Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/vW42sVqQi1_EoDuwgvmjk21mc_E.roa
File: vW42sVqQi1_EoDuwgvmjk21mc_E.roa (raw, json)
Hash identifier: vr2YAEqdt8Q/x8+gKQ08ZK0vUOQkpPGa3buPaleO7do=
Subject key identifier: BD:6E:36:B1:5A:90:8B:5F:C4:A0:3B:B0:82:F9:A3:93:6D:66:73:F1
Certificate issuer: /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial: 1276FA
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/vW42sVqQi1_EoDuwgvmjk21mc_E.roa
Signing time: Sat 01 Jan 2022 02:53:08 +0000
ROA not before: Sat 01 Jan 2022 02:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59441
IP address blocks: 193.162.129.0/24 maxlen: 24
2a11:1dc0::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210106 (0x1276fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Validity
Not Before: Jan 1 02:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd6e36b15a908b5fc4a03bb082f9a3936d6673f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f8:fd:64:1e:8d:53:7e:10:0d:ec:db:45:ec:
9a:0c:e0:9d:fb:df:66:7c:90:0e:42:fb:9c:2a:c0:
c7:e0:f0:54:b5:f1:61:ab:b4:5c:c7:70:83:5f:aa:
db:68:53:35:48:01:60:83:c9:d2:84:56:9f:5d:19:
c7:b7:5c:98:4b:6c:f0:d5:7b:c4:21:d1:69:ca:08:
2e:49:c5:74:0f:17:9c:50:13:b7:9f:ce:a0:3c:ba:
62:93:fc:d5:fb:2a:a3:2c:5f:da:b6:91:28:b2:99:
a5:03:91:d7:9c:5a:2a:ca:46:78:1c:52:6d:86:ef:
43:ad:90:bf:d1:b4:2d:38:c6:c6:f4:42:38:6f:d3:
e6:65:5f:6b:3e:f8:ed:92:42:eb:3e:37:f4:dd:01:
15:2e:1c:44:b5:ff:39:ef:5f:9d:c3:98:fc:17:68:
bf:3a:15:a8:1a:6e:a7:74:10:e8:85:2c:61:f7:b4:
e0:71:8b:33:ca:56:23:dc:c8:a3:59:ae:eb:14:d8:
d5:cb:7d:4a:cd:e8:60:f4:47:50:0c:a3:ea:a5:2d:
2f:c2:79:93:01:2d:6c:5d:a4:38:8c:73:09:91:ef:
74:93:7c:ce:eb:8c:58:5a:1f:a7:d3:c5:65:db:01:
4b:83:c2:73:66:48:2b:76:d6:55:2d:35:5d:51:70:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:36:B1:5A:90:8B:5F:C4:A0:3B:B0:82:F9:A3:93:6D:66:73:F1
X509v3 Authority Key Identifier:
keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/vW42sVqQi1_EoDuwgvmjk21mc_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.129.0/24
IPv6:
2a11:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:c6:a6:48:b8:01:6d:0d:af:3f:1d:3c:81:ba:ad:a8:7c:23:
df:b8:08:ff:f0:03:a4:56:a5:be:1f:a3:5e:23:b3:ab:ae:d4:
1a:86:ed:a3:d9:72:98:04:e7:85:ab:fe:bd:cd:4d:28:65:0f:
ff:60:83:04:01:22:5b:43:d6:6f:9b:96:b7:da:fc:88:ef:6a:
4d:51:54:44:7c:52:04:3f:6e:06:ee:7c:16:6d:d9:0f:04:9f:
96:f7:c9:82:53:2e:9a:56:e2:ea:86:be:b5:5c:25:fd:61:09:
28:1d:13:84:c9:0a:3e:b2:0e:19:03:4f:37:3f:79:ea:2f:aa:
80:ce:63:89:ac:b5:40:27:74:6e:ea:7e:1e:1d:20:55:e3:f0:
a5:a8:8f:28:1f:fe:db:38:4d:99:56:9e:f4:5a:7a:7d:0b:24:
be:fc:4e:32:10:c9:ee:be:fe:f2:74:dc:0f:1d:e5:e2:57:6a:
71:27:79:b1:70:b4:9a:d7:ec:09:09:c6:cb:21:c6:2e:01:3a:
2a:0e:17:ba:27:13:98:a0:1d:15:48:f0:92:a2:65:fa:b2:c4:
c2:8c:95:2b:9b:d7:9e:6a:e6:68:6f:4f:b5:94:50:f8:ca:a9:
52:a4:50:bd:19:2d:48:9f:54:55:cb:cc:90:54:04:80:10:50:
60:b5:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:30 2024 by rpki-client on console-fra.rpki-client.org