Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Yqnp21QtrKGPkRBCgkpRuszk-iE.roa
File: Yqnp21QtrKGPkRBCgkpRuszk-iE.roa (raw, json)
Hash identifier: 7jhJoS4ThX1epF5sscZslgnqSOVkSa+QalreRl8Yr40=
Subject key identifier: 62:A9:E9:DB:54:2D:AC:A1:8F:91:10:42:82:4A:51:BA:CC:E4:FA:21
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 8BEC17
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Yqnp21QtrKGPkRBCgkpRuszk-iE.roa
Signing time: Fri 08 Apr 2022 09:06:38 +0000
ROA not before: Fri 08 Apr 2022 09:06:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.42.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9169943 (0x8bec17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Apr 8 09:06:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62a9e9db542daca18f911042824a51bacce4fa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:e6:04:74:6a:41:8d:18:52:62:b2:4b:e0:
86:9a:bf:57:c1:d7:67:8b:b2:db:77:5e:27:14:8d:
62:1c:89:d5:55:86:40:84:e8:aa:74:0e:9e:b2:03:
2d:29:58:1d:90:87:0f:c5:da:42:d0:0a:be:bb:c6:
61:44:93:bb:3a:55:4a:21:74:d8:8a:52:fb:1c:15:
d1:77:62:b2:6e:ea:d9:cb:1c:52:76:62:d1:a9:b8:
71:d5:1c:8d:83:8a:ea:89:72:f1:aa:e7:3b:f2:44:
90:1b:c1:ca:30:5c:c9:23:8c:f8:e8:41:6b:c3:82:
45:ff:3e:c7:c4:33:2a:f2:b9:19:54:cf:25:09:61:
9c:c4:ed:0f:b0:02:46:d0:00:51:17:02:fe:de:17:
e4:dc:c8:85:de:45:bd:41:94:cd:17:cd:ae:51:6c:
75:71:dc:08:79:d0:18:7a:c2:df:81:ba:8b:97:7b:
e9:54:da:ac:9b:d4:35:13:54:13:c3:bd:07:fc:43:
53:fb:4d:6f:2c:ac:ba:6d:93:a2:a7:a3:f0:b6:77:
e3:f5:99:f0:98:5a:de:7a:75:37:e6:4c:f9:a8:c6:
ea:8b:70:02:81:a7:6c:2e:f1:6f:44:db:af:5a:32:
a7:32:c9:7b:c5:85:fb:0c:d6:20:18:fd:74:a8:25:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:E9:DB:54:2D:AC:A1:8F:91:10:42:82:4A:51:BA:CC:E4:FA:21
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Yqnp21QtrKGPkRBCgkpRuszk-iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.210.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a7:8b:3b:a9:c0:56:c0:d6:4c:04:dd:34:6a:4e:39:e1:e1:
d8:29:86:67:a7:59:a8:e5:fd:54:e0:82:b2:05:1c:8b:7e:9a:
71:d2:26:a6:06:3a:0c:13:6b:e5:b6:a9:25:3b:63:ae:53:98:
3b:ff:5a:27:90:bf:68:74:fb:3a:46:ef:16:fd:d5:ca:69:e9:
be:5f:1c:ea:31:80:58:51:13:d2:f9:4c:67:2d:c7:27:e1:b7:
6a:14:86:dd:c5:96:88:2a:91:4d:13:52:0f:0e:20:5f:26:e1:
7b:a6:ca:25:88:86:29:16:ef:2d:4d:67:4c:3d:27:ab:ec:2c:
f5:d7:e3:05:2b:97:0b:82:4f:b3:cc:d6:9b:fd:3e:97:eb:68:
c4:e4:c8:be:77:09:1a:38:d4:c9:2c:c5:47:48:24:3c:1c:7e:
28:3b:73:86:19:09:71:15:06:0e:bd:48:e0:0e:14:b1:30:75:
0e:c5:0e:56:4f:aa:39:41:11:66:3b:5f:03:a2:91:d8:84:67:
39:ad:9c:bc:f9:4e:1b:48:71:9c:02:c2:c7:63:f7:47:f3:ad:
d1:6d:39:21:ed:8d:58:0d:ae:a9:ef:11:40:1f:9e:13:04:cf:
6d:85:5e:f9:7c:1c:0e:80:80:f8:06:12:f2:20:95:a3:05:d2:
7e:0b:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org