Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/gYX997SfPmK2wOFTk7mhhSrsWEc.roa
File: gYX997SfPmK2wOFTk7mhhSrsWEc.roa (raw, json)
Hash identifier: zpAnVpvKdpTHj6+QPVcDVUeijih5x+h5E8ftc3WeHfA=
Subject key identifier: 81:85:FD:F7:B4:9F:3E:62:B6:C0:E1:53:93:B9:A1:85:2A:EC:58:47
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 0369A99B
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/gYX997SfPmK2wOFTk7mhhSrsWEc.roa
Signing time: Sat 01 Jan 2022 15:05:15 +0000
ROA not before: Sat 01 Jan 2022 15:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39326
IP address blocks: 193.151.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57256347 (0x369a99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jan 1 15:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8185fdf7b49f3e62b6c0e15393b9a1852aec5847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:26:d8:7b:3a:02:0d:45:a3:22:bf:a2:b3:
4c:b3:d0:2e:18:ad:96:4d:87:9b:26:43:72:b2:5b:
ae:fa:7f:24:43:95:83:aa:13:70:6b:1d:76:fd:39:
2e:ff:b2:08:a3:c1:3d:b9:1b:b8:11:c1:47:5b:09:
f4:b2:89:f1:74:4f:31:b8:a6:83:b9:4b:94:19:61:
c7:52:ca:f7:e6:d6:b4:33:e7:4b:ac:88:ae:c6:7b:
05:ff:00:66:8f:36:b4:ab:58:a0:29:39:e0:8f:db:
a3:cd:db:60:df:de:35:47:d5:20:e6:6c:71:c0:cf:
3b:86:62:43:9d:49:2a:fa:c8:93:b7:88:42:7b:94:
7e:1f:fb:95:58:0c:3d:7c:a3:ed:ba:08:ac:44:05:
17:42:7d:1c:43:d9:f7:ee:93:1e:b7:7a:e2:63:cf:
e2:48:e4:0e:ed:b9:94:9f:73:8b:2b:66:95:6c:b8:
ee:a1:86:6a:48:dc:8d:45:28:3d:0e:02:77:7e:99:
67:8f:7b:4f:17:b9:41:e7:14:cf:7d:ec:5f:a3:6d:
d3:67:d6:50:3d:df:6b:28:d7:6c:b1:71:ca:a5:a6:
af:18:44:aa:a0:f5:c0:80:56:ab:7d:6c:61:13:b3:
a5:a0:92:5f:59:5d:6f:8a:ec:8a:18:77:86:9b:6c:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:FD:F7:B4:9F:3E:62:B6:C0:E1:53:93:B9:A1:85:2A:EC:58:47
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/gYX997SfPmK2wOFTk7mhhSrsWEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b2:4d:11:ad:97:45:0e:6e:53:d5:64:b4:ce:04:06:ce:bd:
2a:83:96:23:08:3b:98:66:a5:ab:2d:f7:94:45:44:c9:70:8f:
da:33:a7:95:c2:31:3a:b7:69:44:c1:c2:3a:d5:ed:46:18:de:
98:9a:38:b2:75:c9:5b:ca:7b:07:1b:d1:34:e5:95:df:31:3a:
c2:5b:e3:f5:cd:55:35:7b:0d:2c:ac:b9:59:a7:e3:64:57:b3:
b6:33:c1:73:93:04:15:2a:1c:42:93:7b:8e:a4:36:01:5c:93:
91:d4:76:7b:3e:e5:68:d8:77:a7:67:31:51:6f:aa:cf:13:35:
a0:19:d0:17:eb:ab:ec:a4:8c:3f:2d:cc:55:3b:58:d8:33:30:
56:17:df:c4:9c:0f:05:5b:9e:8d:60:3d:27:d7:9b:8c:ac:1f:
20:08:94:e3:fb:f2:dc:31:d1:f6:74:e9:28:72:74:bc:0d:8c:
81:1c:82:63:7a:ce:1d:03:17:79:9d:36:db:6c:65:ea:88:14:
c3:ac:80:9e:d3:b5:39:f1:2b:39:81:95:3c:63:0b:2d:24:e2:
7b:b6:fe:04:dc:f1:d7:da:87:fe:91:af:15:f8:c2:ee:a6:0f:
20:18:98:fb:37:9a:e5:b6:24:03:08:b9:16:4f:b4:c0:55:15:
cb:dd:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org