Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/bMWYEKesDCZL8uo9yrTWiuORv54.roa
File: bMWYEKesDCZL8uo9yrTWiuORv54.roa (raw, json)
Hash identifier: CdtEPII2556jxLofjxoF7tTrxxZvujFNMUlxFim0Cys=
Subject key identifier: 6C:C5:98:10:A7:AC:0C:26:4B:F2:EA:3D:CA:B4:D6:8A:E3:91:BF:9E
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 03535FAE
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/bMWYEKesDCZL8uo9yrTWiuORv54.roa
Signing time: Sat 01 Jan 2022 12:03:01 +0000
ROA not before: Sat 01 Jan 2022 12:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212088
IP address blocks: 193.219.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55795630 (0x3535fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Jan 1 12:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cc59810a7ac0c264bf2ea3dcab4d68ae391bf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:3a:26:58:9f:07:e0:3f:97:97:00:2b:2e:
c3:10:e8:0a:57:4c:f1:49:28:cb:55:a1:74:22:52:
7b:32:e6:4b:5e:dd:8f:90:3a:40:bb:75:f3:e5:d3:
15:6c:4d:d9:e1:99:6f:bf:b6:3a:68:41:39:cd:73:
d4:42:92:95:27:9d:d3:7c:fe:53:a1:a7:73:d6:48:
1e:d9:c6:27:78:d6:95:58:da:87:23:83:cc:d8:77:
cc:3d:b7:34:50:87:5f:b3:d3:60:2c:47:23:f0:50:
8c:c7:da:07:26:d1:ae:29:b2:b6:c8:20:aa:b2:80:
a6:66:06:3a:1c:f5:5f:6c:e2:4e:82:6d:81:11:0f:
fc:03:3b:35:af:b0:01:82:78:7c:f8:59:6d:25:15:
51:39:95:9a:af:37:7e:46:28:1e:b2:9a:1e:f5:5e:
09:80:3e:9c:c6:33:f2:4e:7b:a1:c3:3f:7c:31:d3:
bb:7c:a6:17:8c:85:68:49:99:cd:b3:b1:e2:98:e7:
be:92:e4:65:79:94:78:7c:29:98:58:bf:de:fe:2d:
96:28:cc:ec:b9:c2:55:3c:18:2e:f3:3a:13:f7:c1:
b2:10:4f:1e:da:26:22:3e:61:f4:c0:b3:23:d7:e9:
dd:6b:90:13:39:66:ae:9a:34:09:f8:c7:08:76:a6:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C5:98:10:A7:AC:0C:26:4B:F2:EA:3D:CA:B4:D6:8A:E3:91:BF:9E
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/bMWYEKesDCZL8uo9yrTWiuORv54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e6:b8:de:09:b2:e4:a4:7a:dd:d7:45:53:a7:c7:65:fa:2d:
b8:ce:dd:e7:91:a0:76:8a:40:af:bb:5b:5f:d2:8f:cc:e5:c2:
6f:5d:0c:01:50:ae:b0:dc:32:4a:94:30:d4:96:f6:a4:c0:62:
37:33:5b:51:89:74:23:92:10:0e:c1:25:08:85:d8:4f:03:69:
f2:9e:08:6b:d3:24:c5:0e:2e:c3:5b:c3:69:22:64:05:02:65:
dc:ee:d3:59:1c:97:d0:1c:d5:45:89:86:9a:fe:c0:b3:91:84:
ab:c7:e7:96:ff:89:cf:d0:61:4b:f3:c0:7f:d0:4f:03:fd:3f:
62:cd:e2:2b:93:f4:e0:28:e9:44:6d:7b:4c:3f:65:98:a8:3b:
5a:44:80:9f:6d:d1:d4:88:d4:76:be:9f:34:f7:07:2c:b2:65:
6d:01:5b:6f:55:1e:0f:cc:ba:df:09:b0:dd:b2:06:b3:95:9b:
e7:35:d3:37:f6:f4:0f:c8:5e:d2:d1:bd:a0:6e:89:c2:97:73:
a0:fd:be:7b:1e:f0:9a:72:ab:a7:dd:56:4a:ef:37:71:bf:70:
5e:99:9c:49:c7:03:92:fc:90:b0:81:31:38:a3:72:2f:cd:d3:
23:80:cf:01:d6:96:84:6e:9e:7e:1d:5a:a2:d2:58:e6:64:e2:
52:10:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org