Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/vRYfgSeZsg7LVbIoaqvC4UG1XRs.roa
File: vRYfgSeZsg7LVbIoaqvC4UG1XRs.roa (raw, json)
Hash identifier: 26Hq3T0BHfUlsR370xCavl6lwO7kHgactM5dz++hgW0=
Subject key identifier: BD:16:1F:81:27:99:B2:0E:CB:55:B2:28:6A:AB:C2:E1:41:B5:5D:1B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 08722179
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/vRYfgSeZsg7LVbIoaqvC4UG1XRs.roa
Signing time: Sat 16 Apr 2022 08:54:29 +0000
ROA not before: Sat 16 Apr 2022 08:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 193.37.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141697401 (0x8722179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Apr 16 08:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd161f812799b20ecb55b2286aabc2e141b55d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:8e:c3:ee:61:57:92:a2:a5:6e:17:67:31:
87:a4:8b:c3:0c:a6:0e:78:c4:12:9a:98:e5:30:a5:
e6:5e:98:ed:ad:f3:98:ab:03:8d:c1:ab:b9:08:f2:
13:0f:b9:b3:93:f7:ca:76:01:9a:08:38:c1:25:72:
ac:93:d0:4d:17:da:5b:c2:1b:e0:ef:c8:28:0c:9f:
7a:76:e0:6c:0c:7b:4a:20:f3:ea:40:50:8d:c1:6f:
67:d0:b3:cb:ab:2d:09:4a:ff:9b:c6:0a:46:0b:1f:
1b:f1:2b:b9:ea:d8:df:25:ca:5e:5e:a6:18:57:b8:
90:12:28:94:68:ef:e6:6a:f5:a9:f9:f3:4b:3e:a9:
33:84:4b:1f:79:36:de:89:47:30:6a:10:01:29:da:
d5:e8:90:2c:24:03:df:c5:6e:2c:8e:09:98:0a:92:
cd:7b:ba:31:3a:ac:90:a0:59:12:8a:9d:5d:8d:67:
1a:8a:9c:ea:13:24:d9:78:a4:c0:70:9f:0f:70:4d:
19:ac:f1:00:94:57:e8:6e:98:7f:39:82:ec:7c:57:
75:c7:7a:21:fb:34:aa:ad:f3:7a:81:bb:1f:a5:06:
77:83:01:4c:62:61:32:4c:56:77:cb:fe:56:66:2c:
5c:7d:25:ba:5c:00:5c:3a:00:cd:6c:fc:1f:65:bc:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:1F:81:27:99:B2:0E:CB:55:B2:28:6A:AB:C2:E1:41:B5:5D:1B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/vRYfgSeZsg7LVbIoaqvC4UG1XRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.199.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1c:9e:48:d6:8b:e8:ad:de:38:3d:0a:b6:39:75:95:49:81:
a5:c5:84:87:6f:27:2f:cd:fe:3f:50:e8:ec:fe:b4:fa:d9:dc:
9c:62:89:ec:2c:81:32:30:9a:29:d2:e3:53:bd:d4:c1:d8:c8:
b3:11:d6:97:1b:0b:90:ff:6a:c6:2b:20:54:0b:2c:2f:d7:7d:
54:90:8b:a1:33:88:f4:77:22:f5:6f:30:19:77:d7:2d:7c:d4:
97:6f:b1:5b:54:38:8e:c9:a7:07:83:ab:60:c0:a8:8f:16:9d:
f3:d9:8e:df:73:3c:0a:8d:0f:62:6b:2c:4e:f1:d7:09:63:66:
d7:e0:c3:68:d6:97:06:97:cf:0e:3d:d4:2f:30:ba:79:23:32:
d8:52:2c:a0:b3:71:3c:7a:c6:bf:69:b0:de:b9:9b:06:e2:99:
3f:94:93:94:4a:48:86:f2:06:63:61:6c:80:ee:89:7d:44:24:
72:97:bd:d3:24:3e:53:00:54:1e:f1:ed:51:3d:4f:04:fe:aa:
ef:cd:50:42:79:b3:2f:12:ad:49:a7:d0:54:f9:5e:6f:5f:88:
90:ec:da:69:50:f2:84:c6:b6:e1:1e:cc:a4:1d:b3:26:1f:e1:
e0:68:0b:72:93:52:f8:61:ad:65:02:c6:ac:34:db:05:15:f3:
74:c4:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org