Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/oa_DL3kum5CiM4Jlrnd5UeXC3V8.roa
File: oa_DL3kum5CiM4Jlrnd5UeXC3V8.roa (raw, json)
Hash identifier: 5/BZWoeChpws7igzQmHh2Vtg+4MC/iHiJABBsSpX/F0=
Subject key identifier: A1:AF:C3:2F:79:2E:9B:90:A2:33:82:65:AE:77:79:51:E5:C2:DD:5F
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 3810C6
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/oa_DL3kum5CiM4Jlrnd5UeXC3V8.roa
Signing time: Sat 01 Jan 2022 00:52:37 +0000
ROA not before: Sat 01 Jan 2022 00:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209386
IP address blocks: 193.29.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3674310 (0x3810c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jan 1 00:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1afc32f792e9b90a2338265ae777951e5c2dd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:ae:dd:b7:dc:e7:0b:60:1a:4b:ec:a6:62:
cb:0a:36:2f:b5:89:a1:63:49:cf:2f:38:e3:45:d1:
89:a2:d1:8e:f7:7c:a7:03:9d:7d:4e:bf:45:6c:5c:
a9:86:40:e0:bf:19:eb:60:e8:8a:41:9e:12:ea:15:
3a:d2:3c:28:5f:db:76:f2:92:9d:59:b5:34:85:44:
e3:c6:a6:c2:36:a6:a5:97:10:53:1a:85:cf:58:ff:
d5:0d:b6:25:03:dd:87:d3:85:e9:1f:f4:f3:4e:6a:
c2:bf:ef:da:99:7a:e3:c4:2f:ae:ce:f7:a8:09:65:
5c:b1:02:22:25:eb:4a:eb:4a:ea:cf:8d:66:d5:24:
54:93:d0:ff:c8:3d:42:fd:d5:a0:d6:6d:85:59:0e:
0c:34:b7:13:40:f9:32:f4:a8:57:3f:5b:0e:dd:af:
f8:0a:2e:cb:cc:17:ad:d8:14:7c:bc:fd:00:a6:5b:
c3:8b:45:3b:b1:80:87:fe:46:77:d9:9b:3e:41:e4:
8d:56:93:b8:37:a7:54:ab:42:f7:b3:c4:a2:c0:7a:
5b:87:a7:a9:5d:3c:78:9e:e8:06:9d:76:4d:ce:62:
f7:7d:8a:e6:1a:e3:89:be:1f:5b:0b:53:92:38:af:
a3:68:c2:27:2b:09:ef:29:11:c2:0b:9d:b8:c3:ec:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:C3:2F:79:2E:9B:90:A2:33:82:65:AE:77:79:51:E5:C2:DD:5F
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/oa_DL3kum5CiM4Jlrnd5UeXC3V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.44.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e2:50:e4:20:6e:4c:d0:73:98:a2:e4:f2:1b:d6:fc:35:af:
8a:b1:4c:79:ab:e7:52:f3:b3:9e:3a:9b:69:0c:02:40:70:62:
1f:7d:f8:c2:96:3e:ff:c8:c9:06:71:e9:59:98:19:fc:b1:fd:
77:9c:31:50:fe:15:b9:f2:ee:c4:e7:9d:fd:11:13:fe:09:31:
da:a3:2e:f3:04:2e:a4:11:80:11:b6:5a:0b:7a:3c:99:c0:0c:
b9:2e:b1:f0:33:5b:81:37:26:11:5e:37:3f:48:78:08:21:e7:
e5:85:98:b9:af:6f:a3:f0:71:5e:28:a3:cb:0b:40:29:70:2f:
e3:b7:a5:e6:ec:78:33:01:0e:3c:d6:c9:65:29:39:8c:fc:e1:
5e:39:69:d2:cf:80:5a:60:ed:02:4c:02:b9:3f:c6:ec:60:a4:
c7:d9:27:d1:d8:bd:06:e4:6a:d0:72:75:74:c4:7c:10:e6:17:
6f:77:0e:98:b8:c6:0c:64:35:e4:2e:b1:15:0b:b2:ab:75:3b:
60:af:d8:65:c6:f5:ba:d6:38:3b:41:2d:ab:3f:32:7a:fb:e7:
f9:1e:60:88:09:5a:a0:5f:6f:8c:f3:f3:83:61:4f:60:f5:4f:
97:6e:c5:c4:12:3b:a7:7f:87:52:e3:7e:cd:a4:7c:e6:9c:f6:
fd:c2:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:12 2024 by rpki-client on console-ams.rpki-client.org