Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/jFuduRN91tlSwV-IuMG2dNrU_qM.roa
File: jFuduRN91tlSwV-IuMG2dNrU_qM.roa (raw, json)
Hash identifier: HAsXSptrQ6DYSWeXTb4h7lth0Ooj+SYH0tAUBO2wVvc=
Subject key identifier: 8C:5B:9D:B9:13:7D:D6:D9:52:C1:5F:88:B8:C1:B6:74:DA:D4:FE:A3
Certificate issuer: /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Certificate serial: 0184194BC3AE73C8AC140F56DDC861E1E041
Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/jFuduRN91tlSwV-IuMG2dNrU_qM.roa
Signing time: Thu 27 Oct 2022 11:55:06 +0000
ROA not before: Thu 27 Oct 2022 11:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21063
IP address blocks: 193.100.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:4b:c3:ae:73:c8:ac:14:0f:56:dd:c8:61:e1:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Validity
Not Before: Oct 27 11:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c5b9db9137dd6d952c15f88b8c1b674dad4fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:42:45:b8:de:d5:77:4c:1a:cd:0d:eb:90:
b1:99:4a:3a:22:4b:f0:b7:a3:13:2d:73:b7:d0:fb:
a2:18:7f:87:84:05:7d:28:24:75:0c:02:b3:3d:a5:
c0:11:3d:69:e6:fd:e1:af:fe:b6:3c:31:19:fe:46:
ec:d9:49:21:3d:72:b9:3c:89:bd:4f:09:78:af:2f:
d1:26:b6:95:0a:30:fc:c0:f9:5d:ee:1b:82:2f:96:
8b:5e:7d:1f:bc:52:3a:2d:4b:77:0d:ad:7e:e8:bc:
e6:75:b3:80:83:3b:1d:bf:fd:d3:a5:1e:51:d9:e9:
95:7d:83:77:6e:15:86:94:40:af:5e:59:ff:e1:89:
a9:e8:3d:2a:84:e5:c3:74:aa:51:48:af:79:3b:c6:
2c:25:e6:00:84:9f:a4:75:40:88:d5:a9:c4:86:ce:
d9:a5:14:ce:88:12:76:00:5f:11:02:2a:25:26:65:
c0:ca:a6:a3:25:ff:be:35:b5:6b:6c:8b:92:6e:29:
68:62:1b:db:42:73:64:82:5d:4b:55:e1:74:f5:1b:
4b:bd:e7:5e:da:b8:d7:ed:81:46:15:60:53:07:f4:
74:c9:d8:d9:0e:eb:d9:2c:89:83:10:81:b2:6b:fc:
79:f2:b5:3c:2a:4d:eb:53:0c:ca:ef:24:40:3b:c3:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:9D:B9:13:7D:D6:D9:52:C1:5F:88:B8:C1:B6:74:DA:D4:FE:A3
X509v3 Authority Key Identifier:
keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/jFuduRN91tlSwV-IuMG2dNrU_qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.124.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:43:88:9d:ee:59:a6:78:b0:b7:a9:03:88:0a:37:cb:42:50:
87:af:7b:da:86:ab:46:51:bc:3d:4c:51:d2:f0:99:2b:3a:e0:
81:79:d4:f9:88:ed:eb:64:44:f9:ff:37:87:6f:38:09:75:fb:
43:68:38:65:f0:06:05:fa:3d:e8:40:cd:2e:db:6b:3e:20:40:
c5:a8:d1:68:d8:bf:a8:2d:9e:bb:10:c9:07:cc:6f:86:f5:90:
e9:43:43:6f:f4:17:c1:44:a2:02:79:0f:e0:0a:fb:a5:18:52:
5b:fa:92:98:38:68:d4:83:7c:06:02:be:6e:cd:4a:90:8c:06:
d8:f8:71:46:54:a5:e9:a6:34:99:7f:17:d8:d1:60:a3:67:ad:
02:e8:de:e7:70:9c:10:b2:cb:07:fc:d2:20:a2:55:89:48:bc:
b8:f7:48:82:34:57:86:a6:90:b1:9d:78:2e:69:f1:09:a1:59:
7d:ce:a0:76:68:be:0d:41:b1:6f:f6:cd:94:ab:5c:a1:57:a8:
53:93:a4:c5:38:47:f7:ac:bd:b4:89:f5:3f:a4:2d:db:d1:03:
2c:5b:d6:ab:61:79:f5:db:8c:a3:7a:e5:69:9e:98:46:54:5b:
aa:60:a6:51:26:20:17:f3:d8:a4:f3:72:52:38:91:ad:a3:8f:
e8:c9:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:56 2024 by rpki-client on console-fra.rpki-client.org