Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ipxFaUBFIKv9R04dZKMhN-d4MPU.roa
File: ipxFaUBFIKv9R04dZKMhN-d4MPU.roa (raw, json)
Hash identifier: YINo4q+UEWqi0hhcH2bZlUupRKg0vYqPzst7jDWdYkk=
Subject key identifier: 8A:9C:45:69:40:45:20:AB:FD:47:4E:1D:64:A3:21:37:E7:78:30:F5
Certificate issuer: /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial: 105E8FCE
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ipxFaUBFIKv9R04dZKMhN-d4MPU.roa
Signing time: Sat 01 Jan 2022 14:02:41 +0000
ROA not before: Sat 01 Jan 2022 14:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 193.30.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274632654 (0x105e8fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
Validity
Not Before: Jan 1 14:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a9c4569404520abfd474e1d64a32137e77830f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:6a:88:e0:0c:a6:fc:be:e9:e9:5b:ba:b4:
ee:00:21:fe:62:ef:c5:e3:7a:d2:8b:ba:0d:1d:3b:
62:5a:a2:54:14:a3:a2:56:e1:8e:5e:e1:f9:f1:0b:
49:5a:a4:1f:9f:51:b7:48:ec:9f:8a:76:8d:b6:7b:
e4:ab:1b:e2:ae:12:23:fb:09:46:80:1b:0f:6a:ee:
52:76:bf:9a:49:42:a0:06:95:71:9f:3d:d1:df:93:
a0:16:c1:1c:86:ee:27:29:ab:91:da:32:ee:49:f6:
ef:e0:e3:3f:0c:c0:ec:fd:ae:57:86:67:66:dd:82:
d5:dd:17:7d:e9:63:34:0d:45:51:05:e6:52:24:49:
ef:21:16:4e:2f:66:b1:b1:8d:5f:91:d7:26:f0:f0:
ab:8a:27:23:40:79:25:5e:d9:79:71:fb:2b:d9:a1:
6c:64:60:d3:3c:f8:09:c5:01:a7:84:45:f3:95:11:
aa:4f:01:33:fb:5d:dc:74:99:1f:94:4c:7e:e3:a6:
73:8b:75:aa:c2:cf:1e:92:c6:ed:73:b3:06:b7:57:
37:d4:15:45:2e:fb:b3:11:1b:23:8a:cf:a3:db:54:
aa:b2:0e:63:f2:b7:37:a1:ac:aa:d7:7a:95:58:6e:
35:f7:18:57:c3:1b:bf:38:1c:93:95:d7:3a:04:6c:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:45:69:40:45:20:AB:FD:47:4E:1D:64:A3:21:37:E7:78:30:F5
X509v3 Authority Key Identifier:
keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ipxFaUBFIKv9R04dZKMhN-d4MPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:dc:26:b4:2e:9b:82:4f:47:22:fc:33:d4:cc:ff:ae:3c:7c:
3d:fa:47:95:16:f5:bd:a3:6f:31:9d:31:44:79:2f:64:6c:89:
92:c9:74:b3:83:41:44:22:49:b6:b1:f2:93:f2:c6:6a:c1:21:
65:b8:f0:11:f4:4b:84:80:17:61:f2:40:a7:c4:cc:e4:d4:dc:
ad:7f:44:d7:81:ba:0c:c1:68:1b:56:e2:a5:c5:9a:73:2d:d8:
df:d6:a8:d8:91:d2:d4:a3:ef:d1:cf:b8:12:54:0e:2e:7e:dc:
a1:e9:d2:2b:a9:e9:ce:02:1b:b1:42:d1:18:3b:34:ac:e7:66:
5d:4d:1e:66:61:16:a5:38:75:f7:59:10:2d:00:6b:56:fc:1b:
8a:7b:2f:9e:ac:67:ca:17:d2:d0:27:8f:9c:d9:93:5a:44:fe:
6d:5d:c7:14:e3:dc:16:86:a3:28:7e:9c:3d:b1:53:fc:ce:c0:
11:25:bb:14:59:af:67:84:36:fc:74:6f:1d:0e:9c:dc:5f:50:
c9:11:52:30:16:2e:e2:3c:13:a4:bf:60:af:df:a6:87:e7:ea:
e2:1e:af:46:67:c1:20:d6:74:fd:fa:a9:08:3e:81:43:87:7a:
7a:c2:42:74:90:c4:97:32:83:9a:3c:2a:e6:35:f1:d5:06:94:
32:b1:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org