Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/m0lpe0Bhbw-vSbNZJcUubbvG8RY.roa
File: m0lpe0Bhbw-vSbNZJcUubbvG8RY.roa (raw, json)
Hash identifier: RNOPGzkyFleJCz/TF9PTrxtM7XA7X2OVAyG9dUy51tc=
Subject key identifier: 9B:49:69:7B:40:61:6F:0F:AF:49:B3:59:25:C5:2E:6D:BB:C6:F1:16
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0181F465088DF1BFDC73B1352D77AC0892BE
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/m0lpe0Bhbw-vSbNZJcUubbvG8RY.roa
Signing time: Tue 12 Jul 2022 21:51:10 +0000
ROA not before: Tue 12 Jul 2022 21:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 193.42.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:08:8d:f1:bf:dc:73:b1:35:2d:77:ac:08:92:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jul 12 21:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b49697b40616f0faf49b35925c52e6dbbc6f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:dc:f6:f6:06:fc:72:06:21:d3:7a:28:f5:
87:4c:0f:2b:3a:7c:4b:5c:ea:89:39:3a:96:0e:9a:
4c:6f:a4:47:ac:6b:c9:7e:7a:65:ef:e4:6f:a9:61:
12:3b:89:01:57:42:3b:68:48:38:33:b4:12:67:58:
70:a6:21:0d:6e:8a:60:d9:51:ad:96:df:79:71:3d:
1c:76:54:0a:bf:d1:33:80:d3:93:b5:71:3d:d5:15:
e7:2c:d6:0c:4d:9c:30:83:9f:29:63:4b:5b:47:86:
7c:24:80:bd:c6:6b:8f:05:7b:6c:ad:f9:c6:1a:41:
b3:6b:76:f1:04:ab:5a:2a:02:4a:50:93:d4:25:91:
fb:88:e7:35:06:3c:2b:1a:d6:9b:04:39:8e:fa:18:
ed:a5:29:c5:ca:fa:17:e5:8b:8f:ae:90:40:e5:9e:
c5:5e:73:14:3d:5b:ec:85:ff:f8:39:01:de:6a:0b:
30:ae:e1:c8:66:47:c3:74:93:e4:2f:17:c2:ec:d0:
cc:7e:00:96:98:e7:d9:84:28:a0:18:e4:f1:9c:6c:
df:b0:5b:55:9b:eb:5d:94:38:28:e9:48:35:b5:f1:
48:de:3c:c3:2c:7a:6a:19:ef:d0:c2:be:8d:bd:2d:
3a:f9:7a:8b:14:1e:f8:d3:15:6c:2a:01:7c:55:47:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:69:7B:40:61:6F:0F:AF:49:B3:59:25:C5:2E:6D:BB:C6:F1:16
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/m0lpe0Bhbw-vSbNZJcUubbvG8RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f2:42:a2:a5:7c:d2:3d:7a:9e:d7:b7:d2:e8:b5:55:b6:e6:
f6:85:0e:f8:1c:ae:af:35:cd:ce:61:55:10:f8:9f:98:c6:9f:
4f:bb:e4:d1:46:63:63:8e:58:c2:cb:a5:f7:60:96:a0:b2:c3:
58:00:ac:ff:66:29:fe:83:84:d6:38:77:7b:69:38:80:dd:80:
a1:f8:d6:b6:26:d5:b3:7c:a4:8e:52:4c:1c:9d:11:2c:c8:0e:
d7:fa:2b:9a:0f:d5:88:43:7e:61:ec:fc:80:45:1c:8b:e3:ab:
56:45:b8:ee:f8:c3:b8:9c:36:56:56:78:56:6c:92:31:3b:e2:
2c:c1:74:04:5a:c9:27:7b:81:d0:6b:e4:ce:ca:d6:60:34:64:
8f:79:8b:ec:1d:21:8f:de:db:de:3c:45:a0:e0:50:48:0d:09:
4a:a2:d4:c1:90:a3:ed:f1:4c:41:7b:ab:39:45:ab:12:12:58:
19:36:a7:36:db:86:a0:04:0c:28:72:12:d4:b1:9d:5f:53:cf:
98:d4:ca:90:10:78:79:41:ff:5f:85:8d:20:5b:c5:5f:80:66:
c8:fb:c6:af:3f:af:97:c2:f5:f9:4c:e5:22:6a:8d:da:2b:c7:
fe:43:ac:9a:30:3a:dd:25:48:72:d4:c0:36:ca:c4:ab:91:bc:
1b:6f:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org