Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/suKhe_5MeHipRFEyDZtD9EN4ocg.roa
File: suKhe_5MeHipRFEyDZtD9EN4ocg.roa (raw, json)
Hash identifier: +bdOR3B2VHMUDr6bNTipR3l5UF3fn+2b62kRxdoQj6U=
Subject key identifier: B2:E2:A1:7B:FE:4C:78:78:A9:44:51:32:0D:9B:43:F4:43:78:A1:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184CC64FE0BC3ECD5D6BABFEA9FE3B48AAB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/suKhe_5MeHipRFEyDZtD9EN4ocg.roa
Signing time: Thu 01 Dec 2022 06:34:41 +0000
ROA not before: Thu 01 Dec 2022 06:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202685
IP address blocks: 193.35.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:64:fe:0b:c3:ec:d5:d6:ba:bf:ea:9f:e3:b4:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 1 06:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2e2a17bfe4c7878a94451320d9b43f44378a1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:09:73:d5:ea:d4:f1:d4:52:bf:7a:d6:f0:
55:8f:50:d6:b8:3d:3d:9b:c9:37:bf:02:9d:72:68:
90:17:40:0d:d5:f6:ce:bf:0e:05:4f:53:0f:ee:fb:
20:16:5e:ef:3b:ac:0a:c9:03:8f:27:b0:6b:02:0a:
24:e2:7a:a2:76:3a:92:19:0f:67:fb:60:36:a3:9f:
50:04:89:ba:d8:a7:d3:e1:94:a9:0e:7c:bc:e4:3d:
93:23:b9:41:7a:38:67:67:26:7d:5f:0d:85:67:2f:
0f:1f:a5:a5:89:c2:e0:9f:8e:ab:5e:a0:27:a3:98:
ac:f7:f0:d6:93:a0:c5:8b:29:46:a1:fb:f2:a5:36:
26:2d:40:1d:d4:7f:1c:23:3c:b3:a4:fb:8c:c3:82:
28:6c:9c:5a:5f:d7:b6:c9:72:e9:1c:10:9e:30:b5:
7d:c6:6c:8f:3b:63:a6:22:ff:d2:86:c9:63:5b:d8:
e6:88:c8:aa:57:6e:7f:bc:60:45:54:30:8c:10:8b:
f0:5e:b7:ef:82:d9:80:87:c7:d0:c6:35:a2:c0:31:
61:df:32:4f:26:cd:87:a7:7d:fa:b9:49:33:d0:26:
22:61:2c:44:23:33:da:82:0e:dc:80:3b:70:3c:1f:
15:5b:b0:7b:1b:9f:cd:20:34:2f:47:3e:43:8c:8d:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:A1:7B:FE:4C:78:78:A9:44:51:32:0D:9B:43:F4:43:78:A1:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/suKhe_5MeHipRFEyDZtD9EN4ocg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:86:ab:91:13:50:fc:da:8b:55:5b:79:3c:fb:d5:2a:51:a9:
f9:8c:d4:75:20:96:cf:85:98:aa:31:9d:4c:07:40:ab:2b:0f:
5e:78:d4:79:b5:e8:e4:a4:37:8a:d0:77:db:b4:1e:b9:c8:94:
9a:16:27:8a:7c:9b:dc:68:0f:37:41:5e:6a:30:f2:48:ea:f4:
5d:e7:d6:15:83:0d:7b:f1:5e:15:a3:ec:ae:91:57:09:bd:81:
aa:13:75:ac:8c:a7:10:68:47:f5:d4:73:74:fe:38:8f:d6:25:
e9:89:a7:71:4d:f3:8c:8f:d1:26:54:40:6c:bf:56:6b:fd:37:
83:58:a3:e2:06:c1:c3:af:5c:5c:95:f9:6e:92:54:63:08:ec:
77:ef:c5:1f:d1:b2:d2:f7:5b:61:13:e4:dd:a8:81:4d:d3:5c:
78:98:9b:eb:c1:3d:dc:04:2c:dd:10:06:b3:0c:8e:8a:81:be:
8f:b3:61:1c:b6:bd:91:a4:6f:84:cc:a8:3d:cc:4b:d8:03:b1:
d4:8f:5d:d7:5a:95:e4:8b:ea:f3:4d:23:19:e2:64:41:0f:c7:
38:40:bf:96:63:2f:c5:41:cf:38:61:8c:4c:9b:90:75:7c:36:
2d:92:5b:a2:71:e0:0b:95:ec:1d:dd:cd:ad:37:03:f6:4f:9a:
7f:95:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org