Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/kwbBuS5iUSyYFq3kAj70OCGxsPI.roa
File: kwbBuS5iUSyYFq3kAj70OCGxsPI.roa (raw, json)
Hash identifier: VFOG3QzDp5Uk4jY7IDOEM2jgSOr6ImjUK6oV2weVWI4=
Subject key identifier: 93:06:C1:B9:2E:62:51:2C:98:16:AD:E4:02:3E:F4:38:21:B1:B0:F2
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F924815
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/kwbBuS5iUSyYFq3kAj70OCGxsPI.roa
Signing time: Mon 03 Jan 2022 18:44:20 +0000
ROA not before: Mon 03 Jan 2022 18:44:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42135
IP address blocks: 193.232.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261244949 (0xf924815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 3 18:44:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9306c1b92e62512c9816ade4023ef43821b1b0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:6d:46:4f:bb:1f:b6:94:14:b1:71:92:e9:
ca:c9:7d:03:87:7d:d9:07:ab:c5:61:ed:30:f3:bd:
ba:f9:af:60:5b:47:15:23:05:48:dc:0e:24:e1:12:
78:50:2f:c4:99:eb:fd:1b:bb:bf:f8:6e:c4:ac:f5:
ce:28:2f:82:1e:c2:24:88:71:cb:87:6a:1a:f1:8a:
f1:45:c5:8a:54:6d:bd:2a:e4:c2:fc:cc:bb:32:39:
4d:bc:d3:82:0e:59:0c:27:1b:66:52:62:2d:b8:93:
8d:7b:77:4d:d4:48:7e:5c:cb:3d:2a:16:52:21:85:
85:71:dd:d5:f9:4f:b0:ef:56:4c:50:18:9a:08:2a:
50:24:1d:21:f2:94:83:cb:7f:9f:f8:fb:c9:1e:d3:
18:07:7d:28:1f:bc:a2:de:65:f5:1e:7f:83:53:a9:
22:01:1d:e5:ca:ce:7e:cc:39:50:74:f9:14:08:01:
18:75:33:e2:fd:f3:cc:34:9e:09:40:b6:8e:85:d6:
de:fa:db:3c:c0:8b:12:42:7f:62:cb:fc:86:a2:20:
be:01:56:37:24:99:77:19:7f:3f:4d:24:98:65:dd:
aa:2e:5d:70:99:3c:38:08:32:b5:b5:b6:51:f9:cb:
c0:55:ca:de:7d:11:55:f4:9b:17:46:be:b4:81:f6:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:C1:B9:2E:62:51:2C:98:16:AD:E4:02:3E:F4:38:21:B1:B0:F2
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/kwbBuS5iUSyYFq3kAj70OCGxsPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f9:a7:b3:32:64:d1:e2:ed:33:e6:38:dd:04:38:02:35:f9:
34:24:d1:8b:7c:c0:36:09:64:57:f7:8d:a1:5a:26:55:77:61:
45:17:8b:01:7a:cf:ea:55:e2:94:4b:a3:2f:d4:d1:67:cc:59:
11:8d:dc:6c:27:60:60:04:0f:65:8e:1d:97:32:f4:6a:cf:61:
61:24:24:20:e9:4c:87:c2:ee:b8:ae:02:fa:08:3f:51:a5:eb:
a0:59:b3:f8:a6:73:39:e6:75:05:6b:50:5c:9a:8c:4d:fa:85:
15:c0:f3:c8:b8:7c:7d:86:c3:7f:90:4d:b0:bb:14:8f:a6:ca:
dd:d5:91:67:97:ed:21:99:b3:60:e8:cd:f4:5a:64:8a:20:ca:
7f:98:82:67:a6:a9:eb:f6:b9:1c:34:73:2c:98:82:4c:6a:0d:
49:23:aa:5b:d5:a6:25:69:71:fe:3a:e5:55:63:69:db:e2:a9:
33:ac:60:76:1d:02:0f:37:b8:20:e0:a7:4b:e9:82:fe:cf:c1:
91:1a:7e:c1:1b:57:00:a9:88:12:13:65:53:4f:f5:bc:29:b3:
7b:35:bc:45:4e:4b:01:bb:5f:9e:ac:63:77:d6:68:72:f7:6d:
39:fa:65:04:3a:78:5b:a7:e6:67:62:32:dd:a8:22:d7:80:95:
01:b1:a4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org