Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/OfZc2eIZynJf69yIdlkJlke_DN4.roa
File: OfZc2eIZynJf69yIdlkJlke_DN4.roa (raw, json)
Hash identifier: m9ei+nTngyazK2AJo8NjAlIEczg8h+Dz3+ErrMh+hdA=
Subject key identifier: 39:F6:5C:D9:E2:19:CA:72:5F:EB:DC:88:76:59:09:96:47:BF:0C:DE
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 036B1193
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/OfZc2eIZynJf69yIdlkJlke_DN4.roa
Signing time: Sat 01 Jan 2022 11:54:08 +0000
ROA not before: Sat 01 Jan 2022 11:54:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212043
IP address blocks: 193.38.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57348499 (0x36b1193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 1 11:54:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39f65cd9e219ca725febdc887659099647bf0cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:23:df:00:74:8b:55:70:8a:9a:c1:be:15:
d2:30:80:39:54:0b:30:7d:ae:a6:20:94:9d:be:12:
8d:43:15:e8:3a:57:62:19:15:11:c2:c6:7a:f8:d2:
13:16:13:c8:a5:2a:aa:ce:c8:f8:0f:9b:f8:f9:64:
4c:71:23:0a:4e:e4:58:72:ac:22:cd:b3:07:0d:48:
f6:87:2f:77:6c:21:73:4b:cb:f4:c7:d2:9a:03:54:
e4:8f:d2:b7:dd:bb:0a:51:23:ff:b8:92:29:0a:28:
57:87:29:9d:73:a0:66:e8:cd:ce:fd:cd:dc:8f:85:
5a:76:c5:98:25:8a:dc:eb:58:20:f9:e0:fb:2d:e0:
8c:49:94:56:5b:77:b9:8f:a2:6a:14:1d:0f:1e:de:
a1:48:a2:17:4c:f4:ee:e6:a3:1a:d8:3c:88:37:b6:
12:30:ee:69:28:67:04:db:ca:c6:f4:b6:12:cb:7d:
e6:2f:2a:9a:39:0c:21:05:f1:8f:4e:d2:36:27:1b:
d0:aa:95:79:2c:82:e9:fd:5b:5e:eb:d4:cc:8e:6f:
6c:84:36:e8:ac:39:09:46:7b:77:f1:03:85:23:60:
bb:88:6b:89:93:a6:5f:ab:3e:f0:f5:d5:9f:99:2c:
bc:7c:38:2f:fd:af:ea:19:70:7d:62:e0:14:24:20:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:5C:D9:E2:19:CA:72:5F:EB:DC:88:76:59:09:96:47:BF:0C:DE
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/OfZc2eIZynJf69yIdlkJlke_DN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ef:04:49:f5:a5:b0:14:52:09:51:b5:9e:07:59:b5:f9:fa:
a5:86:4b:ee:9f:fe:15:72:e8:bb:aa:3f:3d:5e:66:b5:32:97:
5c:a4:10:54:89:7f:ce:72:3a:00:fb:c8:80:b3:86:fe:9c:d2:
9d:0b:5c:1b:bb:eb:4e:e9:6c:21:07:42:4d:46:24:4c:5e:d3:
cf:81:24:f6:0e:ca:26:23:2b:6b:ea:4f:70:f8:c6:ad:41:25:
5c:81:f7:08:46:44:cf:63:c8:98:3e:3d:36:29:ae:22:ac:19:
f2:5d:44:1a:12:3d:c0:af:f3:c3:18:82:49:6d:3b:ca:08:5f:
7c:c1:b4:5d:bf:16:ab:0e:2c:eb:c8:32:3f:96:55:48:89:91:
21:c5:63:55:1c:eb:9e:ae:10:2b:00:fd:06:27:bd:86:00:1d:
55:69:de:99:19:63:11:94:30:aa:29:17:87:6b:9d:a5:48:23:
83:7d:fd:c7:4e:7b:d0:13:df:83:44:d3:b3:e4:b3:e0:7e:25:
67:22:36:70:ed:9e:35:91:1b:1e:28:a6:74:8f:13:7d:e7:3c:
91:59:97:11:07:f0:34:e1:06:03:19:09:65:d0:e4:4f:5d:d4:
f5:02:e3:88:31:93:21:0c:c4:7c:60:54:a4:29:4a:8d:65:f0:
cd:b6:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org