Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-kuM4rJ7LZuSzNzAbAjTM7ZGbpM.roa
File: 1-kuM4rJ7LZuSzNzAbAjTM7ZGbpM.roa (raw, json)
Hash identifier: Mw3xZ+K5AJfoPpDl0VXK8Rz296EI/DYJ1TYfwxRxEbA=
Subject key identifier: FA:4B:8C:E2:B2:7B:2D:9B:92:CC:DC:C0:6C:08:D3:33:B6:46:6E:93
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 113ACDE0
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-kuM4rJ7LZuSzNzAbAjTM7ZGbpM.roa
Signing time: Thu 30 Jun 2022 11:20:00 +0000
ROA not before: Thu 30 Jun 2022 11:20:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44704
IP address blocks: 193.232.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289066464 (0x113acde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jun 30 11:20:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa4b8ce2b27b2d9b92ccdcc06c08d333b6466e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:8d:8a:82:e3:13:87:bd:3e:69:f8:af:96:
1b:a3:3b:54:5c:e3:7f:85:8d:64:2b:c8:50:f2:ff:
82:5a:42:48:79:01:f9:46:cb:f9:ba:d8:fc:2a:ff:
69:9c:25:cd:a1:6b:3f:c1:0a:27:ef:6e:d9:8d:51:
e0:cf:24:e3:f6:01:6b:b0:c2:86:88:fd:b4:ef:ff:
ec:46:8e:21:af:47:2b:5b:9f:d9:1f:b8:97:24:42:
1f:c0:e2:9d:aa:57:0a:5d:8e:51:a9:49:e7:54:5b:
fb:17:fb:29:54:e9:7d:3f:bb:52:96:e4:6f:1a:49:
2a:9c:47:bc:01:1f:3c:d4:25:c3:a8:f0:1c:3a:f5:
75:58:6a:20:56:d5:b2:93:42:cc:74:48:e7:82:d5:
a7:48:da:01:db:33:dd:cd:8a:91:2b:4c:ab:58:d4:
5a:a0:23:a2:ad:e9:6c:21:d9:27:e6:ba:8c:60:09:
28:5b:68:70:b4:94:18:32:b8:21:d3:ec:d5:7f:d5:
de:fd:b3:75:cd:bf:c7:fb:7d:32:2a:0a:31:78:98:
5d:72:c7:aa:b0:b9:de:fd:09:75:9c:ae:d3:af:66:
7a:de:4d:c2:0a:40:19:f8:5f:08:36:a7:0d:65:7a:
21:4c:35:9c:2f:c5:f1:fc:49:c6:27:22:3b:96:c6:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:8C:E2:B2:7B:2D:9B:92:CC:DC:C0:6C:08:D3:33:B6:46:6E:93
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-kuM4rJ7LZuSzNzAbAjTM7ZGbpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:36:a0:19:2e:9d:39:81:c2:87:b8:26:06:c5:7c:c4:ea:6a:
cd:00:e6:4c:ba:87:50:fd:66:ae:08:45:e2:bc:dc:06:0c:d3:
b3:33:55:a2:76:1e:d7:2d:49:35:55:54:7b:f4:20:06:7c:35:
31:e2:0d:0c:2b:93:ea:36:d7:7b:ba:16:b1:1a:2d:6f:90:f0:
e6:d0:7c:37:9d:23:ff:8d:f7:51:69:0d:93:38:71:54:7e:a8:
5a:eb:5c:eb:e5:33:3a:ea:a0:45:de:3b:32:70:7d:57:c4:e6:
50:78:c6:45:67:74:16:2a:55:81:7a:97:c1:fe:66:cb:2a:86:
d5:a1:e4:d0:64:c2:3e:93:45:a0:ac:3a:9d:91:cd:72:59:ed:
1d:ee:f5:62:70:01:5a:51:3d:da:46:90:8f:f2:5b:b1:7d:ba:
70:14:e7:53:5f:9b:05:b9:e7:9d:53:12:ea:d4:05:aa:bb:e7:
a5:30:2d:08:34:db:f3:8b:87:5e:d9:b8:9f:d3:04:18:e4:49:
aa:53:b6:71:6a:e6:04:2b:f2:4e:b4:1d:86:3b:98:8b:c5:69:
35:0d:ed:ec:ac:e4:8e:a7:9e:9c:7d:8f:09:a7:a2:16:89:25:
2b:57:73:a2:36:2a:eb:2b:3b:18:43:df:ba:57:de:27:5c:dd:
0d:41:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org