Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w392ZTo7EC7qDQVpAbaNl9-W9XU.roa
File: w392ZTo7EC7qDQVpAbaNl9-W9XU.roa (raw, json)
Hash identifier: GYcOtp8f/1EJYEp8MTkXBqx9RVsKD2DsmQr9g0AKp2Y=
Subject key identifier: C3:7F:76:65:3A:3B:10:2E:EA:0D:05:69:01:B6:8D:97:DF:96:F5:75
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182461D0CCA57E1B6CDAC3C4BFF909CF08C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w392ZTo7EC7qDQVpAbaNl9-W9XU.roa
Signing time: Thu 28 Jul 2022 18:41:25 +0000
ROA not before: Thu 28 Jul 2022 18:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207390
IP address blocks: 212.193.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:1d:0c:ca:57:e1:b6:cd:ac:3c:4b:ff:90:9c:f0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 28 18:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c37f76653a3b102eea0d056901b68d97df96f575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:2d:12:38:b5:68:36:a8:d8:5a:75:ab:67:
0d:42:e9:04:fb:98:fb:fb:cc:f4:de:bb:eb:4c:79:
a5:5e:b1:1f:fa:f2:38:13:9b:da:c1:ae:d8:e4:6a:
bd:47:55:7d:8e:dc:ca:7a:28:5b:9c:db:4a:92:77:
0c:66:88:2e:33:90:d4:40:a9:98:53:3f:c0:2b:4b:
cb:f3:b5:6f:54:46:8d:fd:48:c8:eb:e3:3c:4a:95:
5c:16:1c:1d:28:e4:7b:12:57:1c:3b:fa:68:0b:9b:
d1:82:1f:e7:73:2d:05:92:64:96:a3:35:c9:01:64:
bb:b1:ef:25:dd:05:bc:d4:f5:e8:50:13:b3:88:0b:
68:02:86:e6:10:1a:4e:a0:0d:0f:2c:32:1f:fe:d4:
df:83:fc:d5:46:a5:20:1d:54:6e:86:ef:9b:42:79:
d4:6d:37:ab:28:b9:09:ee:4a:a3:b9:14:52:0a:dd:
9b:4a:34:b4:3d:82:11:fc:24:20:0c:02:23:46:3d:
9a:d7:91:a7:b7:f9:a5:e8:90:d3:2f:d5:cd:80:77:
33:d5:fb:c4:08:98:2e:19:a0:41:1f:45:32:08:ba:
aa:35:98:98:03:58:0b:ba:dd:d0:0f:87:9a:71:79:
f0:47:6b:b4:e5:aa:3e:da:da:e2:e5:83:e0:01:90:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:76:65:3A:3B:10:2E:EA:0D:05:69:01:B6:8D:97:DF:96:F5:75
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w392ZTo7EC7qDQVpAbaNl9-W9XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f2:24:b1:cc:6b:24:4d:81:e3:18:72:24:85:c6:3f:28:60:
bc:ef:4f:8d:a9:10:ba:58:da:b0:52:43:24:d7:ba:3c:9c:f5:
01:77:93:7d:7e:f2:74:79:58:bd:be:af:90:53:1a:f5:08:da:
8d:e7:a9:d3:ba:5a:77:2e:c1:19:61:96:7f:02:38:88:08:f3:
98:24:36:58:11:aa:d8:b6:46:2e:8a:c7:cd:cf:31:74:0b:a3:
8c:68:29:43:1b:d8:f6:3c:47:93:b1:f1:7f:25:4d:10:a0:ca:
78:7d:75:e6:0f:49:73:60:0d:ec:21:8b:aa:37:4b:1b:f7:e1:
97:52:17:1b:f0:71:29:e3:ab:da:cc:f4:6b:4e:45:fc:fa:e9:
34:cb:29:5f:ee:83:23:15:b6:02:1a:16:75:04:01:75:7a:5a:
f8:a4:6b:22:e2:d6:a9:d4:92:ea:d4:77:d9:8d:d9:b8:42:fa:
25:c4:a5:44:1e:db:39:bd:8f:e8:eb:04:9d:de:42:17:90:75:
2d:73:bc:11:21:8c:88:e1:ba:5b:6b:31:fd:66:80:e1:5d:15:
70:2e:1a:36:b2:31:35:1c:5d:8c:44:2a:01:ad:b4:f6:b0:fd:
5a:a7:bb:68:99:81:fe:b9:ab:03:72:99:2e:61:11:0b:3c:02:
dd:1c:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:14 2023 by rpki-client on console-fra.rpki-client.org