Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/0bpcow5CT7KKaZ6sBwZiLM_oszw.roa
File: 0bpcow5CT7KKaZ6sBwZiLM_oszw.roa (raw, json)
Hash identifier: BuPvS+MDilmKXibCHnsg30xTojSG0Yu+n7uYOnDOQyQ=
Subject key identifier: D1:BA:5C:A3:0E:42:4F:B2:8A:69:9E:AC:07:06:62:2C:CF:E8:B3:3C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 0183604F122B62F64DB70F87D6517EF129B5
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/0bpcow5CT7KKaZ6sBwZiLM_oszw.roa
Signing time: Wed 21 Sep 2022 13:48:58 +0000
ROA not before: Wed 21 Sep 2022 13:48:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2286
IP address blocks: 193.251.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:4f:12:2b:62:f6:4d:b7:0f:87:d6:51:7e:f1:29:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Sep 21 13:48:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1ba5ca30e424fb28a699eac0706622ccfe8b33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:f4:32:5d:65:07:06:f3:b3:2b:b0:59:ae:
e5:e0:be:38:85:fb:8a:e3:a0:f1:cf:9d:b6:27:a1:
68:c3:e7:03:9f:2d:c0:8c:b5:be:a3:96:2e:ec:68:
32:80:65:45:22:9c:57:b4:20:d4:77:69:2e:a8:31:
62:56:3d:81:9a:d3:50:80:38:9d:0a:bf:fa:15:3e:
43:f9:30:ba:78:0a:2f:e7:ce:e7:4c:5e:b1:94:e6:
4f:ab:37:8b:38:81:61:40:96:01:a5:0f:1d:6f:bb:
08:07:bc:af:e9:69:b9:a5:30:ca:bc:3b:be:ba:ea:
58:1b:1a:51:96:0f:a1:8f:bb:18:bb:c3:fa:59:76:
af:12:bb:aa:8e:fc:e0:ca:b9:71:73:ee:db:60:65:
07:e7:41:64:f6:58:e0:a6:df:53:cb:63:d3:eb:3e:
ab:28:c9:d3:21:be:74:12:cd:ab:63:cb:35:40:d7:
b0:17:c9:f1:ad:49:68:e9:39:8e:e8:56:5f:dc:1d:
ce:88:8f:ae:24:e1:5f:2f:b2:95:00:e9:5f:14:6f:
71:c4:bb:bc:63:b6:6a:39:b6:61:e0:54:e6:94:69:
65:4b:31:2b:23:65:38:95:19:06:96:82:29:31:8e:
24:58:3b:7a:16:26:d7:0a:98:ca:17:26:9d:f6:a8:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BA:5C:A3:0E:42:4F:B2:8A:69:9E:AC:07:06:62:2C:CF:E8:B3:3C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/0bpcow5CT7KKaZ6sBwZiLM_oszw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.224.0/22
Signature Algorithm: sha256WithRSAEncryption
91:94:c9:91:d1:89:92:c3:f7:e6:25:d4:19:52:8f:31:9f:e2:
54:b6:63:83:26:b2:28:84:42:34:6c:58:3f:2b:38:7f:d1:67:
c2:85:a4:34:12:15:1b:e3:e1:05:5f:93:3c:e5:78:01:cf:22:
7e:92:22:35:55:55:d2:db:1a:0a:9d:2b:8c:fd:ee:84:1f:3f:
4c:d2:af:ec:b6:c1:04:58:0e:b0:2a:11:10:63:2d:58:7c:78:
0e:aa:48:e0:d9:1d:ff:00:00:06:a2:87:e5:78:c1:bf:00:65:
97:fb:63:aa:1a:b6:eb:fa:0f:f4:b9:73:f4:4e:d3:32:1a:51:
34:14:5e:3f:40:13:17:b1:06:b7:51:2e:f8:ea:08:f1:96:30:
1a:21:23:88:60:c9:88:ed:59:79:71:ed:71:10:25:31:08:67:
cc:30:84:47:35:5b:33:31:59:e4:89:c7:4e:e2:51:6f:5e:76:
0e:ce:9b:84:03:af:70:29:a6:3c:52:f6:d1:95:fc:ba:1f:b3:
6c:53:ae:56:2b:4a:fc:e7:c3:56:67:6a:34:db:6e:13:f9:0f:
17:4a:0e:a1:83:48:f1:6f:c7:8b:8a:a4:15:f7:c7:84:f0:25:
61:34:9f:09:fa:db:05:e5:05:6c:da:c1:43:0b:8c:d4:1f:9c:
c9:1f:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org