Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/OEEbYlDsOaTFhCTO3BPoEEMBkfU.roa
File: OEEbYlDsOaTFhCTO3BPoEEMBkfU.roa (raw, json)
Hash identifier: 023mCK4QgOXzf3zGJGx95Ll9c6P7s/HmRZPZqltWw8A=
Subject key identifier: 38:41:1B:62:50:EC:39:A4:C5:84:24:CE:DC:13:E8:10:43:01:91:F5
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AF08631
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/OEEbYlDsOaTFhCTO3BPoEEMBkfU.roa
Signing time: Sat 01 Jan 2022 13:57:53 +0000
ROA not before: Sat 01 Jan 2022 13:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41097
IP address blocks: 193.192.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720406065 (0x2af08631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38411b6250ec39a4c58424cedc13e810430191f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:8c:d2:29:6a:8e:4d:59:4f:e4:54:ed:b4:
16:15:5c:11:01:63:f3:b7:09:a1:73:2d:81:0b:05:
bf:c5:69:3d:62:4b:ef:4d:80:e3:1a:b3:e9:d1:da:
c7:ad:82:0f:37:3c:d0:26:36:af:4c:98:21:e3:ab:
33:b8:e5:3d:2f:e8:cc:f8:41:6c:4f:b0:a9:ad:7c:
d3:7e:fa:c9:dc:e5:cc:3c:31:2c:d7:ac:fc:9b:48:
df:1c:02:71:ff:45:c6:ac:94:78:00:fb:89:9e:b4:
e9:eb:bc:48:16:07:6f:df:d6:ab:2c:c4:17:c9:0c:
2c:0b:a6:fa:18:27:40:dc:e4:2c:3d:b9:6c:8a:b5:
ff:1a:c3:98:c5:0a:41:6a:11:95:9d:65:11:16:14:
3f:86:de:97:ec:4c:f8:4c:5d:7b:bc:8e:c3:1a:49:
a7:83:19:17:86:94:5e:32:8f:80:e1:d1:dc:8f:01:
57:b6:48:28:b8:8d:c2:e2:f1:f4:cc:24:ee:40:f4:
cd:a5:65:4a:39:22:ae:31:72:9e:93:12:71:9e:02:
5f:cb:87:f2:a9:dd:3a:57:26:f8:b8:d5:14:02:bb:
0c:6c:a8:7d:57:75:bc:a4:fc:c6:8e:37:7c:4b:07:
99:4f:31:b8:7f:5c:86:b3:ba:c1:bc:5e:66:c4:65:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:1B:62:50:EC:39:A4:C5:84:24:CE:DC:13:E8:10:43:01:91:F5
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/OEEbYlDsOaTFhCTO3BPoEEMBkfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.191.0/24
Signature Algorithm: sha256WithRSAEncryption
53:60:34:55:b0:56:d9:19:c2:27:a6:85:72:24:6e:52:6e:b6:
42:97:34:92:e7:4d:29:5d:46:3b:77:25:e4:cb:bf:a0:46:92:
c5:cb:7c:4b:76:0c:5d:38:2e:dd:30:d1:4e:b5:3c:c5:be:9a:
c6:97:cd:af:cf:d4:48:31:0f:c4:f4:f1:ac:1b:7e:93:c8:f8:
60:0e:81:65:5e:43:b0:c4:e1:66:c8:ca:9e:71:55:e3:23:4b:
c3:c4:3d:67:8f:5c:9b:54:ec:6b:2a:c7:9d:d5:26:46:b1:18:
09:45:2e:e7:20:ca:f8:a2:3d:56:42:f1:07:e7:21:88:07:5e:
60:99:f2:1d:3c:2e:29:a0:0e:16:27:e8:4a:03:fb:d8:56:88:
e1:d4:5d:fa:59:8e:55:1c:10:45:47:16:9c:35:bc:2b:44:db:
44:d1:df:1d:b6:db:3e:71:9f:75:cf:ed:7a:94:43:c9:5f:6f:
a5:ec:cc:c4:51:56:4b:67:e4:2a:bb:63:02:fe:8f:80:5d:da:
c6:42:ad:71:f6:60:86:6c:9d:4d:be:31:14:0c:6e:29:83:e2:
86:0b:13:f9:cb:75:bd:ec:c4:85:18:ed:35:f4:65:79:cd:97:
31:eb:0d:68:dc:92:de:22:c2:00:25:52:88:c6:4e:4b:f4:33:
09:a9:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org