Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dLKGbq1fRue81VjiVK2XPsZy0uw.roa
File: dLKGbq1fRue81VjiVK2XPsZy0uw.roa (raw, json)
Hash identifier: 1MOMA/NBb2C34YzmvVh8FGc6tPJOdlsQHAIvaAWTVUc=
Subject key identifier: 74:B2:86:6E:AD:5F:46:E7:BC:D5:58:E2:54:AD:97:3E:C6:72:D2:EC
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 10949337
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dLKGbq1fRue81VjiVK2XPsZy0uw.roa
Signing time: Fri 22 Apr 2022 05:26:15 +0000
ROA not before: Fri 22 Apr 2022 05:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50214
IP address blocks: 193.232.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278172471 (0x10949337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Apr 22 05:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74b2866ead5f46e7bcd558e254ad973ec672d2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:54:cb:69:88:88:bf:13:fa:6b:71:21:a5:
34:87:db:73:ce:55:24:e0:c9:86:25:ca:85:22:1c:
22:e4:34:de:b4:37:28:cb:59:5b:27:1a:f4:c4:ab:
91:19:24:f5:d8:c3:1a:9d:e2:32:98:14:42:d5:ab:
79:77:47:c7:7f:d7:00:3d:64:59:28:9b:16:65:1f:
ae:03:21:67:fb:94:87:b7:ae:d3:9f:03:50:fc:19:
37:02:03:a9:94:cc:0c:3a:3a:d7:44:a1:9e:40:94:
de:5b:cf:c3:f1:26:d0:2b:65:cd:38:6d:a4:9a:a2:
8c:34:51:60:f2:2f:15:8a:ff:ab:23:a5:81:8d:f9:
c4:41:2d:20:ab:64:e6:a4:65:02:e6:ff:77:f1:bd:
48:13:a2:15:5c:69:56:ea:24:24:8a:ad:90:61:fd:
8d:eb:4e:2f:0d:54:8b:bf:f3:09:6f:fa:ad:2e:19:
f0:3d:35:f2:9b:43:14:84:d9:26:c2:81:2e:33:e0:
93:f3:37:fd:8d:6e:01:6b:4d:9f:e2:44:36:2b:4d:
7e:9b:36:20:3a:f9:1d:b8:4b:f9:a6:7e:d5:19:6a:
30:f7:28:1d:4f:0d:31:91:3e:47:a8:81:05:8f:6a:
91:33:90:fc:ea:02:47:56:76:3d:d8:06:bc:98:7c:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:86:6E:AD:5F:46:E7:BC:D5:58:E2:54:AD:97:3E:C6:72:D2:EC
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dLKGbq1fRue81VjiVK2XPsZy0uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f1:2a:dd:7b:ed:32:77:59:1a:ee:96:ed:31:84:a3:f5:c7:
d1:50:8d:65:57:07:9e:09:70:87:06:49:79:63:7f:db:92:e8:
28:d0:13:6a:01:20:43:81:f1:05:c7:37:8c:cd:fa:1a:9c:b6:
39:52:81:ce:29:4c:0c:7d:39:1a:8a:d0:e6:f0:21:33:a5:85:
36:fa:12:f3:17:71:9b:cc:25:a6:6f:53:9a:88:ce:27:c4:22:
4b:2c:5f:d9:1c:4b:82:e8:d7:c2:d7:9d:66:15:6b:d4:27:4a:
1c:b4:46:8e:9d:1e:2c:11:13:24:f5:01:0a:f4:81:f2:a5:5e:
f2:d6:b0:d7:a7:da:c7:44:cd:af:6f:b0:0f:61:01:97:7c:d4:
10:19:e6:b2:3d:f9:38:cf:80:38:df:93:67:c6:5a:b7:2c:c4:
87:a2:60:8b:b2:81:61:b9:c5:08:17:60:95:3e:19:94:6c:34:
05:c2:21:63:cf:1e:98:11:33:18:78:11:b9:8d:48:76:62:e1:
fa:a1:1a:f5:e7:d8:97:8b:30:33:53:9e:c2:1f:41:09:e2:10:
1d:b3:19:67:e4:31:91:ca:a3:64:f1:bd:01:77:0a:dc:a5:49:
5a:9a:9d:9c:83:ba:84:6a:61:76:97:d6:59:9c:7e:b7:37:58:
db:13:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org