Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/rroHxrV1YZ6AufZ3CGk06hT6A-U.roa
File: rroHxrV1YZ6AufZ3CGk06hT6A-U.roa (raw, json)
Hash identifier: 3J9nQBHsp11rLZw99nWiiEHDD0+eJDrWfOgL61R7mlc=
Subject key identifier: AE:BA:07:C6:B5:75:61:9E:80:B9:F6:77:08:69:34:EA:14:FA:03:E5
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 0184BDB475129866C8A1B356B8ACA8131DA0
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/rroHxrV1YZ6AufZ3CGk06hT6A-U.roa
Signing time: Mon 28 Nov 2022 10:07:10 +0000
ROA not before: Mon 28 Nov 2022 10:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31534
IP address blocks: 193.16.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:b4:75:12:98:66:c8:a1:b3:56:b8:ac:a8:13:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Nov 28 10:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeba07c6b575619e80b9f677086934ea14fa03e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0d:17:32:e0:7f:cf:82:d3:aa:b3:6f:cc:0a:
80:4b:e7:88:5b:fb:6b:9c:8b:1e:16:e6:b6:27:11:
26:f7:10:9b:e2:81:81:b0:43:a9:5f:53:84:7f:89:
cc:27:92:05:3b:42:17:29:03:b6:e7:d8:61:9f:91:
9c:5c:d4:24:56:9b:1e:80:c4:3f:1c:53:d0:b0:4a:
b2:87:13:28:24:a3:fa:4d:d5:2f:1e:2b:09:7c:4b:
de:22:24:37:4c:74:b5:98:ac:6e:a1:d0:a3:ab:78:
29:a7:33:59:b6:50:78:1e:43:8b:bc:8c:36:e2:32:
56:4b:9b:fc:d2:1d:d9:53:16:db:5b:a6:22:bd:41:
d3:0f:d5:2e:c8:22:5e:6c:46:21:b9:75:43:d5:d2:
2b:3f:b9:73:81:fa:af:1a:c9:79:5c:e0:a2:72:81:
05:a6:18:74:66:e5:8b:5a:23:84:11:62:14:eb:9d:
0d:02:d2:1a:43:63:8c:a9:36:cd:6e:15:f2:93:d1:
74:4e:72:00:f8:c9:d2:ca:11:7f:ea:43:49:92:b9:
b4:c1:49:cb:73:4d:9c:3e:7c:45:1c:bf:a7:a2:06:
a6:d4:51:02:c0:37:f7:53:cd:0e:32:87:2f:0d:d6:
eb:b0:bc:e1:dc:c4:93:66:c6:f7:b7:6e:3d:ba:9c:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:07:C6:B5:75:61:9E:80:B9:F6:77:08:69:34:EA:14:FA:03:E5
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/rroHxrV1YZ6AufZ3CGk06hT6A-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.102.0/24
Signature Algorithm: sha256WithRSAEncryption
53:67:06:48:40:cb:1a:9b:b6:9b:67:6d:86:9e:71:c9:b9:ab:
9f:c7:b3:f7:26:85:f8:bf:f1:50:21:db:32:ac:6d:e3:97:a1:
8f:10:7d:65:d7:62:52:5f:ac:40:3e:cc:8a:5a:d7:c6:46:1b:
5d:59:25:44:ed:f7:39:1a:4e:5a:e0:92:6f:9d:66:71:9c:95:
76:68:a9:48:74:89:94:f5:46:20:26:00:89:1e:67:cd:35:6a:
f5:a3:93:3e:7b:e8:6d:e2:4b:41:28:de:f7:a8:4a:d5:90:c1:
fa:1e:d5:b0:64:ca:b2:cf:19:7b:2b:31:f3:ce:fb:c4:a2:f3:
e1:d5:e6:1d:5f:73:fa:cb:a5:45:15:47:e1:fe:df:29:29:10:
7d:2c:35:10:bd:f6:9d:2b:ac:d4:6c:5a:52:b8:e2:9e:7c:5a:
f8:9c:ce:68:58:74:b5:b8:69:78:4b:6a:6a:29:e2:1d:88:f4:
06:57:c3:9d:73:b3:30:c3:66:e7:35:9b:39:92:33:0f:c9:fb:
d9:04:9e:6b:a8:5e:b4:97:67:17:0b:34:6d:6a:37:04:5d:cf:
d9:b7:2c:90:05:31:40:35:2c:a3:be:9d:57:90:0a:14:22:0c:
6d:43:4b:81:5f:05:14:f1:ea:be:29:61:6d:90:82:a7:f5:09:
f2:5f:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:31 2024 by rpki-client on console-fra.rpki-client.org