Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/I0V-bT9mQs82VS7hbn_PyL3yREk.roa
File: I0V-bT9mQs82VS7hbn_PyL3yREk.roa (raw, json)
Hash identifier: GUWGANLrd73s+HvngXColHAFt2LnpTHPTg+nXRurzc4=
Subject key identifier: 23:45:7E:6D:3F:66:42:CF:36:55:2E:E1:6E:7F:CF:C8:BD:F2:44:49
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 5E9D90
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/I0V-bT9mQs82VS7hbn_PyL3yREk.roa
Signing time: Thu 13 Jan 2022 12:51:18 +0000
ROA not before: Thu 13 Jan 2022 12:51:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212784
IP address blocks: 193.36.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6200720 (0x5e9d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Jan 13 12:51:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23457e6d3f6642cf36552ee16e7fcfc8bdf24449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:e7:4b:2e:4d:5a:8d:bb:48:64:6d:e0:25:
be:bd:9f:f8:7c:a2:65:fd:e8:3f:37:39:2a:f0:f7:
27:ca:9a:3b:40:1b:14:8e:6e:d8:a2:95:80:30:ee:
36:65:2f:ab:c2:1d:07:e9:7c:2b:1d:2c:36:14:5f:
4b:b7:63:90:22:d6:4e:78:45:92:9e:d3:55:c2:d0:
5c:7f:fb:35:f1:49:c6:8c:2e:49:a6:99:3c:e3:02:
93:eb:8a:0d:6a:7f:a4:ed:7d:85:91:e1:0f:8e:64:
99:57:a5:51:85:e3:3d:58:2c:36:0c:d3:19:dc:0c:
1c:b0:c8:af:95:9b:96:1e:f0:2a:f5:6f:3f:f5:8b:
92:69:7d:de:74:ae:ed:db:f6:03:d3:4c:10:8e:20:
02:26:78:59:4b:12:d1:34:9e:16:64:94:70:2b:6a:
f0:54:08:b5:3e:23:f9:7c:8a:ef:08:0d:a5:28:0f:
79:49:86:f1:42:da:ff:8a:18:04:44:52:84:5f:52:
c2:c6:f7:83:25:07:29:5e:9a:ca:c5:17:22:64:5d:
31:7e:c5:4e:ca:a5:94:54:ef:2a:87:a7:10:84:20:
92:2c:7e:b0:bc:8f:9e:5a:b0:f4:eb:47:74:0d:d9:
2f:4e:c2:9f:2c:5c:cb:96:89:ee:2b:f7:9b:47:5d:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:7E:6D:3F:66:42:CF:36:55:2E:E1:6E:7F:CF:C8:BD:F2:44:49
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/I0V-bT9mQs82VS7hbn_PyL3yREk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:13:a0:ca:8d:ab:ec:28:6a:24:7e:70:16:67:5c:84:6e:f2:
35:5a:4d:9f:5b:d8:01:6e:2a:7d:18:05:93:9a:67:c0:2e:b2:
09:ee:32:14:c5:45:56:70:73:31:98:aa:a8:0e:58:a3:14:29:
05:aa:0c:7a:62:b3:e5:de:1d:6b:fa:cd:c1:c3:54:b5:9e:c7:
8f:fd:18:b2:87:95:cd:70:8f:e1:35:f2:38:43:91:73:02:6c:
bb:e7:97:4b:85:9e:ca:8e:ad:a4:1d:38:ff:31:f1:0e:a1:ac:
4c:53:63:47:29:80:5b:65:67:33:20:fd:c1:76:97:48:91:ed:
18:b1:48:b0:fe:2a:25:7f:05:57:43:0d:d9:52:d3:1d:d7:71:
49:58:bc:b0:30:9d:37:90:94:55:75:51:f4:af:fd:48:10:a1:
f2:07:49:0c:aa:04:e4:c8:4c:1a:bd:09:e4:f0:63:a8:dc:2b:
f5:64:8c:1f:9d:0d:fb:41:92:94:d7:03:4e:13:53:e4:94:6f:
8d:c4:58:84:09:cd:b8:26:f3:fb:e8:ae:d4:56:90:d6:5f:cd:
d8:a5:d4:2d:11:a4:74:41:45:d8:cc:5d:b2:a3:3f:08:5e:75:
1f:9d:b4:80:9f:08:b5:4c:00:4f:69:8e:31:92:70:35:06:41:
34:c5:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-fra.rpki-client.org