Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/RQbXGYT-DvSG9BoxnptBlPHGxig.roa
File: RQbXGYT-DvSG9BoxnptBlPHGxig.roa (raw, json)
Hash identifier: 0RU40f0HHVF8YLeqGVOC7pk6DWQDAEFZn96tskRkSQs=
Subject key identifier: 45:06:D7:19:84:FE:0E:F4:86:F4:1A:31:9E:9B:41:94:F1:C6:C6:28
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 01B349
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/RQbXGYT-DvSG9BoxnptBlPHGxig.roa
Signing time: Thu 21 Apr 2022 09:28:28 +0000
ROA not before: Thu 21 Apr 2022 09:28:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44211
IP address blocks: 195.93.136.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111433 (0x1b349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Apr 21 09:28:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4506d71984fe0ef486f41a319e9b4194f1c6c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:d8:75:37:11:34:f6:12:88:47:64:5a:b3:
c1:5f:ca:81:e4:36:a2:80:5d:2b:f3:85:87:3e:ab:
1b:f8:2f:c5:d7:d2:be:4b:0d:8e:38:a5:45:5a:66:
3e:3d:5f:0e:40:41:1b:8b:be:ab:89:8c:a9:39:5a:
18:95:25:ca:5a:e3:09:45:f4:43:de:ac:47:4c:25:
15:62:d7:08:ad:c4:ee:a8:46:3e:89:88:25:94:31:
21:e8:be:c8:e1:1d:0b:ab:51:04:ea:3b:1a:9e:df:
4d:d0:ed:87:5d:af:0b:66:0c:4c:7c:4c:df:c4:93:
60:44:13:b5:73:27:fd:08:f3:34:89:88:73:8b:a8:
9f:9d:39:0a:99:ea:f5:0e:99:14:a3:ac:17:3d:bf:
4e:df:db:73:50:89:cd:78:93:09:28:43:a3:b2:09:
55:48:50:af:ff:3e:f4:15:f7:31:19:b4:0f:e2:44:
bf:6a:22:e6:34:59:48:9b:0a:cf:0a:36:d5:c4:ae:
9a:a3:b9:70:dc:86:ca:10:e2:dd:70:2b:4e:aa:49:
d0:2a:53:a8:65:dc:d0:e3:0c:1e:7b:f6:a7:4e:cd:
b9:0e:35:21:3f:bf:ae:96:dd:e4:f2:71:44:d1:69:
d9:4f:51:b8:da:2b:2e:9a:d4:7c:e8:67:21:9c:41:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:D7:19:84:FE:0E:F4:86:F4:1A:31:9E:9B:41:94:F1:C6:C6:28
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/RQbXGYT-DvSG9BoxnptBlPHGxig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ab:54:7d:cb:5d:88:3b:1d:d3:9a:3a:c4:3f:63:f1:d8:86:
ac:cd:60:bf:85:1a:79:8b:e1:78:ab:5c:33:60:f9:d7:1f:d0:
28:d8:82:81:89:a5:0d:36:b3:e8:78:38:6c:ce:4e:41:13:0e:
ea:d6:61:2c:6b:c4:9c:1d:58:47:7d:b7:46:5d:80:67:20:06:
f0:e2:3b:34:64:03:be:6c:5c:6a:6d:7b:24:94:b7:b3:01:18:
67:77:ec:49:e0:ae:35:a6:85:53:b1:6d:c7:03:48:b5:e0:35:
1a:08:5e:d8:7f:27:d2:7a:e1:db:11:45:56:8b:a1:5f:66:64:
64:ca:0e:01:52:5f:24:f6:1c:f7:c0:2c:53:b3:7f:50:ec:dd:
fd:15:2d:78:a3:df:12:fa:bf:ec:39:be:11:c6:7f:23:4c:3a:
f8:22:f1:2d:83:7e:e2:20:8d:59:81:0d:74:a6:4e:0b:cb:21:
27:99:63:96:9a:39:2e:9e:48:c6:3b:0b:d9:67:37:3f:8f:d5:
b7:4e:58:19:44:82:ba:eb:8e:c6:1b:3c:0e:bb:03:7b:f6:e2:
e5:4e:04:90:48:1a:a7:11:a5:51:52:94:8f:73:c0:09:04:00:
1d:74:f0:0c:fe:2c:2d:d0:0d:eb:08:03:c7:bf:5d:cf:6e:90:
1a:ce:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:16 2024 by rpki-client on console-fra.rpki-client.org