Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_K3IJYrHMgsX_PPjmnAzMPBWYH8.roa
File: _K3IJYrHMgsX_PPjmnAzMPBWYH8.roa (raw, json)
Hash identifier: HTtUUCrM92U1a2ZuR7kz/F097ZjqVO3/puGv2rq6dIw=
Subject key identifier: FC:AD:C8:25:8A:C7:32:0B:17:FC:F3:E3:9A:70:33:30:F0:56:60:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182820723927BFE96AB918D19CD5D44B859
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_K3IJYrHMgsX_PPjmnAzMPBWYH8.roa
Signing time: Tue 09 Aug 2022 09:54:42 +0000
ROA not before: Tue 09 Aug 2022 09:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 193.222.99.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:07:23:92:7b:fe:96:ab:91:8d:19:cd:5d:44:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 9 09:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcadc8258ac7320b17fcf3e39a703330f056607f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:64:3d:58:b8:72:71:96:c3:80:0c:52:08:
e9:26:80:91:b3:10:d8:da:97:8c:fc:40:b1:76:72:
b1:b6:01:bb:f5:ea:70:8a:38:34:c3:1d:60:38:72:
87:af:7a:0e:f3:88:93:54:43:b7:3c:c7:17:be:af:
4b:d3:8d:77:fd:4d:bc:23:93:d6:02:81:ea:9b:7b:
58:05:96:4f:ef:2a:ad:a9:cb:45:21:00:87:8c:d0:
12:c7:f7:e2:e9:cc:e4:36:40:e7:18:f1:ae:d4:cc:
13:14:1c:44:65:22:8e:90:b8:78:7f:91:88:5c:81:
77:99:53:a2:06:23:54:65:89:5c:18:e8:31:36:98:
d1:f3:52:1c:04:6c:1c:04:63:c5:07:13:46:a7:99:
40:62:83:30:10:60:fd:b0:12:32:ff:dc:6d:e5:ef:
9a:21:40:52:02:28:0d:15:27:58:40:12:28:54:c4:
1b:39:9c:c3:da:03:67:58:29:0e:db:8a:6d:b8:81:
8b:e0:30:13:d3:f9:08:9f:f4:ca:14:60:5f:63:4b:
e0:ed:9d:bc:9b:3d:53:e0:77:50:5d:bf:14:55:b5:
fa:a6:e0:64:c3:44:52:ba:cd:f9:fa:c9:71:60:0d:
b6:b5:6b:b8:4f:d4:72:8b:09:a6:ea:9f:f0:cb:39:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:C8:25:8A:C7:32:0B:17:FC:F3:E3:9A:70:33:30:F0:56:60:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_K3IJYrHMgsX_PPjmnAzMPBWYH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.60.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e0:cd:cb:14:c7:1d:68:7e:fe:ca:f3:07:37:d4:bd:0d:2f:
b9:64:b9:1e:73:47:e6:24:ab:eb:a3:0d:79:62:ec:dd:91:df:
7b:a2:ec:e0:ff:eb:05:17:5e:fe:91:e2:65:ba:cf:dd:eb:04:
0b:39:99:2d:4d:d7:f8:44:07:9b:e1:0b:86:8b:dc:62:f8:bf:
64:66:68:6f:a0:eb:f5:98:82:05:44:9b:d2:3b:c0:6b:40:5e:
ca:d7:21:67:8a:6c:80:d8:2c:5b:6c:e1:f4:80:23:da:5d:ac:
01:f5:e8:56:42:d3:02:24:f9:bd:f5:cc:da:89:0c:1e:0a:2f:
90:83:bc:a4:88:72:14:96:9c:2b:fc:91:9c:33:13:3f:72:5c:
db:6b:19:82:aa:74:01:71:af:0f:6c:df:d9:c5:79:a4:e1:12:
ee:23:5a:89:ad:98:bf:09:75:39:38:0d:80:a7:e8:b4:75:42:
22:f0:f7:6d:89:14:99:19:7b:c6:bc:83:a1:e3:9d:0f:09:30:
12:ee:13:1a:92:3a:e7:68:ee:5c:d3:f8:f9:bc:1d:a4:8a:de:
e9:77:ff:1b:ff:6e:46:f0:32:ed:a9:ff:a5:5b:05:25:f9:17:
4b:88:3d:ec:23:9f:71:f2:61:23:fe:7a:69:76:37:c3:8a:ee:
90:96:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:37 2024 by rpki-client on console-ams.rpki-client.org