blocks: 193.192.178.0/23 maxlen: 24
193.192.176.0/23 maxlen: 24
193.192.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722184382 (0x2b0ba8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecc9d5fc36231059cdacdc58a4b976e7e9985102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:51:5b:6e:aa:d1:cc:4c:1b:c5:74:61:0c:
d2:2d:3a:c2:bd:38:dc:28:10:75:21:07:ce:ec:e8:
e3:77:8f:55:7e:da:ce:49:9d:f3:9b:9f:31:74:3c:
da:17:ac:67:af:fd:a4:ae:c6:af:63:70:45:cd:b4:
83:00:a8:26:40:dc:62:68:33:ad:13:53:a5:67:19:
db:97:09:e5:3d:e3:8c:6a:5e:97:11:bd:72:b2:f3:
d6:51:d2:bf:e6:48:58:bd:e2:14:59:b8:62:07:1b:
f3:94:87:92:60:e5:2a:60:98:ff:26:0c:12:91:29:
b6:ec:85:a5:e4:1c:3e:d3:10:6e:70:ba:c0:80:b0:
cc:d6:95:16:5a:6d:b0:3a:c2:35:83:18:a1:4e:56:
b1:a7:04:f5:1c:97:0b:35:55:48:25:6c:b2:c3:76:
45:22:da:2f:d4:ac:8a:63:5d:52:81:91:24:25:ac:
b1:2d:02:bd:88:9e:8e:76:00:c3:ed:be:76:eb:ed:
c1:c3:c2:23:9c:fe:85:99:da:22:3c:e2:49:63:08:
5a:8f:9e:4a:cc:8a:ce:85:2c:29:cb:4b:2e:fd:de:
a7:cc:a3:83:f1:54:50:19:a0:5e:b1:48:8a:92:52:
2e:3a:a4:cf:74:42:b3:62:77:18:c7:91:d5:6f:f0:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:D5:FC:36:23:10:59:CD:AC:DC:58:A4:B9:76:E7:E9:98:51:02
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7MnV_DYjEFnNrNxYpLl25-mYUQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.176.0-193.192.180.255
Signature Algorithm: sha256WithRSAEncryption
76:1d:70:9a:9a:a1:1f:15:78:11:6c:12:74:80:0c:f2:5e:d8:
a0:5b:ee:35:e1:0e:e3:1d:73:cb:f5:ff:6d:76:93:46:cd:59:
ce:7d:dd:36:bb:11:da:7e:5f:4e:9b:1d:d1:4c:6c:0d:3d:7a:
49:76:f6:01:c9:48:54:2c:89:d6:f4:9a:d4:2b:f1:d9:a6:bb:
ac:0d:88:99:41:ae:9d:29:48:7d:ba:91:cb:d3:71:64:7f:9e:
be:3a:6c:25:fc:89:c7:d1:72:75:8e:ca:5d:17:ac:09:e1:17:
45:98:5c:4b:bc:d2:de:0b:88:5b:58:30:9d:88:86:e6:69:a8:
31:e0:ba:2f:96:25:cc:91:1e:24:db:ea:92:1b:02:ef:2d:06:
c8:fd:90:46:54:90:47:35:e2:c2:eb:b9:2e:8e:8e:04:41:3c:
fe:df:8b:43:49:8f:57:63:b6:c0:c4:cf:de:bb:f2:d2:30:a2:
3e:d8:bc:40:2b:6b:62:ed:b3:e3:4c:0d:5f:f2:6c:c9:d0:66:
51:05:1c:0a:55:37:10:72:04:3b:52:af:53:23:91:f1:72:87:
97:1a:ab:26:57:02:50:60:7a:81:53:78:05:36:5d:ce:f9:d2:
18:15:05:29:ac:17:69:82:aa:ae:6e:ff:a4:79:2a:ed:26:7c:
14:06:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org