Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cGDVqzH61hTX-ZnNfrUYW-uaJLk.roa
File: cGDVqzH61hTX-ZnNfrUYW-uaJLk.roa (raw, json)
Hash identifier: beg9k5414MHmo0sAKkAkY1oZfp+zYI9THwkcc0NCg7U=
Subject key identifier: 70:60:D5:AB:31:FA:D6:14:D7:F9:99:CD:7E:B5:18:5B:EB:9A:24:B9
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 1E060325
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cGDVqzH61hTX-ZnNfrUYW-uaJLk.roa
Signing time: Sat 02 Jul 2022 08:59:19 +0000
ROA not before: Sat 02 Jul 2022 08:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213110
IP address blocks: 193.169.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503710501 (0x1e060325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jul 2 08:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7060d5ab31fad614d7f999cd7eb5185beb9a24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:52:90:ea:4c:f9:e3:d0:d3:e8:86:25:bf:e4:
fb:49:5a:e9:8e:b9:31:11:72:20:75:6b:f2:1d:a0:
db:56:e3:b9:f4:64:c4:08:f7:92:6a:27:8b:a8:f0:
cf:23:04:a3:9e:d2:c7:08:7c:53:29:d0:24:27:94:
37:7a:51:e6:33:f7:a8:4b:18:43:47:18:34:b1:53:
07:e1:5a:9a:4a:90:a1:f9:f5:17:ad:89:d2:dd:79:
5c:9c:43:e2:16:c2:9a:58:7b:1f:ed:be:06:25:6d:
dc:81:91:b3:15:98:31:57:27:50:ea:e3:33:0c:5f:
a1:e9:ba:24:ec:3c:43:e7:7d:2a:8d:08:75:6f:37:
c6:14:2c:6f:eb:cc:89:e7:ea:ac:fd:84:93:e7:12:
b2:3f:41:3e:f8:ea:aa:9f:3d:c4:e3:2d:f1:69:b2:
c8:8a:f0:70:71:3e:97:a3:cd:40:d4:f1:37:5b:80:
7f:0d:04:d9:ff:98:9d:76:0b:1f:2d:5e:48:34:b3:
65:c9:bf:bb:54:a0:58:03:77:e7:6a:39:d3:d8:5e:
20:a4:b0:b2:88:75:4b:2c:22:7e:47:89:d9:b1:6e:
93:08:dd:3a:46:f7:4c:ed:18:95:93:5a:cf:3d:67:
21:70:52:47:ec:9f:03:b1:72:14:47:7c:b5:d2:66:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:D5:AB:31:FA:D6:14:D7:F9:99:CD:7E:B5:18:5B:EB:9A:24:B9
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cGDVqzH61hTX-ZnNfrUYW-uaJLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3b:60:ed:0a:e6:24:5e:68:b2:c9:a7:86:62:88:97:c1:7d:
6a:03:75:cf:9c:89:57:da:b7:af:1e:19:4b:a8:b4:09:13:95:
12:5a:be:f2:92:e4:92:57:87:a2:fa:3c:58:24:26:2a:4f:f0:
6b:0c:7d:ec:44:c8:ff:51:d7:3f:75:fd:fd:34:cc:38:f6:72:
7c:c6:fe:0b:e1:f3:7c:b4:5f:39:01:c3:2f:9a:3e:af:a4:53:
50:97:4d:39:fd:6f:e8:99:4d:a7:de:59:ea:17:fe:88:59:57:
c6:ae:27:88:b4:63:ae:e9:2b:2a:af:f9:dc:2e:53:d4:90:c9:
76:6e:d2:be:07:b7:86:be:d6:48:60:d3:a2:17:a5:0f:b4:1d:
17:71:54:9a:95:97:52:bf:c6:e3:84:82:9a:b5:fc:98:7a:2d:
96:b2:b6:26:f0:9f:31:8b:db:9e:bd:a0:d1:ba:16:fe:ab:23:
7c:f1:61:b0:b9:88:68:af:81:24:e9:27:1d:b4:4f:49:06:fa:
95:1b:8f:a5:4b:ba:ac:59:be:7d:b1:ed:a3:a6:a1:4b:77:70:
fc:1e:ca:8f:03:7f:47:14:ba:49:19:25:0e:b3:55:4f:17:61:
fb:69:06:bc:3d:e7:83:8e:46:c9:06:47:64:e8:4c:40:cb:21:
88:c1:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:55 2024 by rpki-client on console-fra.rpki-client.org