Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/wU57LTaZCPBOaggEuHO773uXcL0.roa
File: wU57LTaZCPBOaggEuHO773uXcL0.roa (raw, json)
Hash identifier: 0ChE6ZI77YZ3veVnTUbDBPcE2rsOVtdQqh5snKEk4/c=
Subject key identifier: C1:4E:7B:2D:36:99:08:F0:4E:6A:08:04:B8:73:BB:EF:7B:97:70:BD
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 33C7CA
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/wU57LTaZCPBOaggEuHO773uXcL0.roa
Signing time: Thu 30 Jun 2022 19:19:58 +0000
ROA not before: Thu 30 Jun 2022 19:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50737
IP address blocks: 193.105.111.0/24 maxlen: 24
2a03:4740::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3393482 (0x33c7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jun 30 19:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c14e7b2d369908f04e6a0804b873bbef7b9770bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:c4:18:fa:ea:86:d6:0f:9a:dd:69:d0:a7:
10:f9:fc:84:98:f9:f0:09:cb:c5:34:d2:8a:92:d1:
d1:62:85:85:96:b3:a7:52:22:d1:fb:20:5d:e4:34:
f0:ab:c4:4e:4a:ec:f0:1a:1f:6b:ee:df:ca:8f:96:
f4:04:3f:73:c2:ae:62:49:29:a5:66:4c:11:a0:7d:
b2:45:52:70:5b:00:24:c8:4f:d1:44:35:6a:b9:a7:
a6:22:5d:24:93:d6:a1:ba:29:e2:03:c0:1d:d0:70:
ac:6f:d2:c5:d1:db:7b:8f:ee:88:c8:94:9b:6c:84:
f4:64:87:9a:d3:21:a0:c3:43:eb:91:95:54:ba:d1:
74:e0:23:fa:7e:c2:bd:4b:65:8f:04:5b:dd:5e:05:
4a:b6:a2:3d:fe:f5:0a:d1:2c:f6:9e:4e:be:d6:15:
0c:ce:9f:1c:39:fb:92:73:51:d5:6c:fa:06:8e:a0:
aa:0c:3b:97:34:bf:60:a2:91:b1:cc:98:82:84:19:
63:c3:ab:86:06:95:ff:82:87:81:aa:f9:40:a4:18:
8a:50:c9:15:5d:ad:da:5f:1d:92:db:a9:39:c5:91:
7d:dc:99:14:20:2f:42:dc:c0:97:8f:dc:b6:67:d8:
f5:cd:1e:c4:dd:03:1a:50:98:d3:5c:65:09:15:ca:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:7B:2D:36:99:08:F0:4E:6A:08:04:B8:73:BB:EF:7B:97:70:BD
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/wU57LTaZCPBOaggEuHO773uXcL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.111.0/24
IPv6:
2a03:4740::/32
Signature Algorithm: sha256WithRSAEncryption
b9:57:bd:1e:21:d4:4e:0c:cc:05:d6:3f:61:b4:c7:7f:bc:2a:
5b:00:ec:a9:23:82:15:10:8c:22:da:58:23:5f:ec:cc:60:9a:
4b:41:72:4d:99:3f:5b:1a:7b:8e:7d:02:2b:ea:94:eb:20:c4:
d3:ba:c9:7f:12:9e:0d:90:dc:0d:10:01:09:57:25:5b:0b:42:
6b:9a:bc:f7:61:f3:f1:39:fd:6f:f2:4c:72:5a:d6:6b:25:56:
7c:fd:d2:f1:3e:fc:4e:ac:7e:d8:c5:7c:75:5e:b0:87:52:4a:
82:af:e6:97:bc:d0:41:6b:16:bb:b4:1d:85:9c:56:41:79:ca:
50:11:88:76:49:f8:b0:0c:27:f0:9b:6b:b3:f9:df:b8:ef:ba:
74:1f:81:66:19:ad:9f:f9:c9:0a:25:1e:37:d4:75:77:0e:9f:
48:19:88:0a:2a:54:91:db:66:b5:95:82:98:7e:6c:c2:6f:b8:
a8:a7:b2:40:f6:3a:11:a5:a4:07:d8:11:b7:95:ff:92:d7:18:
63:e6:a2:63:9d:48:66:68:03:94:b0:d6:16:33:29:3f:12:38:
c6:e5:87:b7:5e:9a:56:90:d8:f2:0f:65:05:03:6a:25:66:d2:
57:e5:26:e9:2b:f4:a3:48:55:2b:df:ff:28:c7:8e:18:71:c1:
ff:e8:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:11 2024 by rpki-client on console-fra.rpki-client.org