Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa
File: bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa (raw, json)
Hash identifier: HwAcy9XKFJjbKfD21YhLxx3hLUg9ZZj4184iox5ai44=
Subject key identifier: 6D:9D:68:31:86:69:49:02:B9:FF:27:52:AD:71:13:F0:82:50:9B:49
Certificate issuer: /CN=e80a19bb3522df73fee1fe22a8955429931c9756
Certificate serial: F8CCCA
Authority key identifier: E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa
Signing time: Sat 01 Jan 2022 11:01:24 +0000
ROA not before: Sat 01 Jan 2022 11:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 193.201.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16305354 (0xf8ccca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80a19bb3522df73fee1fe22a8955429931c9756
Validity
Not Before: Jan 1 11:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d9d683186694902b9ff2752ad7113f082509b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:39:9f:c8:ec:d5:e6:e5:69:ab:9c:c3:55:
85:ac:1b:60:66:fc:50:f3:07:fc:98:df:46:0f:71:
9e:9d:91:d7:de:7c:f2:a2:ba:f7:cc:51:2c:a1:46:
b1:c7:9b:9d:cd:2a:7e:09:c9:d2:3d:e4:27:79:ac:
a8:e8:ae:51:4a:a3:8b:49:11:96:7d:7f:6a:e3:ff:
6f:85:be:47:6e:18:63:d2:6a:4b:12:d4:1f:ab:03:
4b:ef:07:5d:3e:49:64:46:71:6f:39:06:0e:6a:59:
a4:e3:f6:5d:04:c1:76:dd:1c:c4:7c:2d:3b:12:e1:
29:4e:3f:9a:48:a0:fb:ae:74:d4:ee:70:99:ad:82:
3a:e4:96:e9:41:ca:50:e1:67:3f:b6:69:1b:06:fd:
3a:a6:b6:30:02:e7:3e:d4:11:cf:c4:6f:3c:13:51:
86:0f:87:5f:7e:ef:c2:b7:10:f4:d2:d1:4b:20:c5:
65:65:54:08:d4:ad:44:34:d6:4a:47:18:34:e2:38:
93:73:c0:79:36:51:72:02:d9:3e:f1:89:e4:f1:9b:
dc:0c:7a:0f:3c:c6:bb:f8:62:37:91:bc:1d:49:d9:
e8:a5:b7:e5:0d:ed:2a:fd:90:d9:82:77:12:8e:26:
0e:d6:02:f5:ba:bd:ca:09:14:1f:3b:3a:c9:37:52:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9D:68:31:86:69:49:02:B9:FF:27:52:AD:71:13:F0:82:50:9B:49
X509v3 Authority Key Identifier:
keyid:E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/bZ1oMYZpSQK5_ydSrXET8IJQm0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/6AoZuzUi33P-4f4iqJVUKZMcl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.10.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5f:2f:7e:a2:bc:be:94:7b:73:56:52:b9:15:64:1a:c2:dc:
17:63:38:ba:d9:7e:d1:06:94:4f:19:da:64:b4:db:c7:23:77:
55:87:4c:33:5a:09:1a:7c:a0:23:b9:60:5d:f5:95:c6:07:ca:
2c:f3:31:9c:9b:79:42:4a:04:35:34:d6:24:bf:3c:77:fc:7a:
fe:40:96:43:62:70:4e:15:ab:ef:ca:ea:f4:6a:72:e4:7e:ee:
90:4b:a9:56:b9:d6:70:cd:52:f5:60:aa:31:3b:93:b2:ce:fb:
42:cd:0c:0e:bc:dc:38:e7:ce:27:e3:cd:c0:d3:85:1c:6e:88:
99:5a:f0:9e:77:33:06:e0:46:cc:01:e6:7e:14:53:11:ee:96:
7a:99:7c:45:83:4c:e1:ba:1f:8a:2a:10:2e:e2:b5:a8:ba:a1:
46:d0:34:df:cc:71:bd:ad:c8:e3:5c:ec:f9:87:51:be:5d:6a:
ba:00:71:2b:d1:f4:09:06:15:f1:01:4c:2a:93:54:6f:0d:23:
64:c6:8f:c5:86:56:da:a8:ad:b6:5e:a0:5c:0c:66:f8:74:4b:
a0:73:8e:79:b5:0a:24:69:6d:c8:7c:91:25:2e:a0:b2:e2:78:
92:ae:cf:6c:13:a2:c2:00:9b:9b:f7:b8:5c:d2:d1:8d:be:d1:
b2:d1:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:31 2023 by rpki-client on console-fra.rpki-client.org