Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/r3FKIHJTSk6AW4oKMUPsS-tPabI.roa
File: r3FKIHJTSk6AW4oKMUPsS-tPabI.roa (raw, json)
Hash identifier: cD/T0+27HZNTco+i/T7fU2HTp3XewrTjW4NAhlDUKRY=
Subject key identifier: AF:71:4A:20:72:53:4A:4E:80:5B:8A:0A:31:43:EC:4B:EB:4F:69:B2
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 33E4CA47
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/r3FKIHJTSk6AW4oKMUPsS-tPabI.roa
Signing time: Sat 01 Jan 2022 04:55:36 +0000
ROA not before: Sat 01 Jan 2022 04:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207263
IP address blocks: 193.140.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870632007 (0x33e4ca47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af714a2072534a4e805b8a0a3143ec4beb4f69b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:8e:00:71:98:d2:d5:3a:d7:29:74:64:99:
48:49:0f:b2:9c:ba:75:24:b3:ba:95:36:62:5e:b3:
c8:4c:02:30:e0:f4:1a:30:0d:89:c0:af:b3:c5:25:
b6:c5:aa:0e:f3:b7:c2:36:dc:6c:92:29:64:94:32:
19:6e:f0:1d:48:05:3d:2b:11:c0:ae:a4:85:28:8d:
9e:7d:de:5c:2a:b9:e2:fd:58:85:2e:9c:76:e5:ee:
20:bb:e5:78:7c:6e:30:00:2a:cc:71:75:ce:0c:d5:
1b:14:3d:1e:c6:05:5f:17:c9:87:43:d0:26:23:72:
50:eb:bc:d9:f1:49:e0:db:3e:2b:bb:2e:12:4d:62:
fb:74:f2:c0:ca:82:35:d7:2b:31:93:d1:69:93:0b:
23:0d:69:b1:82:6a:e0:83:39:7a:d9:2c:c8:0e:bf:
a4:3a:e0:6e:7a:73:d9:f8:2c:5b:9e:93:d6:af:65:
d2:b9:e1:4e:32:df:39:db:80:da:1a:62:2f:77:83:
53:1e:6c:fc:61:46:02:ce:94:11:fc:d9:3a:af:e4:
03:3c:93:05:98:34:34:d0:98:1e:cb:69:e1:03:f2:
14:f9:2b:20:66:2f:dd:b4:63:a0:cd:f3:2a:d2:4f:
31:6f:75:a4:04:fd:a7:57:44:fa:29:33:b3:c4:af:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:4A:20:72:53:4A:4E:80:5B:8A:0A:31:43:EC:4B:EB:4F:69:B2
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/r3FKIHJTSk6AW4oKMUPsS-tPabI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.72.0/21
Signature Algorithm: sha256WithRSAEncryption
01:46:fa:5c:2f:c0:48:e3:79:4e:90:36:b6:a7:7b:cb:54:80:
54:7e:8a:ae:c3:99:b8:46:93:16:6e:c5:34:45:79:fe:d6:42:
13:6d:bc:a0:02:16:be:ae:26:34:be:66:9d:97:c0:d3:bf:e2:
99:e5:a1:75:55:45:e4:ca:a2:12:67:c5:d9:a4:1c:2a:40:51:
e1:ee:17:0c:2a:f7:34:90:0c:9b:a2:28:46:aa:5c:eb:83:45:
3d:c5:5a:f9:46:bb:39:97:6e:f1:4a:5f:b4:a1:8a:bf:e8:84:
7b:6f:70:1b:20:ed:e3:a1:ba:5c:ff:cf:07:fb:49:08:7c:ee:
4f:be:99:b2:4d:53:e8:fa:d2:bb:a5:f4:bc:60:09:03:d3:bb:
23:8e:29:1d:c7:1d:ff:25:f6:d4:c6:60:11:3f:87:61:5b:4f:
25:21:5a:c0:05:13:76:3c:5b:a3:ff:38:60:69:6a:95:16:6b:
5f:8e:02:9e:58:cf:38:9c:23:48:37:d5:b1:fd:d9:5e:85:c2:
ed:ee:9d:82:6e:87:8c:e9:7f:6b:4c:69:15:33:ee:e8:f3:f9:
15:6d:e1:52:e1:01:59:c8:14:3d:2b:61:68:32:31:f0:78:3b:
49:33:f6:99:10:ee:dd:20:ce:04:e5:98:7e:d3:78:87:40:49:
41:d2:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org