Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EOFgkKNoA8prcTo_yNVhD2ciWSo.roa
File: EOFgkKNoA8prcTo_yNVhD2ciWSo.roa (raw, json)
Hash identifier: zAzEIjLaPVWgiDhXSyMbXJP2aoMgVhAYGYG6cXIOVJQ=
Subject key identifier: 10:E1:60:90:A3:68:03:CA:6B:71:3A:3F:C8:D5:61:0F:67:22:59:2A
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 08FDE116
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EOFgkKNoA8prcTo_yNVhD2ciWSo.roa
Signing time: Tue 07 Jun 2022 20:31:02 +0000
ROA not before: Tue 07 Jun 2022 20:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 193.37.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150855958 (0x8fde116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jun 7 20:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10e16090a36803ca6b713a3fc8d5610f6722592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:42:7a:6b:52:e6:e9:ed:1a:51:d9:05:48:
cb:28:c0:c0:7e:1d:d0:81:a1:a3:22:c2:66:76:30:
e0:c7:aa:60:d8:31:1b:b3:f8:d3:22:a1:2d:30:de:
dd:e3:19:81:c2:3a:a3:55:99:11:14:9b:75:75:e9:
ca:a3:6e:f8:1a:a0:09:7c:2d:22:94:9e:08:1f:6f:
31:ee:5e:1e:a6:c6:ef:90:5b:54:1d:6c:5b:39:83:
d8:e1:47:05:c6:61:73:0c:6f:53:0e:d3:2a:d4:23:
2f:d5:b7:e4:71:38:1c:53:c6:f3:51:c1:f5:a6:8e:
f5:27:90:6f:c7:c6:e0:4c:b8:1b:d7:c4:2b:0d:e3:
6d:2d:d8:83:bb:15:23:65:f5:4b:45:b6:fe:5d:0a:
f5:a7:e3:a2:ed:36:b1:d7:36:57:0a:8c:0c:00:b1:
eb:93:2b:e4:46:de:02:93:51:af:3c:bb:8b:99:0a:
e8:02:d7:74:4f:83:c0:de:9d:04:91:86:e4:21:c7:
30:40:0d:a9:f0:80:a5:65:95:2c:41:6e:9a:09:48:
b2:4e:30:e8:1a:e6:b3:90:f2:f6:9a:74:76:2d:09:
54:6a:12:33:e6:bc:9a:c4:ba:44:4f:2c:4e:94:1c:
b7:0f:03:87:af:d3:b4:dd:72:60:55:fd:3b:fe:6c:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:60:90:A3:68:03:CA:6B:71:3A:3F:C8:D5:61:0F:67:22:59:2A
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EOFgkKNoA8prcTo_yNVhD2ciWSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.199.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d0:7d:a9:a2:23:1c:a3:2a:53:78:00:05:ad:94:18:f9:2d:
23:bf:3a:49:df:5f:93:4f:c9:54:aa:1a:81:fc:ac:38:bd:b9:
a5:0b:4a:4a:97:6d:be:70:f1:eb:5d:4b:6a:69:1d:6f:9d:6c:
14:b8:68:0c:18:20:5c:15:55:a7:36:ca:a5:a6:c4:e1:56:58:
a1:22:3b:b4:44:43:a0:5a:21:e8:af:2a:54:62:83:6f:df:ef:
41:d8:cc:a8:cd:87:e6:b4:df:0e:45:fe:57:27:b1:ff:70:db:
68:62:5d:fc:c5:9c:46:b9:b3:53:fe:70:5d:ed:10:00:d8:cc:
6e:f9:43:cb:4a:c0:85:8f:25:d4:9c:1f:47:a3:9c:26:81:fc:
08:b6:63:de:33:47:86:32:c0:20:a9:88:f9:aa:1b:c8:81:40:
6d:50:3c:7f:0d:34:31:e2:2e:dd:70:86:c2:07:16:a9:50:b5:
9d:dd:64:05:80:81:1e:56:8b:3c:cb:f2:ca:16:7f:4a:06:1a:
77:92:65:36:08:87:0d:9f:70:e3:23:bb:3f:37:fa:69:87:4f:
be:ac:a1:87:43:34:bc:fd:bb:b3:fc:70:58:b2:93:8f:5a:f1:
80:a4:7f:32:a9:96:13:73:df:69:29:d5:1f:69:10:01:7f:cf:
9e:bf:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org