Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/I77f1v7WTJxBs78uMsFkCxh9MNY.roa
File: I77f1v7WTJxBs78uMsFkCxh9MNY.roa (raw, json)
Hash identifier: TZ0wYfrr5ONhTY48WiIwlX1S2QpvWdakrxQXPzPHcoY=
Subject key identifier: 23:BE:DF:D6:FE:D6:4C:9C:41:B3:BF:2E:32:C1:64:0B:18:7D:30:D6
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 087B8B17
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/I77f1v7WTJxBs78uMsFkCxh9MNY.roa
Signing time: Mon 18 Apr 2022 07:30:24 +0000
ROA not before: Mon 18 Apr 2022 07:30:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.37.196.0/22 maxlen: 24
45.67.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142314263 (0x87b8b17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Apr 18 07:30:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23bedfd6fed64c9c41b3bf2e32c1640b187d30d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:3b:96:4b:35:77:60:39:cb:96:e6:9f:35:
50:1a:68:92:5a:1d:db:fd:93:a1:5c:0e:78:d3:b7:
3c:6d:f7:6f:c7:ab:b4:9d:c0:29:5c:c0:da:18:e9:
9a:47:7f:44:73:c5:8d:ec:01:01:6f:b7:a7:58:e6:
13:14:c8:6a:92:92:18:f9:6f:14:ec:7b:3c:d0:5f:
32:eb:22:3a:f2:29:ce:66:3a:a9:69:33:ac:5c:e9:
ae:e5:5a:94:6a:98:55:5b:38:e5:29:14:5a:7e:d3:
ce:c5:e6:42:21:93:9a:96:1b:e2:d9:2d:49:ec:0c:
40:10:78:a2:ca:e7:75:12:89:4f:79:2e:7c:71:21:
43:08:64:36:8f:d3:e1:4a:97:78:61:d8:61:de:69:
3f:5a:73:70:45:49:01:78:28:cf:69:66:4e:e6:f2:
e9:fe:80:b9:9b:cd:4f:09:3a:26:2d:76:e7:9c:04:
9b:d2:a7:bb:68:35:ee:2c:e8:8a:23:b2:62:44:24:
03:43:5e:36:20:3a:cb:ba:0e:5a:32:94:0f:37:97:
26:ba:d9:d9:f5:a3:81:59:4b:ea:e1:7e:94:b0:a9:
ec:f7:20:68:00:43:9d:1f:a8:b7:2f:c2:cf:46:63:
8e:2d:27:dd:6c:7c:9d:33:aa:b6:e1:07:3d:19:e8:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:DF:D6:FE:D6:4C:9C:41:B3:BF:2E:32:C1:64:0B:18:7D:30:D6
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/I77f1v7WTJxBs78uMsFkCxh9MNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.200.0/22
193.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
20:81:84:40:d5:81:f2:24:a0:c5:58:e7:a6:19:24:e0:9a:cb:
85:45:ae:80:14:19:5b:e7:18:52:2f:74:c1:a0:d6:4d:82:df:
ab:c8:ac:b8:ea:0a:eb:b2:71:f8:13:4e:f8:67:7e:46:43:b1:
d1:ac:9c:a5:35:94:f0:da:66:21:14:7a:69:40:57:44:39:8d:
54:31:d1:80:47:42:2c:05:c9:60:2d:4c:c1:56:8c:af:22:8d:
59:d0:f9:e8:01:5c:68:4b:e4:81:1c:f2:11:0e:7d:65:bc:83:
dd:ab:14:5f:ee:28:07:f4:c4:d3:a3:6b:3d:6e:f1:57:a4:c7:
20:b0:5c:6a:c3:cd:0c:51:f0:a3:1f:cc:60:2f:90:9d:73:be:
44:10:34:fc:30:ff:a7:e9:c8:21:07:f8:47:79:23:19:e6:60:
67:67:ff:14:8c:5d:53:50:5c:55:0a:00:58:07:5c:d2:cd:11:
c1:7d:e2:ae:42:ab:bc:17:52:15:67:3d:5b:6f:57:8e:fb:12:
33:b0:b9:4a:57:3a:01:66:13:df:50:33:3e:20:8d:f6:7f:74:
e1:19:9b:e9:23:45:b0:53:11:77:46:f3:69:cb:f3:4d:66:d1:
72:ef:61:1a:90:79:99:c0:f1:bb:42:bb:11:91:d3:16:cc:0a:
ba:8b:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org