Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CRQob_Hw_Fu8ujNs0OwAx0CKOwM.roa
File: CRQob_Hw_Fu8ujNs0OwAx0CKOwM.roa (raw, json)
Hash identifier: 3/KO4iJIsa1MNIAohYj6Mla5TMrGenzGCtBoc6Tv86Y=
Subject key identifier: 09:14:28:6F:F1:F0:FC:5B:BC:BA:33:6C:D0:EC:00:C7:40:8A:3B:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01845B6C712200C907B01C4E85B8015E09BE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CRQob_Hw_Fu8ujNs0OwAx0CKOwM.roa
Signing time: Wed 09 Nov 2022 08:05:43 +0000
ROA not before: Wed 09 Nov 2022 08:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 212.193.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:6c:71:22:00:c9:07:b0:1c:4e:85:b8:01:5e:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 9 08:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0914286ff1f0fc5bbcba336cd0ec00c7408a3b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:1f:72:7d:a5:f0:88:11:95:20:db:20:5e:
fe:55:d6:91:94:3f:63:93:02:96:7e:5d:fb:9d:7a:
ef:b0:33:49:0b:4e:65:55:2e:c7:8b:eb:8e:9a:6a:
4d:34:32:db:e9:d9:6c:07:b6:97:aa:27:0e:45:49:
94:3a:b6:9b:3b:ce:4b:7a:1f:eb:3a:d8:80:ba:ac:
11:90:9b:7f:18:2e:71:9c:9f:de:c0:ca:7f:d5:80:
f7:4c:ea:c4:77:55:90:34:c2:bf:c2:b5:f1:03:c0:
89:58:7a:df:8a:5d:b6:1d:e6:70:4c:71:23:a4:41:
7f:a4:cf:3f:1e:de:1a:2f:8d:86:a7:05:c6:b5:bf:
fd:f5:ce:b1:4f:d8:cc:d7:ad:3b:bd:98:f1:1f:59:
64:44:e5:b4:22:2c:44:eb:99:7a:71:ab:06:02:60:
01:11:1b:9b:f0:d8:f9:c6:82:da:8a:bc:3d:9d:06:
87:18:9d:9c:17:7a:22:b1:e0:ea:3f:db:f7:6b:d3:
26:0e:cb:8d:88:8a:a4:b0:db:08:c7:4e:b7:f6:5c:
f5:a5:21:23:74:b5:3e:78:80:8c:0b:e1:4d:e8:d2:
3c:5a:ba:d7:95:81:a1:90:92:0f:0f:ff:37:16:41:
b4:ed:00:b1:7a:7b:c9:15:9c:88:8d:27:bc:bb:d2:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:28:6F:F1:F0:FC:5B:BC:BA:33:6C:D0:EC:00:C7:40:8A:3B:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CRQob_Hw_Fu8ujNs0OwAx0CKOwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6b:97:62:de:2d:78:e5:ab:25:9d:87:82:c4:86:dd:65:d3:
d4:fe:b5:6a:f5:a3:f0:9d:21:8b:09:68:34:c6:07:ea:55:6b:
86:17:81:c8:c9:0d:62:d9:c8:35:ee:ff:89:65:85:0f:2c:6e:
60:1f:8d:b5:70:19:e1:6a:0e:a9:15:36:d7:b3:1b:e9:cd:cf:
f9:a7:49:ad:81:fc:a0:7d:5c:1f:c9:20:70:14:bc:7b:bd:c5:
8f:14:a4:4d:d7:16:73:8d:4d:be:5b:7f:0a:a1:87:59:1d:95:
a1:18:17:4f:bc:13:25:f0:1d:a2:08:da:a1:9d:13:e8:39:f4:
18:fe:2a:59:ed:dd:5c:09:67:52:18:f3:d9:43:d0:47:42:62:
cc:82:38:76:ff:a9:0e:79:2f:29:f2:f0:c6:d0:4e:6f:85:e8:
c6:96:16:24:a9:39:e8:d0:e9:25:d0:fc:e3:50:d0:b3:30:85:
87:dc:41:b6:59:24:b5:eb:b2:49:1a:0a:a9:18:81:30:23:f7:
f6:13:ad:02:7f:2a:0c:38:49:c7:dc:ff:af:8b:5f:bf:e3:7d:
fe:5a:0d:fc:13:22:5d:ca:2d:28:38:1c:81:5d:01:de:3e:55:
95:df:1c:f3:3c:98:f0:91:13:86:dd:fe:81:bc:69:0d:f1:b5:
50:fd:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:09 2024 by rpki-client on console-fra.rpki-client.org