Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/e1kQRxbTlJnv1Xqs50SFcDaUhvw.roa
File: e1kQRxbTlJnv1Xqs50SFcDaUhvw.roa (raw, json)
Hash identifier: eU5MvT46rljHTAwTqc0GnEiBpGcBT6OCSOCOP5X9pwU=
Subject key identifier: 7B:59:10:47:16:D3:94:99:EF:D5:7A:AC:E7:44:85:70:36:94:86:FC
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 017CFC22
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/e1kQRxbTlJnv1Xqs50SFcDaUhvw.roa
Signing time: Sat 01 Jan 2022 11:02:29 +0000
ROA not before: Sat 01 Jan 2022 11:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49289
IP address blocks: 193.200.27.0/24 maxlen: 24
193.200.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24968226 (0x17cfc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Jan 1 11:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b59104716d39499efd57aace7448570369486fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:13:32:43:15:4e:da:bf:47:21:af:ba:63:
bd:89:7a:13:1d:a7:c4:d7:16:0e:7d:0c:15:c8:0c:
aa:7a:1f:d3:d9:9b:83:c3:a8:d3:ee:aa:02:14:b0:
25:69:37:2c:db:77:a9:62:21:88:54:79:12:5f:40:
82:e4:45:bd:6f:4c:b4:86:9c:16:c6:44:f9:3d:7e:
69:53:48:a1:47:c7:7f:40:0a:d8:e2:83:67:69:a8:
5d:27:13:76:56:cb:fb:31:b5:1c:90:13:31:eb:52:
38:80:c5:5f:7a:12:f4:f3:49:1e:e2:a4:5c:a5:cc:
93:ea:66:9a:51:0e:74:f8:28:0e:06:f3:0b:91:17:
79:4b:a0:99:c2:62:72:d1:73:0b:cb:dc:95:48:37:
48:72:3d:a6:a1:16:23:b9:ea:23:67:ce:1b:68:0d:
4d:10:91:77:68:2c:62:37:83:37:2e:1e:52:47:89:
b7:a2:06:45:0c:fd:e3:e8:c6:a6:29:80:4f:7b:e7:
e0:3b:1a:52:4e:54:3d:70:e9:b2:32:12:5b:55:49:
3e:17:a1:34:54:c9:bd:c8:96:74:c7:13:5b:95:ff:
81:cb:54:d4:53:0e:fd:b3:5a:67:04:a4:2f:92:92:
9c:58:3b:2a:98:67:99:85:b5:70:fc:56:71:9e:45:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:59:10:47:16:D3:94:99:EF:D5:7A:AC:E7:44:85:70:36:94:86:FC
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/e1kQRxbTlJnv1Xqs50SFcDaUhvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.26.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:b6:86:a1:8d:28:2c:41:cc:8a:ca:6e:07:6a:d5:bf:ea:f4:
ba:5c:54:2c:86:f1:bd:10:c2:eb:44:16:d8:2e:9b:8d:98:67:
ea:9e:14:34:f6:3a:e0:80:1f:8c:1b:76:43:1d:8a:38:ce:27:
ef:63:89:e8:c0:a6:2e:45:d5:c5:b4:3c:f1:02:73:7f:35:47:
09:72:a2:93:12:3a:df:6f:a0:ed:ab:a5:ee:62:55:e5:cd:b6:
0c:18:4d:f0:99:61:5b:48:91:b6:3a:18:6d:b7:4f:f6:ab:ba:
c4:36:f3:4f:98:bd:62:33:be:c2:8f:29:16:b5:b3:d8:86:02:
30:62:da:12:2c:91:0c:30:fd:97:32:06:3e:2b:38:26:1d:e1:
22:ce:c1:78:18:f9:b8:1b:56:4c:be:26:84:0b:7b:2e:bb:80:
30:c1:69:3a:1c:0b:25:f9:44:33:3c:43:5a:e0:58:67:06:9a:
5b:01:7b:f5:e7:56:b5:c2:6b:b5:76:1d:a4:ad:54:24:dd:48:
fd:5c:45:47:db:3c:7d:f8:38:07:36:d4:5e:a5:f1:9e:17:48:
d9:e7:47:14:8a:c9:3d:49:2f:ad:65:2b:d1:1e:64:a1:73:e0:
d5:53:43:f6:41:32:79:98:19:aa:e4:08:ac:50:28:60:88:8f:
b4:73:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:10 2024 by rpki-client on console-fra.rpki-client.org