Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/U-j2KB9-AH-n-ImgnddjW4p1q-w.roa
File: U-j2KB9-AH-n-ImgnddjW4p1q-w.roa (raw, json)
Hash identifier: 6afno6tx128pCYoiWC7vaKcjStgM6B7LEi0HlXh2AM4=
Subject key identifier: 53:E8:F6:28:1F:7E:00:7F:A7:F8:89:A0:9D:D7:63:5B:8A:75:AB:EC
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 033D75A7
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/U-j2KB9-AH-n-ImgnddjW4p1q-w.roa
Signing time: Sat 01 Jan 2022 04:56:33 +0000
ROA not before: Sat 01 Jan 2022 04:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13039
IP address blocks: 193.102.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54359463 (0x33d75a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jan 1 04:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53e8f6281f7e007fa7f889a09dd7635b8a75abec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:18:86:e5:95:ab:02:ca:d7:46:37:fd:00:
d0:80:69:c5:26:a2:73:e7:46:7a:cc:48:7f:ec:d3:
55:93:5c:f2:f9:4c:10:d9:6e:a0:7e:c7:f5:5e:ea:
f8:f8:2e:b3:d0:18:55:5c:8c:9f:36:74:5c:ba:7a:
5e:01:79:ad:c3:10:d7:51:99:27:a8:c0:f1:63:65:
28:3c:10:4f:bd:7d:4a:e1:ae:58:c6:75:c1:eb:0f:
a1:9f:30:24:aa:f2:da:93:21:b1:da:a9:ae:34:0c:
8d:d0:18:7e:ed:d6:fc:49:e1:cb:c9:c0:1a:26:3a:
4d:61:49:7c:d9:4e:26:ce:20:e3:d8:3e:52:41:e4:
a6:56:78:4f:ab:07:3e:41:23:ad:a6:c3:e5:f9:61:
a5:ae:4e:f6:cd:37:6a:8c:a6:10:5c:85:db:d4:0d:
0e:ef:a5:fc:14:1d:54:5b:ca:ef:5f:bd:19:1d:35:
47:d7:f2:8d:b7:ac:97:60:3b:3c:a7:d8:c6:26:e2:
a4:dd:54:5a:22:72:9a:dc:59:66:82:65:ce:9d:e3:
10:30:c0:9b:5b:d1:11:9f:ef:ff:37:4f:13:be:be:
05:2f:d1:7e:f0:f7:8b:95:64:08:ce:ad:2a:2c:4d:
dc:04:a0:8b:b1:c8:05:82:64:ae:3a:9c:c0:aa:0e:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:F6:28:1F:7E:00:7F:A7:F8:89:A0:9D:D7:63:5B:8A:75:AB:EC
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/U-j2KB9-AH-n-ImgnddjW4p1q-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:33:f8:b1:28:94:0b:c2:25:02:7d:fb:26:c7:eb:69:52:5b:
13:a7:4d:51:fa:29:1c:9b:67:14:df:d0:b8:4a:61:bc:a3:26:
c2:45:7a:a3:68:9c:94:a3:60:3f:87:a5:6b:ae:e5:e7:a8:89:
f3:da:70:fd:b9:10:58:27:e0:cd:2f:0d:8e:b1:ff:4e:55:ff:
b8:4c:72:48:4f:4b:7a:e8:5b:55:6a:99:69:4f:50:b1:5a:22:
f8:70:22:d4:9f:c0:a0:30:6d:81:1b:ed:f0:66:43:32:20:d3:
a9:df:62:a6:0b:16:c8:58:69:80:9d:1f:21:cd:a7:72:78:3d:
67:8d:b2:e0:cd:b8:d6:97:2f:82:7e:06:7a:10:ed:a3:97:f6:
d2:68:d1:45:f9:ad:8f:61:65:d9:87:c5:a0:7b:ae:d3:2f:b4:
e5:f9:6d:14:d6:68:1d:db:9c:bd:7b:8d:55:4b:4a:e3:87:8c:
fe:d3:aa:53:76:54:8d:5a:ef:05:b0:11:bc:6d:f2:9d:fa:c8:
3b:ca:1b:55:23:aa:7c:fc:a6:ff:7a:ef:50:0c:7e:84:b5:f4:
3b:3d:dd:61:e4:76:bd:0b:ef:66:2d:b1:21:1b:16:7b:43:c5:
22:2f:b1:b8:a7:9f:49:d7:e2:47:50:45:3d:01:eb:7c:21:d5:
00:d4:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:23 2023 by rpki-client on console-fra.rpki-client.org