Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/1hIerIIyHYssG2cLcVh10L9etZg.roa
File: 1hIerIIyHYssG2cLcVh10L9etZg.roa (raw, json)
Hash identifier: AtfXtTrWSckJQ+grVqQbvv93OsKUAwCgk//mV7k8aZ4=
Subject key identifier: D6:12:1E:AC:82:32:1D:8B:2C:1B:67:0B:71:58:75:D0:BF:5E:B5:98
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 04FBC4FE
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/1hIerIIyHYssG2cLcVh10L9etZg.roa
Signing time: Sat 01 Jan 2022 13:00:49 +0000
ROA not before: Sat 01 Jan 2022 13:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41400
IP address blocks: 193.93.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83608830 (0x4fbc4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Jan 1 13:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6121eac82321d8b2c1b670b715875d0bf5eb598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:89:c9:97:a5:93:be:96:93:bb:06:c2:04:
8f:f4:e1:c0:9b:d3:18:ad:71:da:ab:77:fa:d4:0f:
4f:16:5b:21:5d:93:79:30:31:72:96:5c:bb:e5:42:
7a:fc:9a:b4:85:97:87:b2:35:d5:80:20:1f:18:2f:
0a:f7:5d:d0:e6:8b:c8:f1:98:ce:e6:3b:00:f5:09:
9b:1a:10:16:4f:e1:6d:dd:72:5c:03:06:34:b1:ff:
7b:a0:16:99:e0:89:4e:5f:44:5f:44:cb:2b:9a:67:
34:21:1c:ca:8b:5b:c1:da:4e:5c:e0:3c:c0:81:04:
16:ad:47:ca:7c:d1:1a:7e:fc:9f:42:09:be:3d:d1:
f0:d2:1d:d1:9c:84:9b:39:a9:e7:d0:7b:aa:66:d1:
44:a1:29:65:cb:ed:cc:cb:f7:0e:29:e4:dd:dd:b1:
bf:21:d0:4d:27:95:61:6f:09:1c:85:2e:43:3e:f5:
43:78:5d:d6:d0:80:23:86:f0:70:c2:f6:46:71:5e:
a6:30:a3:8f:72:17:b2:7f:ce:8b:0a:9b:6a:d8:64:
14:f0:3c:03:b0:5f:35:f0:05:d7:4a:b1:c9:5f:00:
ee:90:95:c1:ad:35:7e:72:59:33:46:c0:ba:44:08:
e9:b8:f5:6f:2d:22:ea:bc:75:67:c7:48:a8:86:67:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:12:1E:AC:82:32:1D:8B:2C:1B:67:0B:71:58:75:D0:BF:5E:B5:98
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/1hIerIIyHYssG2cLcVh10L9etZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.36.0/22
Signature Algorithm: sha256WithRSAEncryption
47:77:1d:f4:5f:50:d8:16:00:ef:27:94:74:af:a7:ae:21:a0:
4e:1c:f6:a9:b0:f2:73:93:dc:6b:f0:63:29:fa:bd:f0:cf:83:
66:5b:1d:8c:9d:ca:f5:0e:86:a1:cc:44:05:91:f1:7b:7d:0a:
1b:4c:84:31:89:dc:ff:01:ee:b5:32:eb:af:0f:39:19:43:ca:
23:52:8f:01:ca:e1:f4:43:19:ea:84:67:14:fe:bf:bf:90:8b:
a3:4c:1a:4d:05:df:5c:7d:c6:2f:3e:db:14:79:98:4c:19:2c:
cf:16:4f:8a:a0:f2:9a:84:f7:e1:ed:ea:43:b5:c1:53:9f:c2:
e8:28:69:58:0b:fa:13:d7:cd:c2:0c:10:b8:ca:dd:2d:40:40:
90:59:60:52:b9:3e:a3:c2:4c:08:7b:9b:77:ee:67:a0:dc:62:
1d:2a:a9:7c:c7:95:fb:24:f8:c8:43:32:e8:81:08:33:4e:86:
68:2b:c2:f5:52:68:0a:44:25:88:87:f0:2d:f6:90:e7:1f:c1:
13:46:eb:fa:3b:34:68:7a:0f:bd:f0:50:fb:e0:35:df:e9:0b:
06:06:60:3b:03:72:4c:7c:d7:8f:96:a8:0e:04:cd:a3:42:6e:
e1:c7:5f:4b:e3:70:97:17:b8:e6:3b:e1:05:8a:cb:08:23:50:
52:67:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:06 2024 by rpki-client on console-ams.rpki-client.org