Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/5kTnBarfqfz1AQSCpb2Zy0_l32o.roa
File: 5kTnBarfqfz1AQSCpb2Zy0_l32o.roa (raw, json)
Hash identifier: jufy8tLs8HAEFJydnhGLAkIQWsqLXhl9wX0AWKHzbdc=
Subject key identifier: E6:44:E7:05:AA:DF:A9:FC:F5:01:04:82:A5:BD:99:CB:4F:E5:DF:6A
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 04018418
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/5kTnBarfqfz1AQSCpb2Zy0_l32o.roa
Signing time: Sat 19 Mar 2022 17:56:20 +0000
ROA not before: Sat 19 Mar 2022 17:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207442
IP address blocks: 193.219.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67208216 (0x4018418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Mar 19 17:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e644e705aadfa9fcf5010482a5bd99cb4fe5df6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:58:a5:4c:0e:09:c4:36:e1:7c:29:88:c9:2c:
50:0a:c1:c0:77:62:56:0e:db:d9:4c:36:dc:e5:5e:
00:9b:d7:17:bb:9b:e6:de:be:38:4e:49:bc:8b:44:
37:1e:94:71:28:f4:93:32:8d:b9:4c:91:9f:c8:ab:
8d:91:a6:ba:f0:78:22:d3:21:38:a1:6f:41:67:17:
80:fc:df:39:22:4b:d1:36:77:7c:d9:9d:8f:f6:de:
90:b3:fe:19:0c:65:4e:46:15:1f:a3:f0:17:5e:04:
fa:11:7a:6a:53:ae:2f:dc:5d:c3:7d:18:ce:bc:a0:
85:bf:ac:1e:91:a6:23:38:9f:46:2c:3c:45:97:dc:
1d:2b:d2:aa:83:45:3a:2b:35:38:3b:79:63:6e:55:
2c:77:0d:10:4a:ae:b5:a4:2a:71:26:b7:29:7f:b0:
91:32:f5:b4:0e:f8:33:61:32:36:44:8a:c4:7d:49:
83:a6:d2:cd:10:40:46:36:2d:c2:cd:85:72:17:f6:
10:91:60:74:4b:e5:ca:06:bf:5c:c1:8d:dd:81:91:
1c:35:65:b6:7e:4e:b3:31:2a:51:35:91:a4:61:c7:
e2:ed:f1:cd:45:23:c4:c8:d0:5a:12:4c:cf:ff:33:
fa:85:1c:da:36:20:1a:01:af:b7:95:ea:6e:53:c1:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:E7:05:AA:DF:A9:FC:F5:01:04:82:A5:BD:99:CB:4F:E5:DF:6A
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/5kTnBarfqfz1AQSCpb2Zy0_l32o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.112.0/24
Signature Algorithm: sha256WithRSAEncryption
23:35:d3:e0:80:85:27:05:76:f3:4f:1c:58:bd:4e:ab:bf:7a:
05:46:f8:a5:3b:86:34:76:26:78:c6:14:fd:fe:b4:ca:31:70:
90:e3:4d:45:02:a6:34:62:2e:70:2f:99:7f:24:60:61:69:40:
df:3e:dc:8e:41:95:b5:38:e0:b2:3d:33:42:57:c1:8f:47:bb:
60:75:0a:22:74:8d:44:ae:a0:d8:48:d3:5d:18:dd:95:6f:0a:
04:71:fb:28:ef:d9:38:a6:b3:76:79:91:81:ff:5b:1e:76:62:
f4:41:66:24:77:b0:57:d9:4c:6b:d3:6c:a7:7c:e3:96:86:5c:
a1:ef:7b:7a:96:f2:a8:86:06:f2:13:0b:28:b8:59:32:ff:87:
99:a4:f4:e3:6e:0e:c8:dd:1d:9f:30:0e:64:42:81:ed:c2:e5:
0d:7b:e9:0a:80:a0:bd:e9:75:fa:4e:30:d8:4d:26:9f:4e:6f:
43:16:97:e0:4c:30:63:12:ad:39:c4:8b:09:2c:8d:ad:39:4b:
3f:3e:0f:86:72:c1:99:35:8a:35:91:ae:ac:79:48:18:f9:b1:
68:1e:79:f4:41:72:f9:36:63:15:d3:03:b6:57:36:ab:86:b3:
77:23:ce:58:8b:3d:66:af:4a:5d:59:b1:b6:23:6b:c9:5a:e2:
12:c2:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org